Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
File:                     210d697f-4471-33fc-9f0b-14da84092c79.roa (raw, json)
Hash identifier:          o6hrbBdpNPUS1v77J9bcNEoHDip42ehUQy3F9SKOQ5k=
Subject key identifier:   B5:14:6C:95:C1:92:D8:CE:14:28:B5:9D:47:FF:DD:4C:B1:E7:E8:51
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F43285847BC2C1197357C7A5019811260
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     26658
IP address blocks:        198.180.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:11:97:35:7c:7a:50:19:81:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=457cc866-f9d3-47ea-a144-1133aac7df81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:4e:a0:ee:50:c1:56:cd:c1:7c:1e:e2:19:
                    ac:32:7e:a1:97:8d:c6:cb:5f:9b:04:86:52:13:cf:
                    66:ad:a3:75:f8:6b:02:17:ef:64:5c:9e:e6:30:6b:
                    c3:38:7d:99:12:17:8c:fd:61:ec:7c:0f:e8:6a:35:
                    45:15:f9:44:7e:65:40:80:e0:b6:d8:6c:02:41:41:
                    5e:b1:53:f0:99:7e:bd:c8:4f:4f:99:5e:7c:9d:b0:
                    9f:1b:39:eb:81:36:cc:ef:81:93:02:1a:fc:90:c7:
                    2f:01:ad:dc:f2:ce:b8:e8:f9:5d:d4:91:23:e0:30:
                    e4:20:fc:1b:54:e2:33:39:37:90:81:b1:ac:de:0b:
                    36:e3:1b:b5:88:8e:4f:60:3f:49:61:61:7d:03:a4:
                    85:1c:d3:d2:cb:57:3e:38:9e:6c:92:76:3b:27:41:
                    32:ab:03:47:87:08:08:a5:c9:2e:c9:ea:c6:a4:ed:
                    9d:95:c6:e5:d2:76:c0:b1:d3:2f:98:a7:f5:3a:25:
                    59:bf:90:d9:88:a5:88:fe:ba:64:45:64:47:a9:aa:
                    42:f2:94:ee:7a:71:3d:f0:24:41:3c:f9:6e:1f:b7:
                    ca:19:2f:75:39:13:e8:43:88:3a:30:5c:45:c9:fb:
                    22:1d:4d:10:ee:74:f7:4a:ab:e9:20:64:8b:c6:61:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:14:6C:95:C1:92:D8:CE:14:28:B5:9D:47:FF:DD:4C:B1:E7:E8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/210d697f-4471-33fc-9f0b-14da84092c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f7:ca:61:73:24:f2:4f:db:de:63:1f:d8:ea:60:e7:40:cd:
         b3:f5:a5:04:66:25:8c:8a:bd:b3:3d:97:16:26:56:53:89:d5:
         89:2c:76:dc:d7:21:ef:4d:c7:47:d2:8c:0c:a7:ff:e0:08:b7:
         0b:a4:21:2d:33:7b:51:72:45:36:78:4e:67:44:89:67:da:8e:
         c3:02:67:8d:53:34:33:39:e3:4f:60:1a:96:80:e0:b2:77:ec:
         9c:28:9d:7c:10:19:ed:e6:2a:95:8a:dd:a8:c0:0f:3c:f4:1f:
         fc:d8:2f:8d:ae:c2:35:42:b7:9d:9e:9d:ba:da:0f:cc:00:5e:
         84:11:8a:75:cd:56:6b:40:35:8a:28:28:54:c4:cf:50:98:e9:
         5b:5e:89:2e:e6:cd:d0:da:b4:12:97:f0:f2:05:b2:2f:e9:a4:
         f7:d0:5a:5f:ae:eb:45:69:77:92:29:85:21:26:5d:fd:0b:6f:
         e7:42:0d:5e:c8:7f:20:b5:1b:2e:e8:0c:fa:2c:67:00:46:16:
         5b:e8:15:19:ba:46:67:1d:d8:4a:cb:09:ce:93:f5:bf:c7:3d:
         1b:c6:33:35:67:ed:ea:cf:dd:ab:0b:0c:82:40:37:e5:dc:6c:
         0a:91:06:a4:9e:fd:e5:33:30:1f:6c:f5:87:4f:fc:c3:fa:43:
         f6:08:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org