Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
File:                     3029e186-49b7-387b-8d82-eafc4d11072d.roa (raw, json)
Hash identifier:          lmGEoS7YRPB3l8hJ++9Jou+A5huV6AOSc0C3k9sjeN0=
Subject key identifier:   3C:2A:3C:F1:B4:BB:86:14:4E:C7:A5:24:CC:C0:B3:63:EC:AB:BF:03
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F43285847CD09EF02BD1131418DEBD90C
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     23535
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:ef:02:bd:11:31:41:8d:eb:d9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=218844cc-844c-48d8-80f5-ca83be42aa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:74:39:80:b9:d0:5f:ca:1b:29:83:89:f2:
                    e3:6a:25:d6:1e:e0:0a:09:0a:fc:6a:49:ae:0c:ff:
                    bd:e8:82:a7:c7:15:14:25:4e:e8:c4:f3:51:08:8d:
                    5a:a5:cd:6d:7b:6c:1f:d5:0a:a6:43:66:c5:7b:08:
                    cd:6a:19:c1:d5:7a:47:a7:20:53:8f:6f:3c:c2:6f:
                    ef:68:40:b3:1e:e7:b7:4a:e0:62:d9:cf:69:6e:4d:
                    47:01:a0:70:ef:43:1a:20:d2:f2:bf:ab:e4:93:26:
                    2f:07:38:cc:b4:97:67:08:0b:f2:e3:82:29:2e:0d:
                    50:3c:df:bd:77:4b:f2:c9:71:06:71:f1:10:e5:43:
                    20:ef:ce:fa:41:74:ab:bf:68:da:ec:b9:0d:07:c7:
                    69:6f:2a:4b:8f:d2:68:8c:7a:be:44:5c:99:0b:97:
                    72:42:09:00:1c:b2:12:fb:c2:67:97:2d:0d:85:44:
                    d9:ab:8a:62:b4:6a:dc:14:3e:72:a2:16:46:80:62:
                    bd:1e:39:33:44:53:4b:bb:cc:01:69:68:1c:c5:2e:
                    75:ac:e7:e4:16:2f:86:5b:90:dc:36:3e:b3:c9:36:
                    23:4a:ba:0c:a0:23:16:c1:f4:76:8e:32:b6:1c:d6:
                    d5:51:a9:26:45:6e:42:4b:e3:d7:e7:ad:24:64:a4:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:3C:F1:B4:BB:86:14:4E:C7:A5:24:CC:C0:B3:63:EC:AB:BF:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:c0:f8:d7:64:6d:35:ac:f7:81:ab:fb:05:81:4b:a3:ec:
         29:f4:a3:97:c2:fb:12:f0:99:59:f8:77:56:55:3b:48:f6:52:
         75:05:89:a1:3e:1f:aa:5e:fa:98:16:33:a1:51:2a:d2:b2:0f:
         d2:7f:36:6b:3c:a3:41:74:15:e1:f7:27:47:05:0a:90:d7:ca:
         88:c9:a4:80:79:70:23:e6:59:d0:cd:a6:c8:1c:d2:58:1a:01:
         9d:ab:45:c0:12:0d:db:75:58:5f:ac:e3:23:b2:ba:cb:06:61:
         08:b1:a0:fa:eb:f6:9c:a7:c7:49:b6:c3:ca:cb:80:2d:24:bb:
         6e:88:23:1a:a5:55:da:f6:41:43:06:3c:2e:39:c0:f1:24:71:
         ca:e1:8f:1f:83:c9:28:37:af:d2:8f:ab:99:97:5f:a3:a8:32:
         f8:2d:df:13:46:38:0b:93:91:08:01:71:52:48:9e:3c:3d:a0:
         3a:45:cb:52:73:2a:e0:1a:09:e6:3e:e1:ed:65:ac:17:3d:65:
         0d:80:de:e2:07:ad:88:93:76:96:39:44:18:ea:d3:d0:a4:6f:
         1b:5f:ea:6f:47:21:20:a3:b5:87:93:9a:87:df:4d:e9:0c:81:
         8a:47:42:f7:06:f1:d7:c8:47:36:77:fd:b6:ea:64:eb:4e:88:
         40:1d:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:40 2024 by rpki-client on console-fra.rpki-client.org