Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b841e665-b6e4-3827-8355-77cc86b4415c.roa
File:                     b841e665-b6e4-3827-8355-77cc86b4415c.roa (raw, json)
Hash identifier:          u1EarEE76BrCuBmkw6HuuDh2YdxlU//UMWQuM2ziKFs=
Subject key identifier:   1E:A2:8E:64:18:B4:CB:13:C3:4C:B0:E9:69:86:E1:0D:8E:84:8D:62
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285847AE36BA77BCD5202A66E4D2C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b841e665-b6e4-3827-8355-77cc86b4415c.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     6643
IP address blocks:        199.36.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:ba:77:bc:d5:20:2a:66:e4:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=7048583f-57b1-4c69-8d5e-8e8bbd5d72e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:fb:26:af:2c:5d:c9:b3:04:5a:2e:dd:07:
                    44:1f:10:ec:03:dc:ae:7e:e9:03:e4:88:e9:cc:c8:
                    b7:c8:37:79:07:40:8e:e1:7e:67:37:03:70:91:34:
                    4a:a8:a6:7f:ce:e9:ce:3f:1b:ce:63:db:a1:7c:66:
                    a4:3d:72:80:94:cf:aa:e8:ec:d8:b3:15:14:7e:56:
                    35:a8:c6:c2:04:90:a8:de:36:68:54:64:b5:5d:79:
                    05:9d:82:c3:f7:4e:d3:be:cc:52:df:f6:06:86:3f:
                    b4:ec:d3:9f:25:7f:85:a5:7a:05:17:85:cf:4a:c8:
                    ff:59:9b:21:52:44:bd:89:fa:27:d3:72:c8:c7:69:
                    c2:e4:08:91:1d:bf:c3:ac:eb:20:37:47:08:ed:71:
                    82:de:f8:05:05:1e:4f:1e:68:5e:66:73:85:3f:ed:
                    d4:cd:9e:2c:30:66:0b:80:c9:a8:c3:64:3d:4e:c5:
                    a6:38:af:13:cb:d9:e2:71:51:b8:5e:62:db:74:8c:
                    b4:61:d6:31:8a:95:92:7c:de:29:d8:0d:a1:7d:47:
                    62:08:e0:64:45:33:1b:4c:ea:5a:40:e8:56:89:fd:
                    d0:57:e6:9a:c9:6e:df:af:e3:6f:b3:4a:a0:8e:13:
                    16:95:6c:e5:3c:ac:ba:c9:97:60:d1:6f:f5:36:99:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A2:8E:64:18:B4:CB:13:C3:4C:B0:E9:69:86:E1:0D:8E:84:8D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b841e665-b6e4-3827-8355-77cc86b4415c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6d:45:ae:b9:6a:e3:99:4a:80:8e:11:d6:1c:02:a5:a4:e3:
         d6:4c:9c:97:e9:6b:7c:58:81:e0:a9:ad:27:9b:3c:ca:df:4f:
         3d:9e:44:3f:9f:bc:16:ab:ae:a0:82:21:9e:b3:04:2e:f7:71:
         3d:a3:46:76:62:6c:c1:1c:d6:66:c7:23:d4:ad:32:ef:98:4c:
         68:f3:02:19:f1:89:87:1b:37:d9:28:67:b4:79:54:58:a0:e5:
         b8:0e:03:a7:fe:07:a2:31:56:9f:80:cc:af:a7:75:7f:b8:f1:
         81:5f:5f:86:e6:4f:a8:2c:0f:46:9c:65:9c:7b:3e:56:11:5c:
         77:36:c8:2d:64:4d:d2:e0:0c:88:e2:c8:62:a7:c5:8c:08:cf:
         6d:0f:7b:2a:71:43:01:ad:5e:0c:18:9e:40:94:71:d0:ca:54:
         e2:ca:54:cd:a1:76:01:bc:f6:9d:f9:00:95:bb:d3:06:d8:33:
         90:77:c6:21:e1:d3:0d:28:45:ee:a8:75:c2:1c:26:8f:d1:16:
         bb:f4:fb:f0:bd:f0:8a:25:00:74:59:92:81:34:45:73:6f:6d:
         96:13:06:27:98:03:5d:b1:fd:35:7b:9a:ea:a9:1d:a9:42:c5:
         d2:fd:52:08:3c:a5:bb:0f:b4:98:6a:c4:71:ef:be:6c:6e:74:
         33:9c:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:39 2024 by rpki-client on console-ams.rpki-client.org