Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa
File:                     e5e560e3-7114-3301-9261-7725a1241fa8.roa (raw, json)
Hash identifier:          yXCmLzKXzPKjBd3+62kCOOFubAssV2+roJVPjzk6Ngw=
Subject key identifier:   7E:F9:71:02:1B:77:AB:BA:E4:4F:E0:8C:83:89:16:D5:13:53:C8:CE
Certificate issuer:       /CN=afac962a-1647-4571-99e5-a23db5fd79d7
Certificate serial:       010D0C9F43285847E094BC1351570E9C338D4780
Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     4186
IP address blocks:        198.137.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:bc:13:51:57:0e:9c:33:8d:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=45e77fd1-ebf9-4c32-8557-661325d3b71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:26:69:b4:8f:00:54:ef:4f:73:ea:a8:e9:
                    d4:e5:0f:52:71:a1:d0:89:9d:61:71:4f:f8:92:3f:
                    91:6e:a7:61:41:50:aa:0f:24:56:e9:fe:0c:0c:58:
                    98:94:d6:65:87:ac:6a:76:70:d6:bb:e9:40:d5:5a:
                    13:3b:01:8a:4d:74:91:56:88:6b:64:29:8e:36:86:
                    be:f3:1e:37:9f:53:53:48:24:bb:74:71:3c:51:c4:
                    e7:fb:21:04:b4:25:7f:14:6f:05:16:8c:9d:8b:f0:
                    d1:ff:08:a2:bd:e0:2f:8b:94:6a:2b:a8:ac:3d:03:
                    35:dc:68:9b:6e:22:5a:87:9c:ce:78:55:00:38:59:
                    78:61:9e:31:54:3b:c1:dd:63:ca:d6:84:a8:07:86:
                    9d:4c:b2:a0:1e:c3:c6:f1:76:75:16:50:95:95:8d:
                    35:a8:09:5e:0f:80:a5:80:1e:a2:19:82:97:4a:c9:
                    8b:00:d8:53:d7:4c:e0:29:22:98:43:7a:7f:8b:4b:
                    e4:e4:63:42:d5:d1:06:ff:4f:3f:73:c9:53:b0:7b:
                    49:d3:ad:e8:f2:87:ce:10:ab:9b:29:ad:87:cb:45:
                    1c:32:16:39:b5:60:da:01:61:2f:4e:c7:a4:1b:0a:
                    63:90:05:18:76:90:3c:94:ac:86:42:da:cd:d7:0e:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:71:02:1B:77:AB:BA:E4:4F:E0:8C:83:89:16:D5:13:53:C8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl

            X509v3 Authority Key Identifier:
                keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:05:55:63:bc:7b:4e:e5:29:0b:67:1c:66:ae:ca:62:3b:35:
         2e:e9:c9:5a:6e:ab:df:82:a1:b8:f1:5a:49:28:c9:69:89:35:
         c1:3a:83:62:b8:c8:2c:5e:ce:66:8a:81:cc:1b:24:fb:a3:d0:
         f5:e3:cc:44:e5:85:64:91:f0:a3:86:cd:7b:a6:fd:af:fe:09:
         2a:e7:84:2d:3f:8c:7f:a8:cd:e4:c3:84:f7:ba:94:41:85:5f:
         68:af:5e:a8:80:32:69:4b:4c:7e:9b:8f:b9:93:98:7e:7c:ca:
         33:15:2a:66:e9:13:72:9d:99:9e:d0:87:3e:af:3c:2c:56:3a:
         1a:62:4a:b3:cb:40:df:01:67:56:45:2c:cd:18:0c:55:fe:ef:
         5c:31:16:a0:75:ec:38:e7:0b:46:cb:88:68:4b:f9:38:cd:94:
         f8:73:1d:aa:3a:5b:43:09:3d:b6:32:8c:95:c8:82:58:46:70:
         ef:3e:07:e0:57:89:27:45:ff:41:96:6a:5f:24:7c:e5:81:23:
         99:d6:23:f9:42:47:c4:de:78:7a:61:77:53:b8:a6:b9:ff:4b:
         72:1e:4c:27:e3:e2:33:3e:41:a8:7b:eb:3f:a6:77:f1:af:2e:
         11:c7:22:12:11:1a:46:4c:bb:52:c9:7b:ff:d6:b1:53:1d:53:
         28:9a:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:14 2024 by rpki-client on console-fra.rpki-client.org