Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/5c675a48-a366-323b-b85c-1256274bf13b.roa
File:                     5c675a48-a366-323b-b85c-1256274bf13b.roa (raw, json)
Hash identifier:          m5zdMCdARA6NbpH8EF5gy1xJUc64ucRHtKLJ3tD/uWg=
Subject key identifier:   B5:93:8C:39:B6:C2:8F:2A:21:F1:89:8F:6F:2E:8C:8A:F4:29:B2:DF
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F43285847C8D9E9D652376EC2245F0740
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/5c675a48-a366-323b-b85c-1256274bf13b.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     21991
IP address blocks:        198.8.58.0/24 maxlen: 24
                          198.8.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e9:d6:52:37:6e:c2:24:5f:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=b01f36c0-8bf8-4194-8cc9-b7d4e8cac851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:0f:44:e2:e1:90:8a:0e:52:fe:84:b4:d7:
                    c2:db:97:6e:d4:ad:1f:54:2a:7a:65:6e:6d:13:fb:
                    dd:79:44:c5:a2:4c:10:46:f2:33:2a:57:bf:2b:8c:
                    fe:cc:75:73:b9:f3:7c:d2:2a:8f:d3:17:c3:d4:a8:
                    18:25:a2:f8:88:60:8b:d7:7d:2a:ab:92:a7:8c:e7:
                    a1:5d:3c:ca:88:9c:f7:51:24:6d:54:7e:20:ae:5a:
                    49:e0:d7:92:b3:95:6a:0d:53:1d:6e:a2:42:51:71:
                    df:c1:4c:cd:c0:5c:63:28:32:a1:e3:ef:5f:09:ed:
                    20:0e:b1:05:13:00:c7:47:96:b1:31:fc:61:87:7f:
                    32:d2:8d:33:a0:87:e3:05:d4:d8:a8:51:5d:fd:d0:
                    a2:eb:35:3b:94:b0:02:2d:94:71:91:be:1a:67:f4:
                    11:fe:85:73:c9:16:92:19:1a:25:9a:90:d0:9f:b4:
                    30:2e:3b:0c:47:48:e6:a7:d4:b8:46:8f:99:1c:46:
                    53:22:ed:79:fa:c6:5e:20:32:26:c3:dd:c1:30:b7:
                    cf:fa:ff:0f:2d:4f:57:10:7c:0c:6d:4f:16:c3:3b:
                    b8:de:38:52:2b:c7:70:7b:ef:0f:96:04:77:8c:4f:
                    67:7f:f3:1b:c3:60:dc:aa:e6:a2:23:e8:53:2f:e0:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:8C:39:B6:C2:8F:2A:21:F1:89:8F:6F:2E:8C:8A:F4:29:B2:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/5c675a48-a366-323b-b85c-1256274bf13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.8.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:6a:7e:e8:02:ca:80:01:57:6a:fc:8c:a1:d4:68:54:f8:
         7b:2a:60:7e:bb:0b:df:df:d3:07:ee:a8:3d:f5:03:1b:c9:8f:
         7e:7b:7e:fb:42:e4:0d:ef:ee:fe:1d:c8:39:6c:18:b5:f4:ac:
         12:dd:5f:c1:76:4e:fe:50:2b:18:79:bd:26:82:20:05:c5:76:
         dd:1f:1d:36:ea:53:71:34:41:93:18:85:bf:9b:6d:a8:ee:45:
         78:3f:6d:b5:4d:3f:7b:09:e5:de:65:f6:dc:26:fd:36:fc:2b:
         15:fe:91:5c:5f:09:72:28:2d:70:17:fb:1a:81:e0:ac:45:5f:
         99:33:bd:c2:42:61:d5:46:25:40:87:28:00:ff:6e:c8:76:48:
         0a:d1:b9:27:e8:be:80:50:26:ca:ca:87:8d:84:3b:2a:56:2b:
         2d:ca:e2:7e:1b:c6:44:08:75:0c:bd:68:16:81:26:24:58:f3:
         0c:fb:8f:e7:5e:5c:5c:3b:f3:58:8c:56:f0:56:99:e7:af:0c:
         bb:96:56:f6:39:d1:02:a4:41:87:d3:a2:44:97:1c:a3:23:2a:
         96:42:b1:6e:d3:0f:9d:45:67:22:43:d7:b1:5a:a3:23:8b:dd:
         31:cd:62:a6:85:bf:ea:b8:4c:54:85:84:c0:41:0e:38:f0:8a:
         64:a9:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:19 2024 by rpki-client on console-ams.rpki-client.org