Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa
File:                     4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa (raw, json)
Hash identifier:          gEOgFt/1POdef6DqpICZczgEC37p8YbQ7POyF8U/u5Y=
Subject key identifier:   42:B8:51:39:BE:BF:79:49:5F:53:91:0D:B0:0F:65:D5:AD:59:2F:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B2CA2981FC65FA78A2400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        198.45.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:2c:a2:98:1f:c6:5f:a7:8a:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6440f87d-0703-4c23-92c4-2f134c481846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:15:64:67:4a:72:0a:d8:5b:90:d6:08:15:d3:
                    0b:bd:9e:1d:85:4e:58:b6:c1:37:c8:e2:57:d3:eb:
                    57:85:61:ab:3e:55:ad:4b:65:f4:de:93:fd:5e:85:
                    a1:57:4d:ca:ca:82:f6:97:30:05:16:ba:19:13:ec:
                    b2:12:84:e5:43:46:87:68:01:4f:7d:95:7a:a8:1f:
                    84:69:16:83:84:03:2d:1f:17:a3:01:48:fa:c1:3c:
                    b7:ed:65:f5:e5:10:c0:94:cd:0c:e6:b2:a4:6f:0c:
                    e4:61:17:90:d4:f6:24:65:d4:de:40:4b:3c:4b:7b:
                    13:91:46:98:c4:60:a3:7b:ef:3d:d0:96:d0:54:7d:
                    95:a7:81:fa:2e:9e:67:6f:2f:6e:28:bf:91:48:fe:
                    2d:7c:05:4d:a1:3f:8f:46:c5:59:0a:aa:f1:75:93:
                    ed:4c:ab:9c:2b:cd:e3:54:3c:d7:20:1e:67:d8:2b:
                    e1:2d:59:aa:ff:e5:6b:e5:05:5d:0f:a6:ac:ff:e3:
                    4d:63:d5:06:44:e7:73:d3:cf:34:01:89:dd:cb:d8:
                    ee:4b:0f:a2:68:c3:f9:f4:b4:93:7b:0e:6a:e3:39:
                    cf:a1:9f:75:04:3c:ca:61:36:98:40:84:f5:5a:10:
                    99:ac:40:ba:bf:0f:a4:f9:0d:4c:77:e9:a8:36:e7:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B8:51:39:BE:BF:79:49:5F:53:91:0D:B0:0F:65:D5:AD:59:2F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6e:b1:01:48:7f:25:00:8b:53:7e:2f:c0:01:68:e5:d9:5c:
         a8:53:93:56:ab:59:e4:35:e0:b4:15:5e:23:f7:1a:9b:e9:1d:
         bf:c4:83:41:68:46:4a:7c:2c:17:3b:97:c6:16:8b:bf:48:c5:
         f7:d6:ca:5d:e3:95:7e:17:6d:df:77:73:df:3b:58:b4:84:ba:
         67:ab:64:4e:57:ea:f3:8b:c9:0b:59:3f:22:bd:f7:f4:75:70:
         b0:d4:26:02:08:e9:26:c3:fb:14:68:bc:0b:f8:b1:16:12:bc:
         19:2c:3f:54:ee:7a:f0:a2:33:0d:39:f1:67:cf:89:c2:52:89:
         51:e1:90:cc:d9:30:18:4d:af:cf:cb:84:b6:7c:83:77:03:d8:
         3c:18:ea:12:e7:e1:00:ec:18:13:40:2e:ba:57:78:c9:9b:3f:
         5b:4b:4f:09:12:62:16:41:83:97:c6:7a:57:ef:08:d1:71:f6:
         4f:c3:85:58:76:db:47:79:00:6b:0a:20:b1:5f:bf:4d:84:2e:
         78:e1:34:ba:8b:ed:50:a9:40:c2:d6:a7:92:fa:7a:3a:04:b5:
         8c:97:8d:0b:36:09:35:74:a8:f4:e0:35:e2:0f:2d:3f:b9:9a:
         79:de:b5:a1:4f:fa:ec:bd:68:68:95:18:de:e7:1c:97:89:33:
         dd:7b:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:30 2024 by rpki-client on console-fra.rpki-client.org