Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
File:                     a8529787-c060-33e4-86c6-8d72789c4686.roa (raw, json)
Hash identifier:          wQKH0e03TIwmwYbfpcOax7ads/yzWpAWlVGFCCmeY6U=
Subject key identifier:   35:9D:77:99:B3:B7:59:14:AD:B0:58:0E:88:48:FA:49:FA:F7:1C:05
Certificate issuer:       /CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
Certificate serial:       010D0C9F4328584511B59239330E84086DB0BF80
Authority key identifier: 64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     62647
IP address blocks:        198.49.46.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:92:39:33:0e:84:08:6d:b0:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=a6aaa1ce-11a5-462c-a6b9-84bb7ba4ddc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:70:35:18:65:14:8c:ca:64:18:d8:3b:5c:
                    f4:f4:cc:c5:72:7d:af:15:b7:05:a3:73:2c:74:c5:
                    72:42:2c:52:83:cf:11:f7:fc:54:6c:46:d3:11:61:
                    4f:23:9b:d3:2f:59:2c:c9:4d:72:9b:ed:4d:97:a4:
                    b6:c0:14:32:c8:99:58:ec:98:5c:80:56:b0:85:b6:
                    bb:66:2c:9e:26:9a:ce:54:11:89:72:12:2a:4a:50:
                    62:3c:d8:ba:50:6d:01:c2:a6:ff:bd:9a:14:37:df:
                    fd:df:91:92:f0:b8:a4:4f:97:a9:85:50:19:9a:85:
                    22:17:9b:7a:15:a8:eb:10:d5:f6:53:56:5a:ab:8f:
                    4d:c8:ec:a3:90:6c:ba:c3:97:6b:17:d5:cc:14:92:
                    7f:d6:a7:64:af:16:fc:85:d5:33:2d:89:4d:71:13:
                    cb:f9:61:c8:0c:b3:2e:96:c8:95:48:15:b3:82:73:
                    47:82:d1:ae:e0:8c:bf:aa:9b:e9:d4:2a:3b:07:e0:
                    cd:fc:e9:f1:be:35:09:e3:6f:db:00:24:38:7d:04:
                    c1:10:69:69:86:9b:51:4f:5d:3d:27:9b:03:20:60:
                    2b:e7:8b:f9:94:08:08:a8:fe:1f:ae:97:1d:56:32:
                    14:4c:20:cb:2b:df:81:cf:ed:3b:d9:95:f8:a9:e1:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:77:99:B3:B7:59:14:AD:B0:58:0E:88:48:FA:49:FA:F7:1C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl

            X509v3 Authority Key Identifier:
                keyid:64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ca:ed:da:c1:da:d1:4c:70:26:bf:20:51:28:ca:57:d8:6d:
         1a:c1:94:28:a1:58:a9:90:8e:dc:70:2e:36:f5:de:79:92:8a:
         94:d7:69:8c:26:60:fc:05:b4:97:ea:f9:9a:8b:8e:66:7d:96:
         5a:0f:ac:5e:e6:2b:cf:8d:0a:7b:90:ee:c9:77:a8:10:f2:56:
         a1:86:27:52:b9:53:7a:60:c3:8f:57:8f:8f:d4:ec:91:f8:5e:
         fc:8e:f9:5d:da:6e:d0:1e:31:45:8e:91:c7:a7:32:87:4d:e3:
         08:b3:e9:01:68:a6:81:4e:54:25:47:26:8f:28:20:7b:c0:53:
         d6:11:4d:32:f7:9b:01:1f:4a:56:2c:2e:98:4a:c4:19:48:c5:
         46:42:dd:06:3a:cf:2b:48:7e:b9:9a:d2:fe:aa:8e:e1:99:05:
         07:58:04:b4:c3:87:84:31:b5:dd:7f:12:f4:5d:eb:d2:d0:f9:
         aa:94:6b:f5:8d:7c:98:92:be:30:57:3d:37:da:b4:6b:ba:67:
         53:4e:f2:33:14:0d:44:7c:95:96:f8:e0:15:a4:c8:96:8d:86:
         b5:8b:9c:43:90:f9:c9:4c:2a:f2:36:04:49:d5:00:96:32:44:
         3a:e8:81:d3:45:5b:99:2e:f7:a6:e9:83:35:88:24:4c:96:30:
         cf:77:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:14 2024 by rpki-client on console-ams.rpki-client.org