Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa
File:                     a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa (raw, json)
Hash identifier:          AOo/1Xp6kkKiuNQLyg4HjwToqK2OfAXd49buCSfU1fE=
Subject key identifier:   F6:31:0B:5E:07:0C:B1:E4:7A:50:71:2A:28:8B:AD:61:6F:AE:D2:EB
Certificate issuer:       /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
Certificate serial:       010D0C9F43285847B3CC1727B2AB4177342654E0
Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     992
IP address blocks:        198.169.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:17:27:b2:ab:41:77:34:26:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=eb8b0a14-4aba-43da-bd7a-736a1bca7eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:30:ed:8b:e3:12:de:31:0e:da:ef:13:26:
                    14:b9:27:e7:1c:d9:88:e5:5d:36:e1:2d:59:b3:85:
                    82:b5:91:1d:62:2c:63:79:97:67:e0:79:95:89:66:
                    9e:82:15:8c:f8:96:d6:ff:e6:40:95:e4:81:23:40:
                    85:e5:15:cb:2f:7d:1b:2c:7d:7f:3d:67:97:80:e0:
                    4d:0b:aa:33:c8:ea:51:78:7d:f1:8e:04:63:be:54:
                    4c:7e:88:80:02:1d:f8:bd:6b:c5:9e:dc:24:27:5d:
                    17:1a:4a:98:af:83:7d:33:ba:56:5e:29:4d:30:26:
                    3e:fe:e3:8c:96:1d:bb:7d:26:3d:20:9c:e5:6f:1e:
                    99:ab:88:7a:d6:ab:14:96:6c:1f:d5:05:41:c0:84:
                    e9:55:dc:84:31:41:fd:9c:08:86:34:5c:93:a2:00:
                    cc:15:4d:fe:1a:e2:c7:f2:15:62:b3:e4:e6:c8:85:
                    49:df:2b:50:01:2e:20:10:9f:03:12:bd:ca:04:63:
                    bb:c5:56:1e:e8:c8:d5:aa:8d:f3:2a:77:23:d5:1a:
                    b5:46:95:7b:a1:d3:c7:0d:41:b4:77:44:ca:4d:7a:
                    58:25:63:ba:94:68:81:83:23:ea:30:fc:29:15:81:
                    5e:4f:98:2c:b6:ad:7e:f2:96:ef:96:ca:da:78:e8:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:0B:5E:07:0C:B1:E4:7A:50:71:2A:28:8B:AD:61:6F:AE:D2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl

            X509v3 Authority Key Identifier:
                keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:ff:6e:be:e6:f5:35:fd:d3:80:1a:f9:f3:36:d5:d1:c6:
         fe:0c:e1:ab:05:04:1f:0c:09:21:5b:4c:2f:68:fa:68:5e:0d:
         ce:4e:d0:9d:f4:d2:b9:70:22:57:1c:56:3e:4d:ec:c2:97:ff:
         41:08:83:ec:1c:25:5a:6b:13:4b:0c:b8:45:a9:d5:7c:14:b6:
         04:f4:f8:95:a2:4d:4c:42:d3:08:0e:d8:c5:90:7a:b2:1a:30:
         4b:24:95:a1:1f:9e:20:08:ec:62:db:02:3d:12:c2:d8:05:ad:
         c7:14:84:04:8f:c9:56:78:bc:f5:ec:49:2b:f0:e3:f3:5b:7f:
         55:29:64:2b:99:11:16:4b:92:42:81:2d:59:f7:b8:41:d9:fe:
         79:1d:65:76:61:52:7a:f8:30:a0:05:ca:25:a3:a2:48:45:0a:
         59:63:80:b8:ae:28:fd:27:d7:56:d6:d5:0a:4c:55:cb:e4:55:
         0d:43:65:d7:20:49:a4:0e:fd:14:78:ec:e5:50:bc:2f:f4:fd:
         95:0e:d0:0b:b1:ed:12:89:31:9d:db:c6:55:ab:b1:1e:fb:90:
         55:97:bb:c3:9d:53:c5:b7:70:53:d1:51:59:51:6b:4a:40:7b:
         d9:fd:b8:27:f0:16:ec:da:5a:1e:9d:cf:bf:52:45:b7:c4:10:
         be:0e:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org