Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa
File:                     95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa (raw, json)
Hash identifier:          NEWW8kCRnDYi8ZnbJy6H1/GrweZIikgpNAnLqmDuzYQ=
Subject key identifier:   E4:EB:97:0F:35:71:9F:20:E4:27:0E:8B:AF:F7:49:8A:5B:A2:C3:F7
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285847A8A14AB3F8755B4304EEC0B0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     1239
IP address blocks:        198.67.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:4a:b3:f8:75:5b:43:04:ee:c0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=ebdfd91c-ca80-4e8a-818d-ee3f115f02bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5c:c8:82:4e:e2:de:7f:32:58:27:f3:76:87:
                    f3:a4:94:3b:bc:42:28:84:a3:41:46:dc:5b:1d:4e:
                    c8:2a:18:88:8e:2a:5a:35:4a:f0:22:a9:ff:4e:ec:
                    4a:0b:11:c1:ec:fa:cb:1a:36:64:b7:f8:af:25:9e:
                    26:4e:97:89:c0:dc:ce:60:fd:a7:80:f4:10:ac:4b:
                    27:e9:02:97:1d:10:dd:c0:11:d9:5a:19:da:00:95:
                    f5:87:c6:78:9c:11:12:15:b7:0f:ef:bc:fc:55:2e:
                    d1:4e:ca:f0:bd:31:e0:af:3c:37:f0:0a:a2:a0:3e:
                    ef:6e:46:8c:06:af:dc:4d:86:0c:70:c6:08:44:ed:
                    1c:56:ac:ab:23:6f:cb:d0:aa:84:31:81:5f:c3:75:
                    2b:6f:9f:b3:7d:4a:56:e1:d7:8d:4d:82:a0:e8:9d:
                    01:45:68:86:02:97:12:ff:e3:f3:fc:e0:c0:54:a5:
                    26:17:fb:36:62:49:aa:67:33:0c:57:ba:ef:ad:24:
                    18:77:9c:53:67:b2:91:68:2d:02:06:82:f1:64:4d:
                    8d:67:3e:7c:76:fe:21:9b:53:c7:22:b6:30:af:09:
                    40:dd:a1:a2:39:e7:86:6e:88:46:eb:26:ef:4a:3c:
                    b8:a7:fd:80:e5:6e:ce:74:36:f4:b2:f6:1d:f8:29:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EB:97:0F:35:71:9F:20:E4:27:0E:8B:AF:F7:49:8A:5B:A2:C3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.67.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:0a:8b:68:8d:74:32:49:c5:69:cb:25:ff:41:d4:0e:db:
         cd:7e:b1:6f:ae:34:23:6b:0c:88:ca:b1:ae:48:25:b3:34:10:
         cd:9f:7b:dc:ba:71:ce:e0:87:aa:e2:86:d0:88:36:7e:15:10:
         03:cc:70:91:03:5f:49:1a:47:fe:46:49:da:48:be:c2:29:98:
         60:39:47:41:d2:8d:a6:ed:8d:0b:06:0a:e0:fb:2e:ec:57:61:
         90:07:d5:b7:a3:92:7e:a6:5b:d1:47:d5:de:e2:47:e9:a2:f1:
         bb:9b:dc:9d:68:e8:9d:4f:e3:99:d5:ef:d2:82:bf:6d:9a:c8:
         30:a3:56:7c:91:c8:aa:dc:76:ee:d3:75:d7:32:15:1e:7f:93:
         96:04:ff:e5:a7:d6:ba:a5:a0:c9:94:b8:50:22:aa:c9:95:58:
         9c:6f:50:8f:05:4b:63:90:7e:fb:99:89:f6:e6:b0:84:3f:fa:
         ac:7a:b9:14:3c:5d:48:e5:be:1f:12:9d:27:38:31:a1:16:3a:
         75:00:44:a5:fd:90:a1:02:39:ca:0b:d5:6a:39:61:a0:49:ef:
         f2:48:46:0f:30:98:f9:38:a9:7c:c9:4d:04:1d:42:e5:6e:42:
         99:87:57:23:7f:28:86:f4:2c:a4:14:63:d1:00:5f:6a:c2:49:
         73:3b:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:03 2024 by rpki-client on console-fra.rpki-client.org