Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e595987-a2d6-3dbe-b8ac-1df0d7647ece.roa
File:                     1e595987-a2d6-3dbe-b8ac-1df0d7647ece.roa (raw, json)
Hash identifier:          8lBZQCznVTMElto9SHJwEjfnBY2ZGN7MNP+t02Q8M4w=
Subject key identifier:   15:99:68:90:A0:48:FA:C0:50:95:2B:AB:19:50:CC:5A:95:F7:00:9C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E59767BB7
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e595987-a2d6-3dbe-b8ac-1df0d7647ece.roa
Signing time:             Mon 11 Nov 2019 07:56:07 +0000
ROA not before:           Mon 11 Nov 2019 05:00:00 +0000
ROA not after:            Fri 28 Jan 2028 05:00:00 +0000
asID:                     13335
IP address blocks:        198.41.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:59:76:7b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 11 05:00:00 2019 GMT
            Not After : Jan 28 05:00:00 2028 GMT
        Subject: CN=5727872a-5606-46df-838b-15b4083c6c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:2e:7e:57:81:69:8a:83:4f:4f:90:ff:4f:
                    df:cb:74:2e:a0:3a:5b:3c:03:19:4e:62:bb:d1:94:
                    cb:8c:7d:76:eb:2d:d5:a4:9d:7a:3f:21:1e:b0:f5:
                    52:7d:9a:3e:f3:18:80:97:a2:3a:63:62:22:bb:55:
                    03:77:72:78:95:46:58:c5:66:5d:60:53:6c:b0:eb:
                    a8:f9:38:22:93:f3:90:3f:56:d7:63:bb:4d:11:5b:
                    88:b1:0c:35:ba:b5:36:4a:f2:46:63:c2:5d:64:a2:
                    f9:0c:cd:09:58:45:ed:1c:b4:ce:f7:58:35:3f:b2:
                    81:b9:6d:46:d4:ee:05:c3:29:72:b6:50:71:e2:9d:
                    92:5b:d2:5d:2c:96:6d:eb:a5:66:83:f1:b7:f9:47:
                    ba:bf:3f:4a:bf:c2:95:0b:5b:a5:83:20:78:b9:87:
                    90:3a:6b:20:cf:69:a2:8d:cb:9e:79:8f:75:a7:65:
                    be:f8:3e:4a:02:53:3f:38:c5:49:ea:5e:33:c4:42:
                    b0:73:c7:26:e7:e2:9f:4b:42:6d:01:01:20:35:2b:
                    12:44:0a:c5:e1:06:82:67:1a:be:d2:b2:fe:20:d1:
                    f2:98:ea:d7:d6:ad:15:70:72:fd:f4:a8:0e:b3:00:
                    19:e4:58:e8:e3:ee:5c:57:d6:e7:77:3d:cb:8f:cb:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:99:68:90:A0:48:FA:C0:50:95:2B:AB:19:50:CC:5A:95:F7:00:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e595987-a2d6-3dbe-b8ac-1df0d7647ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:4b:34:6b:4e:57:35:d8:d6:45:27:5c:bd:86:58:0f:e2:
         70:53:59:fe:09:95:00:6b:5b:40:24:60:84:60:41:b1:3c:ce:
         7d:de:d8:61:e4:dd:b2:f0:fc:1b:ae:fd:6a:17:a3:35:51:3c:
         e0:c8:c1:a6:63:44:34:12:52:d1:ac:d5:9d:81:77:1c:fb:45:
         27:89:89:dc:95:7b:bf:28:70:5f:29:0e:91:b9:07:07:b8:27:
         dd:e0:cb:73:ae:5d:fe:9a:58:43:be:af:04:6e:e2:93:54:a7:
         e7:46:b2:4f:6d:62:1f:d3:c3:24:19:38:ef:2c:92:ee:e1:42:
         2f:47:19:c4:6c:43:04:34:ad:1f:b6:2a:00:65:92:6b:91:5e:
         41:2f:b3:14:cf:79:50:21:1e:05:16:b7:bd:1c:27:c8:d9:7a:
         73:26:62:ae:5b:21:90:eb:1f:f9:3d:c4:77:bd:76:80:ba:33:
         a7:f8:e2:6c:3d:7e:2b:9a:36:f4:72:35:79:0e:91:fc:ee:81:
         fa:96:8e:2e:42:e7:f7:7d:6c:f0:a1:81:41:a4:f3:61:71:a7:
         59:71:45:f4:b2:52:bb:2a:8c:2a:db:5b:f9:14:7b:40:b5:e7:
         6b:50:3a:be:83:ff:44:a0:ea:e9:73:f2:4b:e9:bd:c9:fd:23:
         2c:d8:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:00 2024 by rpki-client on console-ams.rpki-client.org