Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
File:                     81d14041-cb0e-36df-be9e-80b114230d9a.roa (raw, json)
Hash identifier:          BuRQGBqiZ+CYCFhuXrrezkbK0f+3C1+VUQFwS3dE2PM=
Subject key identifier:   B1:3B:05:CF:F7:35:BB:6D:97:55:A1:27:0B:8F:2A:0E:8C:FC:E1:E0
Certificate issuer:       /CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
Certificate serial:       010D0C9F432858456C531DC763F53E6E18CE84D0
Authority key identifier: F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        198.137.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1d:c7:63:f5:3e:6e:18:ce:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=b65435da-8fde-4f1f-a60c-9eab0bb24ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:1c:6d:ff:dd:ef:8d:35:06:89:93:eb:fa:
                    fd:a3:f6:06:8e:72:25:c8:bf:04:8b:d2:5c:4d:9b:
                    68:26:b1:56:eb:ea:7f:45:ca:6c:17:a7:16:da:59:
                    1b:72:0a:39:21:17:ad:1c:d5:c8:c2:b4:70:9d:f9:
                    a3:1b:cc:8c:02:57:e9:d2:f2:2c:76:86:33:ce:77:
                    fc:32:b7:7b:a0:76:7a:db:50:92:10:fa:b3:32:40:
                    34:c6:48:04:4e:dc:e6:1e:19:e9:e4:92:97:9d:10:
                    4a:18:3a:c3:df:96:5a:4f:36:25:84:d7:16:79:c0:
                    00:c0:19:01:56:ad:42:b4:b0:35:99:ab:12:84:0c:
                    99:2a:b4:c8:a5:e8:43:f0:ae:9b:b8:7f:db:f4:91:
                    ec:0d:73:2d:c7:59:7a:1a:d1:a3:89:98:a6:a3:37:
                    14:6e:45:a4:5f:e7:61:e2:a5:51:60:e2:b6:d7:3c:
                    5b:61:90:40:12:88:d7:9c:f4:65:a7:a5:44:95:7a:
                    00:3c:c9:8a:57:e9:be:75:b9:41:f4:0d:ed:4a:5a:
                    a4:cb:47:4d:97:d7:73:a9:6b:06:d2:5b:40:29:a3:
                    f0:a2:87:79:ce:85:39:28:78:80:eb:94:b1:61:2a:
                    c4:3c:52:6a:e1:af:64:22:09:df:22:95:77:2a:e3:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3B:05:CF:F7:35:BB:6D:97:55:A1:27:0B:8F:2A:0E:8C:FC:E1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl

            X509v3 Authority Key Identifier:
                keyid:F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:98:28:98:bf:06:ca:9f:1e:72:a0:4d:11:9a:1b:58:10:2e:
         8c:b8:34:40:0f:d9:29:b2:fa:b5:68:0d:72:cb:45:ca:b4:0c:
         7d:c0:c8:9e:21:bd:0f:37:1a:98:7f:7e:c4:ae:76:82:1e:be:
         a5:52:62:a3:ff:6f:50:2c:07:4e:28:db:55:04:d9:3c:85:43:
         94:ab:b0:94:3c:a1:7d:18:fb:38:0a:c9:56:e4:60:90:cc:95:
         00:6c:d6:8d:aa:f1:c3:00:67:d9:c3:13:d6:13:dd:4e:d5:e8:
         ce:a4:35:3b:b5:8a:02:6b:33:13:ad:9a:cc:01:df:34:1b:7a:
         f0:3b:dc:a2:26:db:27:bd:b2:a8:7e:a8:4c:c3:63:5f:b2:56:
         8f:e6:44:54:e8:10:44:a5:5b:dc:cd:51:91:af:ef:ae:9d:36:
         cd:d5:9b:fa:ee:0a:f7:4c:6b:43:db:7a:20:c7:99:5d:c9:d0:
         1a:f5:8a:e3:38:e1:af:34:af:0e:61:28:4e:52:15:f6:1a:b8:
         ae:06:08:f7:89:21:b3:1d:d9:48:36:fe:df:13:2c:09:23:95:
         cc:5c:b9:ab:47:24:7a:9f:26:23:d8:e3:b5:96:6e:86:d6:84:
         3e:80:7e:3f:17:b9:46:cb:ae:39:f5:46:dd:ea:f1:60:84:af:
         3b:bc:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:13 2024 by rpki-client on console-ams.rpki-client.org