Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa
File:                     d00cb053-7fdd-3738-987c-4166b9a7f33c.roa (raw, json)
Hash identifier:          62IeLQd59XNQSmm3vKSahjSc8nGA8yplz/RZk7MtpTI=
Subject key identifier:   8F:07:AD:E3:2A:AD:CE:3E:0C:C1:DB:C8:F2:B0:D0:59:1A:B8:03:6E
Certificate issuer:       /CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
Certificate serial:       010D0C9F43285847B9617BCDFDD680406BE40740
Authority key identifier: EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     40138
IP address blocks:        198.72.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:7b:cd:fd:d6:80:40:6b:e4:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=df100634-6024-4dcf-b3b5-2f596ca0d606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:86:c0:d4:fe:d1:6d:42:fc:04:11:af:4d:
                    0b:16:04:a6:90:01:da:b9:bb:33:ca:39:ca:46:64:
                    ff:d2:e2:7c:8e:22:77:ca:18:e2:ac:80:33:7d:09:
                    7d:51:2b:6e:cf:f5:14:2f:70:f0:11:7f:cf:d4:0e:
                    c4:7b:f6:65:4d:45:c8:55:95:5f:37:be:fc:db:04:
                    10:08:08:ff:41:a6:3e:ce:07:c3:1f:e4:d3:50:98:
                    64:a5:3b:a2:08:2b:0d:59:39:01:92:b4:2c:bb:14:
                    29:02:b7:1e:bd:a6:06:48:f0:f7:91:2d:24:46:56:
                    a2:c1:79:27:01:85:2a:b7:12:3c:fa:f7:52:46:1f:
                    88:d0:75:c1:89:a4:c3:17:bb:7a:cd:54:ad:17:cb:
                    02:bd:14:4d:bc:13:de:74:3e:81:d9:00:57:ca:c8:
                    22:2d:0a:66:6c:e3:8f:f4:c3:6d:67:0d:75:56:12:
                    47:ef:d8:27:01:9a:6f:82:7c:2f:24:80:8b:f8:41:
                    10:d4:22:e1:64:10:9e:80:0d:89:80:d9:e3:61:1c:
                    27:2e:c9:08:42:8f:c7:f4:c5:66:d6:ea:19:ab:cd:
                    71:29:ba:a5:fc:d2:cd:08:54:2d:9a:25:d2:9a:17:
                    dd:ce:bd:51:d6:ac:d1:cc:81:04:fd:8b:ca:91:cb:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:07:AD:E3:2A:AD:CE:3E:0C:C1:DB:C8:F2:B0:D0:59:1A:B8:03:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/d00cb053-7fdd-3738-987c-4166b9a7f33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl

            X509v3 Authority Key Identifier:
                keyid:EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.72.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9c:fa:76:30:de:83:a8:ef:2a:37:6c:d3:9e:0b:c4:9e:03:
         96:03:0e:f2:de:ec:8f:0c:62:c9:df:ee:ef:6c:0d:da:9d:3d:
         cd:e6:49:b0:86:dc:57:95:0c:ee:0b:ee:a7:88:b5:89:f8:6c:
         54:ef:73:8d:1d:bf:b9:33:58:f2:ad:60:85:1e:7c:ea:2a:28:
         97:a9:2b:84:84:ea:36:a4:91:fc:0e:fd:85:69:9f:b5:90:9c:
         b9:39:85:05:c0:f8:4f:34:dc:da:a5:d4:49:f8:da:96:8c:cf:
         44:ea:52:6d:a2:32:0e:a5:26:ff:e0:d5:2a:31:8f:6a:2d:21:
         9d:b9:f3:b5:19:59:69:73:68:b8:98:c4:7f:c4:67:61:0d:8c:
         25:cd:8b:02:d1:5c:28:e6:84:f9:c5:74:55:65:1f:32:31:80:
         36:82:6a:6c:1a:91:d6:86:61:d4:89:e8:e2:a4:ac:db:21:3a:
         7d:b1:a0:6f:5f:b2:cf:30:75:f9:e6:1f:ab:ea:1c:f3:d9:92:
         c4:99:94:84:5f:3d:e8:99:b6:ad:68:fc:41:91:1c:c5:15:af:
         3c:3d:c8:3c:f6:23:c8:c8:6a:4b:e0:8e:2f:c4:d6:13:65:ab:
         1a:3f:ec:a2:0d:42:e8:42:7b:ff:8b:9f:ea:9f:ed:69:3d:2d:
         8b:a9:45:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org