Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa
File:                     c0815d17-83a5-3543-8437-c33f765a2be5.roa (raw, json)
Hash identifier:          sYQfbGbo9OtDtzPExCeLxvcGh63MhqtS6R4tUmf5PDc=
Subject key identifier:   6A:C4:89:E0:4B:A4:36:AE:EB:6C:C9:53:4C:F1:5C:E4:F4:FD:EF:1C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910CC5AA51A04FC16F2F1A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        198.64.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cc:5a:a5:1a:04:fc:16:f2:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=c583be9d-8afd-47a5-8498-38aacf557fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:49:b2:a0:4f:36:d9:8f:c0:6a:eb:4c:8b:
                    30:a9:a1:f2:cd:b0:da:c3:9b:d1:03:9b:e9:b5:cc:
                    ce:b1:cc:14:bd:23:02:71:e4:f8:d9:67:8f:04:d7:
                    1e:10:53:5f:cb:32:90:6c:f7:b3:e1:e5:ec:b1:2c:
                    08:f6:7c:44:19:7b:6c:45:ea:5a:00:44:f5:ef:44:
                    11:c0:fa:fc:fa:fb:8b:d3:13:9e:82:2c:14:62:dd:
                    eb:a9:73:43:2d:6d:64:de:92:7d:63:c6:17:a6:4b:
                    d9:a8:22:18:1d:02:f4:1e:99:ba:7a:29:ef:ce:a1:
                    cf:0b:b9:f8:f1:d1:e3:11:56:17:18:bc:b5:23:98:
                    6e:ba:93:07:6a:7e:02:31:54:1f:2a:ed:b6:ac:36:
                    84:70:34:e7:a6:7b:8a:c7:ca:17:a2:f6:8f:3a:99:
                    93:49:d8:e9:cf:c5:54:9b:7b:27:ff:7e:f0:17:9e:
                    f3:92:4a:41:2f:7f:5d:18:cf:21:83:34:61:54:79:
                    90:cd:fd:96:63:0d:e5:a5:7c:57:85:83:c5:c4:51:
                    83:e8:43:7a:7d:10:20:10:a9:6a:da:bf:0a:e6:d6:
                    cd:3e:87:e7:7d:d9:3c:be:78:00:64:26:40:b4:be:
                    6c:a9:b3:47:d6:36:64:09:70:b2:b8:4b:c8:b9:da:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C4:89:E0:4B:A4:36:AE:EB:6C:C9:53:4C:F1:5C:E4:F4:FD:EF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.64.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:36:9a:41:21:05:ed:93:35:28:fb:56:0a:63:ae:aa:68:f7:
         ee:85:e2:b9:62:9e:40:21:06:55:c3:57:e3:c9:59:72:fb:b3:
         05:4f:82:5c:1e:2d:fe:66:b1:bd:bf:3e:89:b4:87:3c:74:4f:
         60:82:f0:3f:4f:ca:9a:47:95:da:94:5f:68:6b:9e:c9:f2:42:
         45:a4:c9:4a:20:a1:5d:d3:79:51:f0:7f:48:53:87:bc:ff:83:
         51:9c:51:63:d3:12:58:ef:17:2f:41:19:5f:46:1c:97:a8:29:
         81:88:cf:3b:a5:1c:e4:86:28:b8:80:76:80:3a:1b:ef:a7:08:
         7f:7c:61:ab:2c:29:f7:a2:51:09:c5:1f:5c:cb:45:d3:db:89:
         20:cc:29:cd:5c:b9:25:12:b1:61:3d:cf:53:0d:0b:d5:04:f0:
         ee:3a:06:ae:8c:62:d4:2f:30:36:2f:77:fd:e1:3f:b1:ac:6a:
         1f:db:c4:7c:38:eb:54:0a:6b:7b:dc:02:47:73:a6:cd:b5:74:
         bb:81:d1:d7:83:4d:a7:8e:0a:77:de:6d:f4:03:27:ba:61:a7:
         0b:f8:fb:0d:a0:6a:bd:f2:58:52:1c:96:29:57:c4:98:d5:0a:
         7d:40:36:ec:ec:63:e4:ca:c8:0d:7a:3f:bb:ec:68:81:32:23:
         40:fc:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:17 2024 by rpki-client on console-ams.rpki-client.org