Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa
File:                     121682d9-0042-3d35-9285-843fe168fa1e.roa (raw, json)
Hash identifier:          s2N0SUTg0PHJZGGuCQ/wLLBtdAMU+as+Cu2jRwoKxTs=
Subject key identifier:   61:32:64:78:7D:16:CB:0C:22:9F:DD:FE:69:A0:55:2A:35:8C:A2:70
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285845D0D39D972A906BCA2CC1C000
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     46562
IP address blocks:        198.145.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:9d:97:2a:90:6b:ca:2c:c1:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=f9e210c1-b73b-448c-b98f-40605c77e09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:6f:f4:94:5a:a5:ed:5f:7c:5d:94:ee:29:
                    01:0f:5b:55:be:e0:4f:9c:0b:37:21:e7:67:d7:56:
                    39:40:cc:c7:d3:29:6b:80:28:15:19:64:ea:c8:0e:
                    d4:31:af:d8:66:02:bc:36:35:ba:20:a2:6e:5b:e9:
                    ea:d7:19:ad:5b:1e:42:82:87:8e:81:92:ca:be:17:
                    60:e0:8b:37:27:f0:78:df:a4:ba:f0:c1:e6:28:31:
                    8d:f6:0b:da:17:fc:ac:48:e1:25:fe:c7:95:00:a5:
                    b7:41:9c:ab:c4:17:07:1b:50:75:07:f1:7b:18:48:
                    fe:93:b0:90:43:a1:e1:58:43:21:4c:ee:c6:38:e1:
                    ea:63:3c:73:b5:d3:01:ed:96:a9:cf:05:2b:e6:0f:
                    28:ac:ae:11:b9:e6:18:6d:24:d4:1f:99:6e:45:51:
                    9c:77:41:d2:2d:44:2f:b8:7d:e6:87:88:d1:95:be:
                    66:7a:b2:e6:8d:e9:de:6c:c8:8c:34:8a:53:2a:30:
                    7d:41:88:cf:54:ec:9e:c0:9d:de:be:e7:f3:0b:12:
                    81:93:a0:33:47:e7:7c:76:8f:66:62:29:84:16:6d:
                    50:a8:46:5c:b7:18:a1:7e:de:d8:80:94:fe:11:9c:
                    d5:9e:32:0d:6e:29:86:0e:71:22:3a:58:25:b7:cf:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:64:78:7D:16:CB:0C:22:9F:DD:FE:69:A0:55:2A:35:8C:A2:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/121682d9-0042-3d35-9285-843fe168fa1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:1c:45:ef:3d:8a:17:60:b6:45:b9:9d:3d:61:bf:a7:4f:18:
         4b:27:ef:35:8d:58:f3:22:cd:a6:85:2d:c2:eb:1a:08:9a:6c:
         a7:a0:1b:fd:f2:16:a3:6d:38:29:2a:66:1a:3b:1a:f3:8a:73:
         c3:e2:11:93:94:5f:c9:75:ac:f1:7a:3f:7f:c0:60:dc:30:7d:
         39:83:a6:8a:27:df:7e:52:2f:d1:13:e3:01:66:c6:e1:4b:5f:
         dd:12:0f:e8:16:76:13:bc:82:f6:7a:74:4f:f7:5f:85:f4:f2:
         ac:7c:b4:a5:73:3a:52:1f:6a:c7:80:f3:21:c0:b3:2c:7e:cc:
         a4:c1:9e:24:44:52:55:46:66:52:94:1f:0f:f6:17:e1:fa:d5:
         e7:0e:56:81:dc:24:49:8c:9f:da:a9:0d:6a:e4:a9:3b:e4:3b:
         c3:c2:d1:2f:8a:95:65:97:f3:ef:79:dc:ea:9f:4c:0f:d3:69:
         81:f4:9c:30:b8:7c:ab:f4:1d:bd:28:49:af:ab:5b:41:46:53:
         16:79:27:65:e7:81:9a:cc:61:9b:63:1f:b2:d7:fb:f2:b0:d8:
         97:70:3e:b6:20:51:ea:5a:fd:ab:be:1c:ed:f8:01:72:af:9b:
         54:d4:b5:0f:64:60:4f:41:2b:ab:7d:ae:b7:b2:ba:b1:d7:ea:
         92:18:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:27 2024 by rpki-client on console-ams.rpki-client.org