Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa
File:                     fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa (raw, json)
Hash identifier:          YBfsCy2YPyrCvFj998IU0Dmks4vQe28S0muSHk+UFmU=
Subject key identifier:   FE:C3:63:F5:7B:66:E0:E5:DA:57:CD:0B:B2:30:1F:0E:0A:EE:D0:33
Certificate issuer:       /CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
Certificate serial:       010D0C9F432858477BFB670569B733A94E771AC0
Authority key identifier: F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa
Signing time:             Wed 09 Oct 2024 13:10:55 +0000
ROA not before:           Wed 09 Oct 2024 13:10:55 +0000
ROA not after:            Tue 07 Jan 2025 14:10:55 +0000
asID:                     14618
IP address blocks:        198.62.163.0/24 maxlen: 24
                          2620:79:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:fb:67:05:69:b7:33:a9:4e:77:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
        Validity
            Not Before: Oct  9 13:10:55 2024 GMT
            Not After : Jan  7 14:10:55 2025 GMT
        Subject: CN=4afd245e-533e-48ec-8328-725eee380ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:19:d5:40:ae:88:4c:0f:38:23:5b:09:27:
                    05:ae:75:dc:fa:13:75:2b:83:30:31:f9:58:46:9e:
                    bd:d1:ef:0a:c6:24:8c:9f:1e:7f:7d:84:08:3a:11:
                    b9:78:b4:65:56:61:ce:18:3c:92:31:b7:d6:31:5e:
                    62:83:cc:54:66:5d:eb:2b:99:97:53:ae:9a:c2:87:
                    d7:39:cf:0f:6e:c2:ce:4d:7a:89:e2:68:93:4b:d2:
                    85:01:66:e6:bf:3b:81:ca:b9:76:b2:d9:c8:30:12:
                    36:2e:84:c0:bd:28:42:c6:a3:5d:7d:4f:f5:78:98:
                    3b:8c:9a:e8:f0:a6:6c:f9:7d:de:5b:eb:4f:33:7d:
                    f5:2b:1c:59:8c:58:90:5b:a2:f0:89:d0:d4:27:01:
                    50:c9:9a:b7:40:ab:cb:76:28:01:db:21:b0:ff:fd:
                    12:7c:79:91:14:da:5c:ea:7e:92:17:0d:99:e5:b9:
                    3d:04:0b:32:88:21:c9:b1:d8:96:83:a3:f9:48:80:
                    54:3e:07:c8:47:12:bf:e5:ed:0d:cb:b6:96:68:14:
                    84:27:52:5e:9c:39:7d:4f:54:97:de:3b:40:c2:59:
                    73:5c:b2:d8:f6:0b:2a:41:56:be:bd:53:78:9e:2b:
                    be:b8:d9:85:95:b7:e1:7c:af:0a:a7:3a:c7:ae:79:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C3:63:F5:7B:66:E0:E5:DA:57:CD:0B:B2:30:1F:0E:0A:EE:D0:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl

            X509v3 Authority Key Identifier:
                keyid:F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.163.0/24
                IPv6:
                  2620:79:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:b4:79:4f:4d:0d:fd:f3:34:0d:8e:7a:22:a7:22:3e:54:
         02:cf:af:76:1c:c2:6a:a0:7f:4b:c4:96:9d:d9:50:d0:73:d9:
         44:9e:d3:99:01:0d:e5:93:96:01:f8:a1:5b:be:04:c6:12:20:
         74:63:62:58:01:2b:b2:fb:e9:4e:8b:14:bd:56:42:46:94:79:
         15:a1:f8:bb:a1:0d:51:4e:0a:ee:75:19:c9:e1:97:4d:23:03:
         63:3f:b8:3e:63:a5:94:c0:ac:6a:44:ba:2a:d4:9f:24:de:9d:
         3c:f5:f8:da:b0:c8:e5:44:11:af:86:8c:0e:93:30:db:fa:d3:
         0c:f1:29:71:8f:af:de:f6:52:52:cf:7a:ca:f3:79:7e:09:3e:
         a9:54:73:b5:0b:64:45:dd:24:5e:92:a3:d6:ed:31:e6:5e:10:
         9d:35:de:35:30:0e:9e:57:4b:c4:b7:24:ed:95:c7:cc:4e:ba:
         c9:86:e4:ec:80:02:09:1f:67:92:9b:86:8b:ca:b0:60:ba:90:
         f4:1f:fa:a0:16:bb:52:2e:3f:02:dd:80:f0:e8:4d:51:3f:fd:
         a6:20:cf:16:47:b6:ae:87:6c:d8:4b:db:32:f4:f7:57:9b:a4:
         99:04:91:db:16:d6:4b:0b:c9:93:fd:f0:7a:e2:a6:4f:b8:5b:
         b6:60:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:29 2024 by rpki-client on console-fra.rpki-client.org