Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa
File:                     eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa (raw, json)
Hash identifier:          vJM6ckp7KQtduobMbmdu2H7p5NLB0fmUM15E/Ah/oSQ=
Subject key identifier:   2E:86:AF:C0:62:94:59:CB:5A:D2:D0:DE:E7:B1:FB:CB:BE:88:9C:E9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285847437BEFC4E9FA735D9C847FDC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa
Signing time:             Thu 19 Sep 2024 07:28:50 +0000
ROA not before:           Thu 19 Sep 2024 07:28:50 +0000
ROA not after:            Wed 18 Dec 2024 08:28:50 +0000
asID:                     202623
IP address blocks:        198.41.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:43:7b:ef:c4:e9:fa:73:5d:9c:84:7f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 19 07:28:50 2024 GMT
            Not After : Dec 18 08:28:50 2024 GMT
        Subject: CN=473bd333-f9b0-4d4f-bc64-00ff0c95594a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:6e:8a:ca:86:00:76:2e:4d:88:67:9f:3c:
                    43:6c:c6:aa:5a:8d:48:16:eb:e7:81:68:f9:6f:63:
                    58:2a:76:75:fd:e7:5a:6a:6c:94:54:c4:d1:3f:a2:
                    ca:d4:e6:ed:b9:80:3e:7a:3e:15:db:af:f0:0c:1c:
                    ce:cc:a2:67:a7:27:f9:46:3c:dc:62:24:44:6b:59:
                    ae:4d:fb:60:29:6b:b8:ad:ef:f1:fd:7d:92:3d:9e:
                    63:4c:be:63:05:d2:14:5a:04:29:7d:d8:ce:6a:1b:
                    ed:b0:8e:6c:3d:1a:71:ae:f1:32:2b:cb:5f:74:4f:
                    0c:c8:41:e9:7c:0f:fd:32:8d:c6:7f:c0:84:d4:2b:
                    30:21:35:ea:66:96:4c:7b:68:ff:a7:91:be:c9:e0:
                    be:62:3c:3e:ef:94:1b:19:59:ca:9a:8f:83:1f:b1:
                    38:1b:3b:a7:e5:ff:57:94:78:e1:3e:61:f1:73:2b:
                    a4:62:ca:6f:9c:51:31:f3:89:3f:d1:0b:61:b4:82:
                    31:75:b0:23:97:0a:ba:fb:57:9e:6b:09:7c:21:8c:
                    10:fd:5d:10:e7:55:6b:f9:ed:48:ab:1b:2b:7a:ef:
                    e2:01:89:36:24:d6:89:1d:81:9e:bc:b3:77:75:4f:
                    02:47:b9:bc:c0:57:77:c3:1c:59:50:28:75:57:87:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:86:AF:C0:62:94:59:CB:5A:D2:D0:DE:E7:B1:FB:CB:BE:88:9C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:eb:c4:f5:07:97:47:34:ac:bb:8c:85:10:cf:8d:65:53:
         03:ba:e0:18:7d:b5:2b:80:c9:a5:4f:4b:8d:e9:a8:67:ac:80:
         18:b3:1a:50:11:d4:11:43:0f:ab:a0:44:5b:b1:9c:46:e7:26:
         ad:82:ae:59:b2:78:60:b9:c1:0b:b7:72:3e:c8:2f:09:d9:3b:
         59:8e:12:37:f7:55:18:fc:b9:4a:69:d0:2a:97:2d:51:34:2a:
         cf:39:1b:28:52:13:2e:2c:5a:2d:26:1f:e1:88:04:26:85:1b:
         40:93:5e:50:3c:4e:d4:dc:af:19:a1:dd:65:4d:10:5f:26:77:
         00:0f:38:13:68:50:b2:74:8c:b9:15:8f:39:e5:c4:ad:62:34:
         9a:1b:d9:52:a9:5a:f8:7b:ea:05:1e:84:12:4c:72:be:95:c3:
         9a:05:f0:fc:10:8a:c0:ca:d1:d6:59:5d:3a:e6:52:42:b2:12:
         3b:33:8b:48:4e:d7:5f:07:25:1d:2f:7e:f5:45:9e:1e:d8:c9:
         d2:b9:93:b0:32:51:52:25:e5:1c:f3:d1:2b:7b:88:8a:8c:f7:
         75:f4:a4:1d:91:42:67:2c:2e:d7:c7:34:98:ac:37:38:ec:64:
         94:7b:72:36:ce:5e:64:7e:41:56:ef:2a:47:7d:dc:a0:fd:8e:
         7c:a7:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:48 2024 by rpki-client on console-fra.rpki-client.org