Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa
File:                     7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa (raw, json)
Hash identifier:          qDEEvtwPTqfHkI9yl0j054U4kHjkQL3//DW/qk7b2HA=
Subject key identifier:   C8:2C:1B:B6:19:2F:99:D5:23:D0:F6:C0:E9:51:7B:B6:8E:6A:5B:28
Certificate issuer:       /CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
Certificate serial:       010D0C9F432858477BFB1F32FE158956C3F20680
Authority key identifier: F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa
Signing time:             Wed 09 Oct 2024 13:10:21 +0000
ROA not before:           Wed 09 Oct 2024 13:10:21 +0000
ROA not after:            Tue 07 Jan 2025 14:10:21 +0000
asID:                     16509
IP address blocks:        198.62.163.0/24 maxlen: 24
                          2620:79:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:fb:1f:32:fe:15:89:56:c3:f2:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
        Validity
            Not Before: Oct  9 13:10:21 2024 GMT
            Not After : Jan  7 14:10:21 2025 GMT
        Subject: CN=fd53914b-7c8b-44b0-a11a-772cff0bf905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:e5:03:f7:30:ba:2c:cc:d0:70:8f:41:61:
                    1c:51:5a:37:75:2e:c7:49:6e:19:6a:d7:1e:97:05:
                    90:29:f0:26:a8:2b:cb:e1:89:c2:a3:a1:d6:e5:bc:
                    c4:a1:8b:83:46:81:1f:6b:88:e0:7e:af:15:fb:5d:
                    43:1a:c6:a8:60:d8:54:56:39:49:16:44:b3:1d:89:
                    24:d0:98:42:71:25:0f:64:5b:e0:34:67:60:11:6c:
                    ab:05:a1:7e:cd:61:06:96:f7:2f:df:6f:83:6f:0d:
                    c1:fe:69:54:68:ab:0b:d1:68:cd:ac:02:ea:9c:7c:
                    01:95:9f:dc:c8:40:b2:c8:d2:04:84:43:f6:a1:11:
                    e0:30:ff:a3:f8:47:fa:86:c7:37:5b:5b:fc:0e:a8:
                    31:91:c1:2f:5c:eb:7e:6f:bf:27:5b:25:32:44:d6:
                    85:80:c7:23:20:98:1c:48:03:25:c0:40:90:51:4b:
                    9c:af:35:0d:dd:0d:16:56:63:e3:29:c9:8d:df:9b:
                    23:a4:04:9b:a3:1e:9b:ca:2e:a5:d8:9b:36:09:1a:
                    2e:70:3c:bf:b8:25:27:54:71:e4:30:5e:ff:61:cb:
                    d3:0e:ec:6d:0e:0c:6a:57:9e:2a:11:10:20:89:50:
                    1f:91:26:dd:32:21:b8:57:24:5b:6f:06:51:bb:11:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2C:1B:B6:19:2F:99:D5:23:D0:F6:C0:E9:51:7B:B6:8E:6A:5B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl

            X509v3 Authority Key Identifier:
                keyid:F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.163.0/24
                IPv6:
                  2620:79:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:45:f5:21:e8:ce:6a:ac:fe:eb:67:3e:61:3b:d3:aa:93:f5:
         c8:ca:c7:78:95:66:ea:a8:18:16:bb:64:c7:6a:9b:f1:0f:57:
         64:5c:9d:a4:ff:8a:fc:c0:19:92:5e:5c:b8:36:fd:11:bc:84:
         85:f9:22:e8:cd:a2:55:00:69:21:c1:3b:85:1b:ee:ee:69:b8:
         ea:20:55:41:3c:e3:3a:03:48:6f:6d:ce:b3:17:43:44:cf:92:
         85:51:fa:dd:98:8a:bf:12:0d:51:dd:ec:5c:5f:4c:03:0d:9e:
         33:22:82:04:ad:85:2a:40:9e:e7:73:65:5c:14:86:ae:be:35:
         12:ac:e6:39:c5:82:d4:42:61:22:66:5f:19:b8:e1:93:95:ec:
         39:89:5f:3c:26:5b:9d:7f:94:08:2c:dd:c3:2a:5f:79:cc:18:
         89:87:56:12:21:43:cc:e8:46:5f:db:dc:bd:95:1f:78:7f:b9:
         41:b9:56:a1:d4:db:1a:b3:9b:f7:0b:6d:d8:59:58:5f:c0:75:
         32:2c:50:c9:b5:33:3c:eb:dc:80:af:40:1a:5d:72:6e:e1:35:
         34:15:29:3c:64:d4:6f:20:92:5b:78:28:fe:7d:15:6f:24:31:
         10:1f:aa:cd:e6:03:12:d0:ec:56:a1:8e:b4:c3:79:d3:6a:34:
         7f:9e:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:59:55 2024 by rpki-client on console-fra.rpki-client.org