Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa
File:                     27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa (raw, json)
Hash identifier:          zaFMmEr6sYJpYkcWrMz83XvxFYA2AZOi0rg6Z072LeU=
Subject key identifier:   6B:3C:62:7C:56:97:AF:EB:EA:8F:BC:8F:67:7C:A8:1B:44:15:C9:AA
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F43285847CFD4D87E92D06C9C29D36000
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     32771
IP address blocks:        198.241.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d8:7e:92:d0:6c:9c:29:d3:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=2abf03bf-1016-4022-ad95-c0251e9b0c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:bc:b5:83:4e:79:df:1f:40:47:96:0b:09:
                    3a:f2:f9:af:29:d4:b8:4a:36:79:b5:69:be:dc:ca:
                    c3:44:2d:69:86:72:19:90:3c:8f:15:10:37:f1:dc:
                    40:04:5b:3c:24:88:fd:71:30:d9:46:9f:f5:f0:41:
                    11:81:23:75:13:ef:35:28:08:a7:43:d4:1a:05:45:
                    90:74:80:9c:72:c3:6d:8c:8f:c9:d3:b8:6c:1d:13:
                    bf:34:fe:ff:cd:73:f3:d7:2c:d0:d2:bd:fc:bc:79:
                    23:84:4b:47:74:38:47:2a:7e:e1:69:07:08:7d:fe:
                    82:36:5d:49:b9:1c:3f:35:7e:bf:1d:4b:08:e0:49:
                    82:e1:d1:32:ea:64:96:c9:07:8c:37:4e:a7:9e:e8:
                    bb:df:cd:60:8b:6d:15:92:8e:a6:91:76:d7:f7:f4:
                    7d:2b:fb:20:a0:1e:63:6d:b9:83:67:28:6d:4d:2e:
                    e2:6f:73:dd:6d:79:a7:dd:8a:92:e2:ca:db:7c:4e:
                    55:e3:44:48:77:f0:96:a7:2a:86:27:c4:9a:77:8a:
                    ca:ff:d0:e3:c6:0d:6e:a4:db:7a:df:67:be:38:e2:
                    1f:5e:05:82:29:26:cd:e2:5a:fe:ea:b4:61:c3:ce:
                    bb:e1:30:9b:75:62:79:1c:0a:ed:f0:58:f5:f4:0e:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3C:62:7C:56:97:AF:EB:EA:8F:BC:8F:67:7C:A8:1B:44:15:C9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:92:e4:93:24:e0:54:f7:4f:a3:bf:cd:de:8a:62:54:c6:86:
         6a:de:cd:af:96:32:06:37:91:63:9d:2f:7b:f1:d3:72:e5:00:
         c1:eb:9b:0a:9b:70:59:3b:4c:7b:91:9a:1d:a7:8a:fc:de:4e:
         b2:7d:f5:4e:38:db:53:8b:13:98:c9:47:1f:85:b8:ba:97:d8:
         61:7e:03:a9:bc:54:d5:94:dc:ad:49:41:40:8e:1a:a1:1c:9a:
         af:88:46:e5:87:29:32:bf:d4:29:0e:63:ca:80:e7:58:98:25:
         63:b9:14:a7:d9:89:b2:30:69:35:ce:87:01:7a:36:77:35:24:
         d7:8c:d9:92:21:c0:21:d2:23:76:85:4b:8d:80:50:91:68:c6:
         f4:2c:0b:fa:cc:cd:46:66:f9:93:8f:9c:b3:de:de:50:d7:a3:
         ad:af:a8:95:b5:2e:8b:e8:b6:64:55:97:c8:a9:35:48:6a:10:
         e9:ef:f8:fd:c3:50:21:f3:22:5c:b4:c1:bd:83:50:17:5a:21:
         f8:a6:6c:7f:fb:f1:b2:9e:b5:63:1c:b7:73:d5:6a:0d:bf:23:
         9e:45:1e:26:e8:1d:1e:cf:91:32:b3:d3:ed:fb:fc:13:27:32:
         c7:7a:a3:0f:2b:02:35:d5:5d:6b:44:d4:29:3e:d7:9e:3c:b4:
         b2:23:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org