Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa
File:                     56b50f1e-7768-31f4-883e-4ac810d5160b.roa (raw, json)
Hash identifier:          +xtwT1pEZGyVCnia3fPCarF9KnOei0JjQTHDT6mPrmw=
Subject key identifier:   32:51:D8:B5:87:EF:3D:C2:A2:FC:46:E2:DB:EF:D0:5E:6B:A2:07:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A96FE75638603C8E9CEC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        198.45.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:96:fe:75:63:86:03:c8:e9:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cb707670-7d42-46a3-990a-f4ee1bdf0949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:69:b6:60:82:fc:62:62:26:b6:43:7e:b0:
                    bd:1e:bf:f4:67:09:58:59:43:61:b0:a0:0e:8c:c4:
                    84:bc:54:21:5b:bd:59:73:57:95:a4:b2:77:9b:fa:
                    8b:da:56:ed:a1:69:dc:54:47:da:0b:d1:75:18:06:
                    27:45:29:fa:1d:3e:6c:80:8d:27:7e:da:4a:77:f9:
                    8f:18:b0:2e:1b:7f:53:c3:84:c6:e8:e9:c5:cb:e0:
                    44:39:3f:e3:20:70:9f:64:d8:7c:68:ef:64:9a:0e:
                    b2:cc:6c:73:5d:97:f7:fb:10:04:57:98:1a:5e:47:
                    82:d4:13:8a:0b:70:e3:74:66:4a:d9:16:af:58:e2:
                    33:b4:7f:43:c4:b6:4d:05:81:e4:86:6a:9a:ad:a7:
                    cc:51:18:30:7e:e1:22:dc:57:29:fa:8a:2e:54:f1:
                    9e:19:75:26:93:1d:fd:17:6a:37:d8:4f:6d:a0:7e:
                    7d:d1:81:af:75:f1:eb:d9:e6:9a:63:db:42:ad:0c:
                    bb:a6:49:f2:77:c0:89:ad:3b:a3:7d:db:2a:54:b1:
                    82:c2:7f:0f:9b:a0:e4:d5:68:58:83:7c:43:5a:d8:
                    7c:18:b1:e2:dd:29:33:8f:ff:a2:af:4e:ed:7a:57:
                    41:27:0e:18:0a:8e:f7:39:5b:34:23:ba:2f:36:aa:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:51:D8:B5:87:EF:3D:C2:A2:FC:46:E2:DB:EF:D0:5E:6B:A2:07:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:82:6e:a8:98:21:06:9a:20:42:11:03:b5:3b:0c:92:4e:d5:
         aa:79:b1:a8:38:e3:9b:15:a5:e6:93:c1:e1:32:2c:c9:7a:08:
         be:ff:0f:f1:d2:28:d9:8d:4f:fa:b6:be:85:39:ad:8d:5a:0c:
         e0:a0:ec:fb:19:6d:ec:9f:bd:41:56:32:49:e8:58:c2:53:8b:
         08:07:4c:79:03:8f:f1:4b:c5:9b:fa:d4:ce:c8:1b:be:5a:d6:
         db:48:db:ed:03:e4:e7:7c:76:a7:24:34:1b:cb:91:e5:68:7a:
         8b:44:41:d1:b8:b8:00:cb:4c:df:db:c3:e3:5f:93:32:1a:de:
         14:3e:e9:eb:0f:41:01:62:6b:d7:48:96:e2:c8:33:24:83:86:
         31:fa:e9:b6:f3:48:46:a9:ae:d6:39:e0:d0:1f:3f:f4:fa:fc:
         7d:96:fb:db:87:da:2f:83:2b:4d:d5:2c:95:af:01:2e:cc:bc:
         db:25:8d:d3:4e:15:74:6e:e5:5a:01:98:e5:4d:11:88:b9:5a:
         28:67:d9:11:86:c7:96:a4:c6:d3:ea:95:62:38:c3:7b:c4:b7:
         01:25:84:a5:d9:57:9e:a3:ce:07:b0:40:ef:4a:38:0c:d3:df:
         e5:b0:f5:38:e4:8d:89:2f:4d:52:62:25:16:e6:14:5f:75:91:
         8e:3f:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:47 2024 by rpki-client on console-ams.rpki-client.org