Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/171b7afd-d4fd-3a23-adbd-f89558aba11e.roa
File:                     171b7afd-d4fd-3a23-adbd-f89558aba11e.roa (raw, json)
Hash identifier:          bsr0DOaJGLuBX4oyWBm5lMXTN6uBOOjESFTbllNAAaQ=
Subject key identifier:   6D:90:90:D3:F4:C4:7D:AB:ED:97:80:12:BA:CF:A0:3E:B7:EB:A7:CA
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584784566CD47D7C086F8BDB2B40
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/171b7afd-d4fd-3a23-adbd-f89558aba11e.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     2495
IP address blocks:        198.248.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:6c:d4:7d:7c:08:6f:8b:db:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=e0c57171-96f2-417b-b2de-03d3b6d6fa54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:af:95:e8:96:31:bf:10:70:e4:27:18:85:96:
                    2a:a4:ef:a3:5c:b7:3c:6c:07:44:28:e4:12:9c:a5:
                    cd:fd:e6:cd:bf:eb:3a:51:da:6f:4b:da:6c:37:72:
                    3f:38:0c:f5:48:79:f2:37:7b:23:05:cd:c6:8d:06:
                    74:9d:20:25:d3:4a:d5:21:4d:36:70:78:00:0c:d0:
                    1b:13:49:d4:bd:e3:b7:7a:16:3e:e4:35:4d:33:34:
                    d8:6d:25:2b:b2:18:15:5e:b6:7c:dd:2d:fc:19:b8:
                    e5:c2:d3:ac:28:44:58:83:8c:e7:76:e6:5e:28:ce:
                    2d:37:ba:f8:57:ec:7c:04:ed:c7:dc:c6:63:ef:ac:
                    b7:90:d0:d1:fe:e8:9b:05:10:99:f3:a4:95:ff:d0:
                    f5:34:29:19:c5:32:43:9d:11:2e:3c:3c:50:45:f2:
                    c5:9a:22:5b:92:a7:44:75:2e:73:c1:0d:17:94:35:
                    ba:8e:73:a9:ad:e4:e3:a2:1e:26:48:20:fc:a7:17:
                    27:b1:4e:d3:a8:41:4b:db:50:5d:3c:36:be:5c:49:
                    48:3d:8b:80:46:8f:92:14:48:4c:d3:8b:dd:cf:f7:
                    af:ef:43:37:6e:70:cc:bf:d8:f6:4c:cf:81:60:84:
                    26:92:5e:a8:37:fb:ad:a7:d6:ce:75:aa:37:45:3f:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:90:90:D3:F4:C4:7D:AB:ED:97:80:12:BA:CF:A0:3E:B7:EB:A7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/171b7afd-d4fd-3a23-adbd-f89558aba11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:88:f4:a6:ec:47:af:a7:12:ee:90:bb:17:28:8e:c5:24:
         e8:3b:52:f4:72:a2:12:cf:2e:50:e6:97:81:d5:7d:ef:75:01:
         3d:74:20:85:45:1d:ad:3c:05:fc:63:1b:df:3b:44:28:cd:b0:
         29:02:c7:78:58:d8:9b:07:fa:43:90:e8:a3:92:0a:5a:ff:62:
         78:e8:ca:01:a7:ed:c7:c1:0a:12:f0:cf:f1:32:3f:42:4a:e2:
         98:91:88:a7:1d:6b:09:cd:df:6c:fd:0f:76:98:88:6c:fd:1c:
         69:02:52:f4:1e:09:b0:38:fc:1e:f5:ab:61:de:a2:40:51:67:
         f5:10:96:73:7c:33:90:25:d8:1e:20:ad:cc:03:75:41:d1:6d:
         4f:a2:e6:cf:b7:5f:80:4b:31:41:ac:56:04:1a:be:40:17:6b:
         8f:4d:75:1a:d7:dc:63:29:99:30:14:ad:a2:1b:a7:3e:1b:bc:
         fd:a2:e1:27:47:0e:ce:d1:b9:c8:f1:15:02:f4:b3:ee:27:05:
         fe:80:db:33:31:cc:eb:5e:41:84:f2:01:e9:e0:eb:8f:71:1b:
         b1:1f:82:ad:92:7e:e3:d4:ae:7e:6f:06:95:6a:32:0a:f9:7c:
         39:7b:57:00:88:4b:d7:8c:a7:77:d6:e7:69:e9:69:30:d9:b3:
         f4:78:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:35 2024 by rpki-client on console-ams.rpki-client.org