Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa
File:                     ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa (raw, json)
Hash identifier:          6rnL3WuUldzbwnGq8U4Am3IQdDwUHN71SkapDVXU37c=
Subject key identifier:   EB:22:33:F5:82:B4:D0:FA:26:4E:F6:8D:9E:26:61:51:70:70:BF:DF
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285847EA5A03A699EE5A87E7C89440
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     31898
IP address blocks:        199.87.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:03:a6:99:ee:5a:87:e7:c8:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=198a74f8-24eb-4396-b5e8-5d9718439a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:98:53:ec:5d:8a:ac:77:e2:e5:da:51:9e:
                    3c:c0:2a:25:1e:5f:f8:d9:dc:3b:54:fb:a4:11:48:
                    07:30:18:48:22:f5:88:4a:60:3b:35:c9:54:8f:e3:
                    83:a1:7e:4e:fe:03:71:14:fd:56:0d:76:23:48:b7:
                    5f:c9:ab:09:ac:8e:e8:d9:17:74:75:ec:1e:af:a6:
                    48:90:cd:03:c8:a9:b0:ab:92:71:5c:e8:0a:af:04:
                    85:f4:04:81:21:b9:56:49:44:7d:41:41:d9:d4:45:
                    2d:67:6a:6b:77:10:55:c4:00:fa:89:74:d4:61:7b:
                    7f:b9:02:77:d9:2a:1e:8a:5b:94:d0:58:fb:e1:a5:
                    83:ff:02:9f:54:51:cf:39:bf:b2:47:3a:86:41:62:
                    bf:a9:e6:88:1d:2a:d3:37:76:99:ba:bb:d3:39:97:
                    a5:21:77:6e:1f:9d:bf:29:d2:15:98:50:e1:e9:a2:
                    57:d6:9f:b1:cd:db:9c:bb:10:d1:93:e9:f7:b7:38:
                    54:c6:a8:1b:75:57:0d:b2:49:cd:ac:9c:94:f5:d9:
                    33:bb:fb:b2:dc:b1:a0:55:a5:1b:3f:29:72:48:0b:
                    5c:b7:cd:4f:4d:cc:2a:0b:57:15:ce:ee:62:d5:82:
                    1f:48:a4:02:e0:13:30:ce:dc:b1:b9:07:cf:e6:55:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:22:33:F5:82:B4:D0:FA:26:4E:F6:8D:9E:26:61:51:70:70:BF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:c4:95:0f:18:81:f2:fc:15:9f:15:29:23:2c:7e:67:e7:
         4e:48:96:7a:dd:e6:31:69:25:ad:cf:dd:e5:30:2a:a1:fc:3c:
         f1:4c:53:5d:3e:46:7b:04:23:ed:1f:d3:d9:7d:72:74:4c:6a:
         1a:c8:0d:e7:c2:99:53:9c:0f:58:fe:f5:32:dc:d8:bf:e2:11:
         be:e2:09:3c:3f:00:65:0e:c6:7b:52:d6:1e:45:a9:1a:8a:28:
         ec:a4:b8:b5:f3:9b:e1:ab:6f:ed:09:1d:28:91:c8:96:7a:bc:
         53:0f:ef:38:1a:f9:56:aa:37:d8:18:01:4d:df:e1:7b:bd:1c:
         a7:07:a3:8c:f8:2b:80:a7:1c:19:03:9d:b2:ab:04:f3:f4:fc:
         fb:7b:83:89:f9:6b:a3:07:56:73:03:b3:c2:d9:7d:67:f7:ff:
         32:38:e0:c6:f9:c4:fd:eb:e7:31:a3:d2:ad:a5:48:15:d8:01:
         bf:0f:8a:2c:21:84:8c:11:1c:d5:20:d4:3d:18:5b:20:00:5b:
         38:f7:ac:93:c3:a4:58:7b:b9:19:fd:f8:8a:34:21:f7:61:a3:
         4b:af:2f:0a:c6:d6:be:cc:8b:bb:38:1b:5b:5d:b5:6a:57:8f:
         02:99:72:1c:0d:2a:47:7c:64:6c:09:f3:2f:fc:13:a3:60:12:
         7b:16:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:38 2024 by rpki-client on console-fra.rpki-client.org