Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa
File:                     af0792a8-ca3b-323c-af22-eba4e83ee68d.roa (raw, json)
Hash identifier:          zFVKDgsJfnmTAgVwZijnp5btIXtcuGp4T6L6lZ5mfmg=
Subject key identifier:   DF:DA:4F:16:9B:B5:3A:61:88:AC:1C:34:9A:F8:B7:14:27:E5:57:12
Certificate issuer:       /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial:       010D0C9F432858474C80C00AABAA548D757C3280
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     29909
IP address blocks:        199.248.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c0:0a:ab:aa:54:8d:75:7c:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=545167fb-1672-45fe-981f-53916e58a8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:14:7b:03:64:ae:3f:cb:c3:a8:7d:e2:fb:56:
                    3f:8f:fa:d9:3c:75:53:ae:4d:5a:42:5f:84:2b:ee:
                    6f:bf:00:39:14:0b:03:36:0a:c5:42:81:87:18:62:
                    cd:2a:4f:05:35:0d:a6:19:aa:81:6f:a6:5a:7a:c0:
                    b6:7d:b3:58:af:3a:29:a7:df:45:fc:31:5a:4f:63:
                    c5:af:57:41:e2:2e:79:a5:4e:69:de:fd:ff:2b:ff:
                    22:0e:be:97:e1:87:ed:30:cf:8a:3a:52:50:fa:aa:
                    83:07:ea:c1:f1:a0:04:7b:80:39:5c:bd:0f:49:de:
                    77:3c:b2:eb:5f:8e:69:f0:0b:38:2c:db:42:ca:dc:
                    0d:91:c0:75:fb:31:e9:b9:b1:e8:a9:18:6b:b4:8c:
                    e9:f9:28:07:63:4a:81:77:11:f5:77:1e:13:62:e7:
                    8b:40:60:dc:be:55:1f:56:82:09:b6:74:ae:64:c7:
                    04:0c:e5:20:40:cc:f6:f3:7b:89:c7:ba:1b:a9:a3:
                    c1:ed:4a:4d:29:01:3d:65:e4:bf:ee:e9:84:74:5f:
                    e5:10:f7:db:a8:b4:cd:6a:41:49:60:f2:a0:b8:36:
                    e2:9b:6c:91:59:14:32:b7:01:14:0f:08:38:4e:76:
                    e7:80:8c:30:2a:bd:11:5b:ef:ab:c9:08:6b:38:fd:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:4F:16:9B:B5:3A:61:88:AC:1C:34:9A:F8:B7:14:27:E5:57:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl

            X509v3 Authority Key Identifier:
                keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:05:db:d9:b7:37:78:4b:8a:59:fc:f0:58:85:4c:25:d5:78:
         aa:2b:cb:06:9a:e6:82:16:89:51:18:52:67:a1:de:ea:f9:93:
         03:35:e6:72:5f:b3:25:02:34:b8:9c:22:db:fa:2d:f0:ae:0f:
         57:58:40:55:19:af:78:60:26:e4:91:9a:6a:bd:fd:f6:19:ba:
         6c:e1:a1:fc:f1:ca:57:26:5c:8f:43:e9:5b:4a:be:40:e3:f9:
         fd:56:a7:cd:aa:85:30:79:90:33:de:0b:a3:eb:57:dd:9a:66:
         a7:ce:a5:ff:55:b9:ac:c0:32:af:af:1d:bb:a6:29:10:24:2e:
         0d:11:98:0d:53:a6:49:6c:05:70:c5:ba:42:76:ce:2c:13:78:
         57:1f:05:41:ea:61:83:29:51:cf:d4:7f:77:61:a5:25:3c:1a:
         68:cd:ee:97:c9:c2:e4:dc:ef:d3:54:85:41:44:b5:c9:dc:f4:
         b3:ca:83:c1:a3:06:7a:1a:af:c2:10:dd:e2:f2:32:90:e7:68:
         3a:5d:8e:1c:0a:a0:71:6c:0d:56:ec:47:19:97:b4:75:03:92:
         76:5e:18:cb:d5:4b:1d:09:9b:33:5d:8c:f3:4c:3d:e8:3a:a9:
         08:76:54:86:1f:e0:d5:b6:58:fe:1b:6e:8a:b8:5c:7e:f9:aa:
         84:fe:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:40 2024 by rpki-client on console-ams.rpki-client.org