Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4786074a-8f2d-35fb-b998-aa42a6beb510.roa
File:                     4786074a-8f2d-35fb-b998-aa42a6beb510.roa (raw, json)
Hash identifier:          qloSwvQcBJ8l1mIT/3dd5bwOTU7hPyxlqW6tKqwhoKw=
Subject key identifier:   B4:16:E0:4B:65:EB:85:97:A9:48:28:31:2D:00:1B:DC:F9:FB:7A:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A99AA0F51327543569700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4786074a-8f2d-35fb-b998-aa42a6beb510.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        198.45.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:99:aa:0f:51:32:75:43:56:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cff7344d-ac16-424e-98f4-a7994e76e260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:a9:ba:3c:4a:48:48:11:64:83:7f:6a:66:
                    ba:94:d0:18:e9:b6:f8:f7:74:87:0e:6c:2d:2e:54:
                    95:3c:ef:d2:10:38:be:04:18:94:f0:15:a3:3d:e4:
                    6d:c5:a4:93:4b:d4:f8:58:91:cc:09:66:b1:96:86:
                    ac:83:aa:61:b6:b2:24:67:e8:19:b4:ff:8d:75:9d:
                    c4:18:36:28:df:3c:bc:26:0a:0d:0b:7d:b0:26:f0:
                    23:3a:64:da:7f:e5:8d:f7:7a:e5:d4:3b:15:d7:6f:
                    ce:3e:41:c9:15:53:b1:ff:2c:62:44:9c:55:ba:dd:
                    fd:20:8e:28:f2:87:d4:03:3f:cd:d1:fc:78:49:50:
                    96:14:1e:60:b7:dd:04:1f:2f:29:06:86:94:1c:a3:
                    36:d3:aa:98:1c:4b:7f:d0:74:d7:70:d1:a7:0d:f6:
                    15:6c:d0:6d:23:02:a3:3f:e0:d7:00:2d:60:1e:f2:
                    3b:7e:f7:a6:4d:12:7f:9d:be:23:4f:61:18:bd:f2:
                    05:19:9a:ca:86:b9:46:cb:93:ad:43:cc:bf:28:0a:
                    05:16:a7:4b:d7:33:07:a1:d9:4a:e5:19:bc:d5:54:
                    22:00:cc:2c:74:6c:01:14:9c:1e:7e:2b:c7:8a:73:
                    e4:45:ba:aa:9b:fe:01:fe:23:10:f7:15:bb:80:3e:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:16:E0:4B:65:EB:85:97:A9:48:28:31:2D:00:1B:DC:F9:FB:7A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4786074a-8f2d-35fb-b998-aa42a6beb510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:53:12:82:ee:0d:14:06:10:59:5a:e4:5e:3f:48:4a:cc:34:
         af:d1:5c:62:db:98:a5:cf:52:79:24:6e:86:9c:49:31:e9:46:
         dd:33:3e:0d:e0:8d:36:54:ce:b9:50:f5:d5:ac:06:88:2b:ba:
         7d:43:52:dd:b9:5f:ac:9c:54:04:ff:56:b6:c8:bc:94:5e:23:
         97:d5:20:52:c9:5d:89:f2:60:81:72:7a:b1:73:8e:3f:22:9f:
         2e:e3:3c:56:80:c2:bc:a8:98:24:47:6f:33:87:91:2c:f1:07:
         42:53:ed:e1:d9:a5:85:2f:fa:6e:17:b4:f7:cc:42:cc:a0:19:
         69:a5:70:b1:6e:82:68:01:11:b7:3c:6d:9a:a9:c1:1a:34:e5:
         df:46:00:eb:36:63:da:13:94:8f:0e:25:8e:9d:53:23:89:d6:
         4e:f3:b7:cb:86:d6:24:2d:03:90:a4:4e:f3:d3:f9:4f:26:71:
         46:97:f8:4b:c0:a7:e9:b5:66:03:ba:d0:6e:45:5f:aa:5f:0f:
         c7:db:4f:37:67:31:d8:61:55:10:28:37:0b:1e:2e:4a:be:5a:
         de:6d:2d:f5:a1:c5:8f:92:7c:83:73:18:1b:73:c9:9c:d0:d7:
         40:97:3a:a5:95:27:b5:83:85:bc:8a:30:e2:7f:f5:61:b3:fc:
         c1:78:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:39 2024 by rpki-client on console-ams.rpki-client.org