Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
File:                     309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa (raw, json)
Hash identifier:          7wlyq4hL7qNronzf/KiL/yF8b0JrpSi0o1JCkruiUaw=
Subject key identifier:   3D:3C:E3:4E:A8:B8:9E:74:FF:62:D4:59:33:5F:14:C1:C2:A3:6E:4B
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584734C88D4B08E4D14D28B2F380
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     16509
IP address blocks:        198.44.180.0/24 maxlen: 24
                          198.44.181.0/24 maxlen: 24
                          198.44.182.0/24 maxlen: 24
                          198.44.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:8d:4b:08:e4:d1:4d:28:b2:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=e895872d-111d-4101-bbfd-e65fed866194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:f5:b7:97:8a:d7:5e:ad:86:be:41:2e:52:
                    2e:70:15:1b:8d:b8:aa:52:fe:95:48:fb:63:a5:3d:
                    f8:4d:50:b6:02:61:0d:8d:7a:c3:be:6f:3c:95:56:
                    73:6c:0a:6e:b8:70:ab:ee:f9:0e:82:18:28:45:e6:
                    d3:c0:81:9d:9f:e1:ca:2b:16:67:c7:ed:9e:a3:ff:
                    7d:81:cb:5f:70:a3:6e:a8:1f:f6:9f:4a:bf:05:d5:
                    a0:a0:4a:7d:1a:03:9d:96:5a:df:52:f3:7a:bd:72:
                    55:f1:31:1f:c4:66:06:5e:52:2d:c5:aa:ce:20:65:
                    66:fb:2f:9e:fc:a0:8d:ff:a5:7d:36:ee:5c:ac:40:
                    c4:b2:6a:5a:6e:2a:b5:80:ca:61:cc:88:cf:58:9a:
                    9c:d6:2a:9d:42:03:06:d3:0c:9a:8e:17:e8:63:90:
                    5b:cd:4a:46:0f:7d:f1:4d:78:76:04:56:48:86:f6:
                    09:bc:27:62:cd:01:2a:29:fa:a9:11:f6:16:2f:4e:
                    e1:ce:62:ff:32:d2:be:43:95:4b:fa:43:4d:10:f3:
                    f9:99:c7:15:02:fb:97:2d:6a:1f:90:cb:8a:60:d9:
                    31:16:90:63:39:c5:5e:ab:56:d0:46:79:b1:02:2e:
                    8a:7a:2a:fa:13:b8:c7:77:6e:6e:2c:f0:2a:0c:72:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:E3:4E:A8:B8:9E:74:FF:62:D4:59:33:5F:14:C1:C2:A3:6E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f7:ae:ad:f7:ab:d3:27:35:f1:15:2f:7d:79:7d:d6:09:c7:
         82:c1:d7:fd:c9:3b:77:f4:27:42:f3:5e:19:fa:5f:93:d6:a7:
         fc:cb:f9:12:e8:70:57:26:5d:b6:28:00:29:b3:33:10:b2:a8:
         3f:ab:0c:ed:f9:c3:66:b8:a9:f3:77:26:14:54:90:38:09:a9:
         e4:42:30:75:18:a9:bb:46:06:3f:3d:98:1f:18:cf:d6:90:04:
         26:71:13:11:b0:a8:57:65:06:d9:61:c8:27:37:a8:4f:e8:e2:
         66:88:70:1c:31:81:15:21:cf:c4:ce:09:46:c8:ac:a8:78:5e:
         15:4f:e1:fb:80:1e:3d:c7:bf:b3:03:a8:fa:d3:8a:b1:82:7c:
         b7:d7:18:91:f0:3f:85:3d:71:a2:d1:10:65:e0:d4:7f:59:60:
         21:dd:58:02:30:99:92:ea:73:d2:9f:4d:0d:b1:0c:4c:55:1f:
         37:44:f0:f2:99:73:43:67:da:f8:07:fd:7a:76:51:19:8d:2c:
         e9:7e:d0:5c:66:95:58:1d:72:30:ec:d7:5e:dc:63:c5:26:db:
         8c:2e:69:b6:6b:7a:81:64:ae:80:c0:6d:21:fe:bc:d2:3d:3a:
         65:4b:21:f4:17:09:b9:36:93:a0:28:16:c4:0b:b0:a2:85:0a:
         60:2f:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:25 2024 by rpki-client on console-fra.rpki-client.org