Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/eefb6ed6-1136-32b1-a70e-769ada3bef14.roa
File:                     eefb6ed6-1136-32b1-a70e-769ada3bef14.roa (raw, json)
Hash identifier:          tX6sahGCJMbsHhy86dy/v1pvlzi9FKlN1vrMK8m8Oe8=
Subject key identifier:   05:42:10:BD:61:C7:03:CB:6B:AB:BB:35:5C:73:74:65:54:6F:53:63
Certificate issuer:       /CN=19e347cf-c0cb-49a3-b025-5d36006aab3e
Certificate serial:       010D0C9F43285847C8D9E6752B37CB6BAF640680
Authority key identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/eefb6ed6-1136-32b1-a70e-769ada3bef14.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     398537
IP address blocks:        198.206.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e6:75:2b:37:cb:6b:af:64:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e347cf-c0cb-49a3-b025-5d36006aab3e
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=07a1f80c-0b99-4782-8437-c4aa7dab5b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:71:99:97:52:3f:66:aa:70:5a:f1:fb:52:df:
                    7c:2b:49:cc:6d:cd:c9:9c:82:15:5c:6a:e4:40:f3:
                    9b:63:d9:02:85:8d:37:3b:0a:23:8e:9f:3e:83:7e:
                    f5:fb:b7:00:0a:08:b8:5e:52:86:95:ae:dc:a3:75:
                    5b:a7:f9:84:c2:bf:68:ec:c1:40:64:10:f6:8d:6e:
                    ba:de:0e:8f:be:1a:63:e6:12:6d:dc:36:2d:ad:12:
                    7b:ac:a2:68:be:ec:67:f1:6a:20:07:26:15:bb:10:
                    f0:59:33:c9:ef:c9:0a:37:5b:b9:67:de:8c:fa:47:
                    22:41:0f:6c:8c:71:a0:45:40:ab:6e:24:60:fd:94:
                    3f:9f:5a:83:2d:c5:a3:53:3c:3f:5a:ed:7f:de:89:
                    76:8a:9d:7d:26:0f:41:eb:86:aa:04:ad:14:f1:50:
                    d8:d8:1e:8f:79:f7:94:cd:57:17:a0:0b:b7:c4:c9:
                    9f:1d:57:d2:04:62:d8:59:ac:24:33:4d:14:69:a9:
                    82:98:c1:81:b5:92:08:43:4f:3b:ad:1f:62:99:92:
                    db:95:11:9c:43:cb:a6:cf:45:cb:ac:3b:48:96:02:
                    22:a7:6e:35:4f:95:6d:00:0e:25:77:fe:4f:8e:f0:
                    a2:ab:d4:f8:46:23:d9:9b:71:6c:a4:87:88:d1:05:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:42:10:BD:61:C7:03:CB:6B:AB:BB:35:5C:73:74:65:54:6F:53:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/eefb6ed6-1136-32b1-a70e-769ada3bef14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl

            X509v3 Authority Key Identifier:
                keyid:A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.206.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:cb:0c:04:93:d2:06:94:6c:e6:4a:62:85:cb:6c:5a:a0:a0:
         d3:49:ca:95:36:a4:97:4f:4f:fe:43:2f:04:73:3f:93:bd:7a:
         32:12:61:3d:d9:82:52:7d:d5:e1:cc:51:39:2d:8f:8a:a5:0a:
         7e:d4:ee:21:c7:ba:52:48:4c:c3:24:a8:dd:d4:8d:78:c3:dc:
         f5:b6:4a:36:a1:1c:73:dc:67:e3:3c:ba:e1:b8:1f:fd:90:d6:
         d8:25:55:6f:2c:74:f2:a6:2a:6d:3f:9c:98:9b:87:1f:9b:9c:
         3f:01:64:c1:4e:b9:fe:41:49:19:b3:16:ea:f0:f0:84:a4:d1:
         59:37:6b:5b:0e:b8:5a:fb:94:1b:ff:f3:7b:9a:b5:79:73:49:
         80:5b:f8:97:8c:3e:2f:6c:e4:f9:dd:0f:df:04:cd:c4:ad:14:
         e7:3a:0e:1a:77:d8:ae:d7:b5:50:0d:a9:51:f5:37:8e:da:45:
         75:1b:75:ae:64:c8:35:e9:c5:2c:78:f7:a1:98:d6:4e:89:8c:
         77:4e:a1:76:8f:f6:de:eb:7a:24:0a:19:8b:d5:86:e6:9f:fd:
         ac:31:0d:56:5e:22:9d:9c:a4:72:cd:33:28:b9:4a:c7:f0:c7:
         41:63:10:38:a1:a6:a8:50:66:7c:8e:cc:fe:22:bc:78:45:65:
         63:37:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:36 2024 by rpki-client on console-fra.rpki-client.org