Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8c4de7df-b06c-31b9-a2a8-529e75c731a1.roa
File:                     8c4de7df-b06c-31b9-a2a8-529e75c731a1.roa (raw, json)
Hash identifier:          CQJMnJhfnqb/umkp6XzSBrjZbQEi/jVZ8mZrsfyfpk0=
Subject key identifier:   00:AD:FA:10:CD:DC:F2:C1:8B:7B:DD:13:39:A8:15:DB:C4:6C:E6:FB
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F43285847A5D6ADAB236A1657CEB6F3C0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8c4de7df-b06c-31b9-a2a8-529e75c731a1.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     140096
IP address blocks:        198.176.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ad:ab:23:6a:16:57:ce:b6:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=53de426e-0be7-4b96-8096-1fac34a119a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:a2:67:32:60:1b:85:58:79:dc:26:b8:aa:
                    e6:a6:bc:aa:46:41:cd:ed:31:e5:e6:77:92:65:84:
                    05:64:0f:c2:f9:ef:ef:1e:48:e3:97:13:32:07:2a:
                    c8:34:59:e9:97:ec:03:39:d6:f6:5f:ca:93:f5:31:
                    05:26:48:af:55:cd:63:cc:92:31:f6:a9:fb:a5:c0:
                    ef:ae:4b:f2:7a:fc:65:61:33:61:47:46:ae:e4:5a:
                    9c:30:81:7a:72:a5:f0:4b:53:36:5d:ba:9e:27:28:
                    46:85:24:9c:ac:ac:ed:aa:45:7f:92:58:99:3f:16:
                    19:b8:cf:f7:2f:19:ac:c6:77:1c:e3:60:c7:20:59:
                    df:c2:4c:db:50:f3:34:c7:83:54:79:95:8c:96:0c:
                    aa:bc:40:3b:d1:13:6d:48:f6:e2:f4:4b:cd:e8:b6:
                    8b:2d:30:89:fe:1b:0a:71:3c:47:5d:32:d7:f3:26:
                    00:b7:7a:db:0b:fc:3a:65:39:62:32:94:b2:41:1a:
                    82:ab:31:98:16:5b:eb:a6:4c:38:ec:61:2c:23:34:
                    a9:42:17:66:5f:0b:c9:b2:d1:44:3d:4e:4e:47:2c:
                    b9:e5:42:03:5d:cb:fa:d1:03:f4:6c:54:e2:1e:bb:
                    ea:61:66:12:60:43:25:5e:8b:72:50:54:10:da:27:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AD:FA:10:CD:DC:F2:C1:8B:7B:DD:13:39:A8:15:DB:C4:6C:E6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8c4de7df-b06c-31b9-a2a8-529e75c731a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ab:37:2d:b9:d9:aa:10:b6:5d:a4:61:96:e3:d5:38:bd:5f:
         e8:22:0f:4a:29:d7:9d:b1:79:93:cb:fd:0b:16:d1:2a:20:15:
         fd:75:aa:a9:47:01:02:6d:dc:ed:d9:07:43:2e:b4:3c:14:e0:
         38:11:20:ab:47:0e:67:49:01:4e:89:72:e6:90:73:b6:b9:71:
         51:14:5b:e9:b1:7f:8a:5c:ff:7b:1a:e4:aa:25:89:80:cd:b5:
         af:c2:3e:1d:c5:62:ed:4f:68:0a:e5:43:63:be:6a:91:95:9b:
         68:c8:ed:e9:b4:97:c5:dd:73:37:86:70:ce:40:cd:39:37:95:
         dc:81:81:95:be:30:16:8a:b6:fc:32:66:10:05:a3:06:82:72:
         58:5b:46:02:dd:84:e0:38:ea:f7:58:97:5a:3d:53:f3:c8:63:
         38:7d:9a:4f:a7:83:f4:cf:94:bf:be:3d:50:d9:3e:97:bc:7b:
         1a:81:ff:e9:b3:e9:a0:69:ff:e7:9e:f2:25:7f:d6:d4:5c:ce:
         c5:24:f6:d0:5a:7e:b8:05:d9:fc:d6:e9:d0:8a:b6:51:17:00:
         6e:07:ed:81:98:4f:b1:23:f9:5c:ca:9b:66:b0:56:b0:68:07:
         8b:df:34:41:a2:db:88:26:33:80:48:45:e5:03:42:b9:f4:06:
         a0:36:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:47 2024 by rpki-client on console-ams.rpki-client.org