Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/47e23e8a-9e8f-3a80-b693-884241aaefb7.roa
File:                     47e23e8a-9e8f-3a80-b693-884241aaefb7.roa (raw, json)
Hash identifier:          NGczt66ofVtckihBUslYlmLTF+dbJ/Ao9+KNmc1v9MQ=
Subject key identifier:   F9:E3:DF:D4:E5:ED:B7:58:CF:4E:A8:25:6D:FD:22:D1:AB:DA:4D:52
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C01D8B32F305F67E9240
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/47e23e8a-9e8f-3a80-b693-884241aaefb7.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11537
IP address blocks:        198.71.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c0:1d:8b:32:f3:05:f6:7e:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=13c03f86-c7f0-4977-b93a-c253e9655629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:79:30:8e:0e:69:e9:47:9c:59:19:1c:cd:
                    7b:77:c5:53:6a:03:10:21:a3:d3:41:52:f1:d1:62:
                    99:8d:e8:59:f3:75:84:90:44:a1:56:a0:63:0d:b0:
                    d2:b8:bf:43:cf:4c:3e:cc:2d:3d:b2:56:fb:1f:8c:
                    22:a8:14:9e:6e:72:7a:55:0f:31:66:3f:a3:22:7c:
                    73:40:52:1d:60:48:71:80:9f:98:0f:aa:63:fe:4b:
                    67:f4:2e:57:c9:4f:ff:85:01:86:e7:3b:d3:96:8e:
                    72:18:45:63:d0:4d:ad:e7:31:a2:e0:3d:f6:b9:1b:
                    31:03:7b:09:9a:79:31:d6:4e:f6:a4:c6:86:c4:a6:
                    81:c7:d2:a4:99:3b:f6:c4:82:80:51:64:55:49:d1:
                    ef:69:5b:bf:6b:b0:5e:ac:b4:47:b3:17:0d:81:a2:
                    0f:9a:41:a0:9e:cf:78:ef:4e:93:1d:48:62:96:82:
                    dd:ee:59:de:81:ec:d0:bb:fc:a1:12:a7:4c:25:9a:
                    10:f2:63:7e:54:ed:6d:44:71:a9:49:23:d9:79:a9:
                    31:84:dd:5d:b3:03:6b:26:4f:11:dc:37:0d:e1:b3:
                    85:1e:88:ec:9e:e7:c0:53:3b:06:32:7d:e4:22:a8:
                    48:f4:9a:af:4d:74:ef:f9:d4:a2:3b:82:e3:8b:32:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E3:DF:D4:E5:ED:B7:58:CF:4E:A8:25:6D:FD:22:D1:AB:DA:4D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/47e23e8a-9e8f-3a80-b693-884241aaefb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:56:72:70:06:87:90:29:0d:7c:a3:b6:25:16:2b:d6:03:27:
         c6:90:30:02:f5:fa:a2:7a:06:91:9f:31:04:04:39:95:9c:53:
         41:f8:60:bd:e9:0c:67:e8:a1:e2:1a:f9:2a:37:04:9b:17:20:
         fe:21:76:5b:d8:32:c4:86:f5:04:65:6c:34:fd:d7:92:1c:f3:
         5f:c3:db:dd:5a:55:03:0e:a4:ab:d5:da:46:30:c2:a1:35:b3:
         a0:c2:5f:c8:5d:c3:c7:12:5d:fa:74:53:73:ef:fa:35:86:82:
         66:23:c4:d8:0d:91:5d:da:31:26:d2:fd:d4:04:90:08:0a:cf:
         3f:c1:58:2d:18:1a:b0:4b:24:7d:67:f7:dc:3e:d5:04:ce:7a:
         b0:d9:3b:b1:6c:85:83:dc:ea:06:0f:52:4a:12:32:5c:66:f3:
         01:e9:4d:ec:24:e3:77:4a:75:04:1b:b6:85:ce:f4:8c:d4:db:
         81:38:f8:00:54:27:e3:21:9d:70:5e:57:08:3d:06:8f:5b:ee:
         c1:28:6c:7b:d8:d7:7c:f9:3a:29:81:9e:1c:d8:ca:79:6f:cf:
         4f:6b:97:cf:ad:3d:b4:37:e9:e1:94:f1:2b:62:8d:af:62:57:
         40:5c:87:96:59:be:be:35:52:e3:8b:aa:9a:30:29:57:65:98:
         61:85:df:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:45 2024 by rpki-client on console-fra.rpki-client.org