Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa
File:                     cebecf45-75c8-339f-b4d9-cff06abf94d8.roa (raw, json)
Hash identifier:          /e3R/0F1CeP5KYJ02xIz7wGFVTyIED/MSSNmvkSMEuM=
Subject key identifier:   00:38:C7:4A:B3:F2:21:F9:A4:39:98:2B:03:48:6E:9F:0C:EF:7E:A8
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F432858477EC109FA7ABECCEF0BDBA900
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     46555
IP address blocks:        198.133.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:09:fa:7a:be:cc:ef:0b:db:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=2c26e3f4-696e-425c-ab4e-2165d1d6f868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:61:fb:d3:fe:d9:71:53:36:46:34:1d:77:
                    0a:80:d7:c6:b8:a2:78:3b:ff:4c:a0:56:90:e8:4e:
                    fc:f4:cf:d6:50:fc:17:9a:ec:d9:f3:2a:03:24:94:
                    6e:88:13:07:fa:88:3a:16:ac:4c:a5:ad:bd:31:f7:
                    f0:9f:78:47:97:4a:81:ea:bf:aa:9b:d6:5a:d2:99:
                    7a:58:bf:cd:89:2e:43:22:9e:ba:98:08:5e:ec:7f:
                    e2:3e:d4:62:72:b5:c5:d7:8e:ef:6b:2e:67:81:3d:
                    d1:ff:f3:a3:01:17:11:65:7d:70:e7:44:50:fd:e1:
                    a9:d0:0f:01:31:95:69:73:fa:14:68:83:60:e9:8d:
                    81:34:9b:4a:02:c7:e8:d5:70:70:12:d9:8b:0f:47:
                    3a:00:84:5c:c9:cb:3e:89:de:38:a4:a1:7e:d2:92:
                    0b:71:48:10:7b:de:ee:e0:b9:47:ce:7b:2c:ec:b8:
                    6b:29:63:31:d7:03:97:ba:98:da:ef:98:f3:65:a9:
                    c6:98:5d:82:19:d6:2a:d5:08:31:de:15:eb:ac:ec:
                    ac:56:76:63:8e:ef:ab:79:32:31:7d:83:a7:63:84:
                    7f:51:61:05:7e:21:ce:3f:76:5a:81:b8:ef:1c:f8:
                    98:2f:e7:cf:95:e2:cb:6a:d4:c0:18:0b:f0:4d:77:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:38:C7:4A:B3:F2:21:F9:A4:39:98:2B:03:48:6E:9F:0C:EF:7E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d9:d4:70:92:f3:72:fa:74:f7:be:28:85:24:4b:d6:2d:86:
         3a:ca:00:36:b2:05:43:07:2f:f9:cd:68:c7:db:47:3e:26:12:
         9f:e8:bf:12:b3:e9:0c:e5:fa:5d:06:c5:99:a7:bb:d6:58:ac:
         55:b7:ba:59:8f:c7:bc:dc:9f:cc:86:f2:6c:a9:3b:55:7b:19:
         07:2a:7a:0b:77:f9:86:e2:07:1b:bf:08:b7:63:91:42:88:95:
         ca:19:b4:3d:01:89:6e:10:da:c9:dd:1d:56:8e:b8:e5:89:a5:
         a8:77:f9:9d:79:56:5a:29:a9:6b:5b:27:54:3a:cc:24:1f:de:
         da:fa:f6:cd:1f:2e:ac:cf:b0:52:2d:0d:40:f0:76:06:9e:3b:
         4a:7a:b7:96:e5:fd:5f:e1:78:15:68:00:62:68:9c:0b:0d:38:
         96:10:0c:fe:60:48:a9:70:f2:cb:6a:de:7b:36:f1:34:64:d5:
         de:41:3b:8b:72:88:ec:00:51:2c:81:79:0e:c6:d3:b2:f9:3e:
         cb:0a:26:44:ea:31:c0:ca:39:a6:ed:c1:d3:27:fd:10:09:cb:
         cc:23:6d:3a:1d:7d:9c:28:01:bf:c4:93:59:22:1a:2f:23:41:
         5d:f5:72:98:a6:76:88:af:85:fe:98:34:51:ce:13:cd:d7:81:
         7a:9a:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:02 2024 by rpki-client on console-ams.rpki-client.org