Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/a691e40a-a255-3263-b8fa-5dccfc035209.roa
File:                     a691e40a-a255-3263-b8fa-5dccfc035209.roa (raw, json)
Hash identifier:          DjiLhmcXNLHcARMx95zEc7ER64AOSzocIwlVbw5pwGQ=
Subject key identifier:   00:45:1A:06:75:4B:76:F6:99:AC:C4:89:91:8A:7E:A2:CB:0E:7F:89
Certificate issuer:       /CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
Certificate serial:       010D0C9F43285847AE36B5E4CDADBCF6E3646900
Authority key identifier: 3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/a691e40a-a255-3263-b8fa-5dccfc035209.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     395485
IP address blocks:        198.179.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b5:e4:cd:ad:bc:f6:e3:64:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=8e5546b5-e3ea-4da8-8376-00d91f311472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:20:34:7c:52:c6:90:59:94:d9:2a:78:1a:
                    7d:cc:bf:58:0a:5d:7f:5c:e5:18:79:ae:e1:b7:74:
                    48:3e:b7:34:94:9a:8e:00:45:9c:80:d1:b3:35:af:
                    b8:32:da:2c:c9:22:44:a2:49:6a:b3:98:64:54:8e:
                    64:df:a2:51:ad:87:3b:d0:62:01:d8:6b:96:ea:cd:
                    30:00:71:40:11:39:5f:88:3d:b9:14:ab:70:7c:01:
                    eb:36:54:68:37:80:2c:53:ae:95:d9:e4:c4:75:57:
                    d5:c4:74:50:9a:10:5e:5b:6e:13:0d:fa:9a:f2:87:
                    d3:c9:66:19:0f:1d:66:21:58:1b:fa:fd:82:cb:51:
                    c3:8e:10:94:46:53:7d:1b:2b:78:c9:5b:f2:3a:3a:
                    e7:fa:c0:41:44:1e:bc:71:89:62:20:f3:95:3e:5a:
                    6a:59:a1:71:38:b1:44:ac:49:4f:b5:0d:95:ba:5c:
                    a4:b3:6b:c2:5c:4b:e1:c3:db:34:77:32:5e:67:b2:
                    e9:fe:f1:2a:d7:46:ee:82:7d:bc:a8:4a:e3:1e:b0:
                    9a:6e:69:ff:a4:b8:f5:f0:6a:88:70:61:63:92:70:
                    e9:f5:a6:7a:7c:f1:b7:8f:f3:ae:e7:04:58:b7:be:
                    c1:d5:5c:bc:47:22:c9:65:b2:b3:20:35:c7:36:be:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:45:1A:06:75:4B:76:F6:99:AC:C4:89:91:8A:7E:A2:CB:0E:7F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/a691e40a-a255-3263-b8fa-5dccfc035209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl

            X509v3 Authority Key Identifier:
                keyid:3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:d4:c1:bd:b7:79:f9:15:f0:6f:f4:79:71:94:cf:dd:0d:
         96:65:1d:96:2e:9b:e9:f7:85:d5:b5:cb:b0:5a:6c:1c:a4:5c:
         00:c1:b1:c3:a3:90:5c:18:83:22:b2:e7:e5:19:cf:07:18:23:
         f9:1b:ed:8a:c0:09:20:8d:ea:2b:92:7d:83:a2:e2:5a:e7:74:
         6c:95:0c:75:6c:57:e3:43:f7:2e:aa:de:5d:b6:5c:a9:63:d7:
         ef:cc:05:34:d2:07:e9:f0:c9:48:94:3f:3e:fd:9b:17:72:98:
         ce:b7:8e:2d:96:c3:d9:d0:b4:31:ee:5d:38:e5:d7:e4:75:85:
         25:df:eb:a1:d7:d2:40:58:f8:16:6b:5e:24:62:3f:f9:83:00:
         64:c7:51:f2:72:55:f4:3b:7e:9c:84:34:85:e2:2d:74:d5:0e:
         c1:9a:11:ab:6d:9c:a3:18:f1:61:f9:72:4a:3c:c4:ca:1c:fe:
         d6:4c:61:7d:bc:4e:b5:19:6b:50:2b:43:24:f9:f9:4c:45:63:
         9a:67:3c:3b:74:64:b6:13:1d:ec:02:2a:34:aa:e2:fc:0d:e2:
         41:eb:0d:4b:ec:8a:03:57:3a:19:ed:5c:80:41:0e:f9:b6:f9:
         13:cf:63:f3:f3:31:e8:74:f4:95:34:65:28:13:2b:d9:5e:6b:
         e0:e7:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:00 2024 by rpki-client on console-fra.rpki-client.org