Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa
File:                     8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa (raw, json)
Hash identifier:          2HLjbxjcEh7iy4JnC5wNLV+2xn8QTy0020zigwP3xBo=
Subject key identifier:   63:7F:7F:D9:51:EE:2B:A9:55:43:A5:B0:D0:38:67:5E:9D:19:8D:06
Certificate issuer:       /CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Certificate serial:       010D0C9F432858467BAF79EC8C33378AF8ACC860
Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa
Signing time:             Tue 09 Jul 2024 17:51:00 +0000
ROA not before:           Tue 09 Jul 2024 17:51:00 +0000
ROA not after:            Mon 07 Oct 2024 17:51:00 +0000
asID:                     17207
IP address blocks:        198.59.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:af:79:ec:8c:33:37:8a:f8:ac:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd
        Validity
            Not Before: Jul  9 17:51:00 2024 GMT
            Not After : Oct  7 17:51:00 2024 GMT
        Subject: CN=c0fb0087-229c-41d9-aa49-c3d36b936d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:a3:56:f2:37:da:be:0e:22:28:a0:5f:9c:
                    03:08:48:32:8b:a5:f9:1b:db:d7:98:5e:bd:be:76:
                    d5:7e:86:c6:ae:1d:69:ff:05:5a:c1:28:43:98:eb:
                    32:66:c2:b7:e1:60:70:57:7a:9e:90:3f:d2:7d:f1:
                    10:4d:fd:d8:3e:86:4e:65:d0:89:2d:9d:59:3c:20:
                    51:cf:be:58:ea:b3:16:fe:20:a2:a0:78:5d:dd:28:
                    bf:dd:34:6d:de:28:ee:47:bb:0e:e3:10:fb:f5:7b:
                    fc:58:1f:84:54:86:98:c3:be:17:76:6d:fe:39:8f:
                    2c:6b:23:66:e3:21:7c:a6:56:e1:c0:74:e6:fa:2b:
                    bb:52:fb:34:9e:69:e3:d1:99:89:4d:72:7c:65:80:
                    fd:20:e1:c5:2d:b3:76:a3:cc:a7:da:b1:57:a0:b6:
                    ab:17:e5:10:97:6d:ea:84:b5:5f:ef:8a:8b:7f:e5:
                    d8:76:bc:93:04:ec:80:4e:0d:82:1f:c1:49:92:11:
                    37:31:11:c5:d7:a7:08:ad:d0:d7:75:12:35:c5:c2:
                    a4:78:c2:af:8c:f3:50:68:f4:20:03:5b:48:1e:79:
                    80:96:1f:d1:23:bb:a1:e2:18:b5:4f:17:4c:a5:ae:
                    28:46:bb:c5:0b:2f:18:fd:62:4d:6d:47:c0:26:b1:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7F:7F:D9:51:EE:2B:A9:55:43:A5:B0:D0:38:67:5E:9D:19:8D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl

            X509v3 Authority Key Identifier:
                keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:fa:b9:7a:4a:df:76:20:43:ef:bd:86:cc:66:74:a1:96:
         9f:b4:b2:bd:30:ac:e9:a0:04:b1:9a:e1:b7:0d:91:46:3c:58:
         8f:ef:02:bf:c0:c1:11:ff:21:a3:16:5b:18:74:15:ea:cf:f8:
         77:96:52:06:f5:10:c9:63:de:f9:56:d7:5a:bd:fb:2c:da:d5:
         df:12:65:bb:10:4d:02:6c:e3:29:e1:fa:d1:2b:e7:21:b6:72:
         48:31:6c:5a:6b:1f:59:ca:51:35:d7:a1:a5:c8:b7:b1:9b:33:
         40:1c:e1:74:1f:13:d1:e3:9a:83:49:02:3b:9c:ea:c4:d0:66:
         77:f4:fe:70:e3:20:b0:7f:96:a8:c8:ae:0a:3f:1a:92:f2:66:
         0a:03:78:d4:6f:4d:80:16:8d:45:cd:ba:df:cf:68:0a:97:af:
         9e:f6:7a:dd:c8:a4:4a:6c:f8:89:83:b2:f3:48:90:b7:27:ab:
         08:9a:56:be:dc:40:a7:7d:d7:a4:91:7f:20:9e:17:b7:a0:c7:
         9e:52:ee:e2:10:30:87:ea:db:70:94:b4:1d:d1:2e:64:c3:31:
         ab:bd:fe:6a:18:9f:c5:fe:29:de:cf:53:78:97:6f:90:27:38:
         77:00:77:16:04:98:0d:65:52:cf:07:fd:83:31:e9:4e:9b:42:
         47:4e:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:02:18 2024 by rpki-client on console-fra.rpki-client.org