Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/668022d2-73ad-3719-a3aa-730c3feeebc0.roa
File:                     668022d2-73ad-3719-a3aa-730c3feeebc0.roa (raw, json)
Hash identifier:          JWug0Z/qXmrDXCCmKbjWqCqGQ4Pw25sw3X4bo/1BB/c=
Subject key identifier:   A6:7C:D7:52:F9:74:05:98:1D:A7:7D:F4:F4:2F:8F:9D:19:F3:CA:D4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A996873B426A41E19A2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/668022d2-73ad-3719-a3aa-730c3feeebc0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        198.45.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:99:68:73:b4:26:a4:1e:19:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=436c2525-9c2f-4575-aa6d-e7f9111829b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:6d:0c:0c:94:39:dd:ca:a1:9b:79:51:cc:
                    05:73:92:35:b4:36:b7:d3:3b:36:6e:ae:62:25:e1:
                    4b:d0:7b:14:71:bc:ac:e9:e6:89:b4:62:1f:31:e4:
                    d5:2f:2b:51:a8:f4:1f:4a:83:3b:9d:c6:91:e4:1e:
                    0d:c4:25:80:e5:a5:d9:8e:56:c1:4f:6d:6d:25:91:
                    94:ea:6a:89:71:e8:c4:44:a0:da:16:71:18:9b:74:
                    76:12:9b:ae:72:27:b6:cd:a1:e9:22:fe:22:28:96:
                    22:f4:6b:16:d1:15:a6:98:94:b4:45:4e:c7:b1:6a:
                    ed:aa:62:1e:fa:4b:54:f6:d1:7f:bc:ab:ff:38:b4:
                    bd:57:35:cd:ef:69:1c:25:69:2e:a1:a9:80:58:bb:
                    eb:54:55:1c:b1:84:60:98:c4:99:63:ba:c7:02:22:
                    ad:37:48:50:b0:07:01:b3:70:3a:e9:84:72:f1:40:
                    f3:2f:14:05:2e:95:d6:ba:b2:7a:77:ab:ad:c4:78:
                    c4:31:4c:47:f3:2d:90:9d:fe:22:e8:be:03:cc:42:
                    87:27:5e:04:cf:94:8f:ca:18:38:c7:2d:19:52:34:
                    5e:18:d4:19:83:2f:7c:5f:df:95:31:14:89:0b:63:
                    06:07:84:07:71:e4:02:f8:a2:44:89:e3:0d:6e:fe:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7C:D7:52:F9:74:05:98:1D:A7:7D:F4:F4:2F:8F:9D:19:F3:CA:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/668022d2-73ad-3719-a3aa-730c3feeebc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:f7:60:a3:d4:5c:d1:24:5c:d7:f2:6f:a2:c9:f9:31:3c:
         cd:85:1b:43:92:68:16:fe:bf:43:f4:35:ef:4a:54:0d:eb:d2:
         5e:a2:8b:43:63:28:71:3c:7c:e0:f1:1a:fa:6e:dd:bb:e0:75:
         50:21:e1:dd:80:1f:92:a2:85:a5:16:f3:48:20:ee:90:0c:02:
         70:3c:07:f7:0f:8f:5a:53:7e:ad:d2:98:d3:24:d0:f7:68:1a:
         01:55:c6:83:43:4a:4b:76:59:ae:e2:cd:80:4d:95:82:43:ff:
         95:a1:08:c7:17:de:5f:83:c7:a6:03:15:c3:34:83:49:67:15:
         86:70:c8:21:2f:5f:74:8a:ba:5f:bb:e3:62:e4:4a:9a:a6:7c:
         a4:f2:5d:4c:4d:1c:46:41:6b:76:6a:90:06:46:09:86:c4:b3:
         b3:c4:00:0e:0a:6c:aa:8d:dd:b0:c5:6a:83:d2:59:9d:8f:84:
         7f:1d:55:3e:2c:ed:a0:79:77:0d:ea:a0:81:fe:21:88:e5:85:
         42:33:a1:a9:1b:c9:8f:a3:0e:a3:64:26:e1:a6:b7:52:7f:08:
         54:10:ae:96:40:ff:f1:d5:cb:7b:c9:be:ae:a3:5d:8d:5c:f8:
         be:01:08:8d:b3:84:35:a7:16:d2:99:35:32:86:36:90:4b:20:
         3a:e1:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:55:09 2024 by rpki-client on console-fra.rpki-client.org