Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa
File:                     196dc71f-9dea-3538-bf9e-512a28a260e5.roa (raw, json)
Hash identifier:          T7PgvPo3bdbv4zPUoSpRPjpfdH2zRAEZl2smoYpUAG4=
Subject key identifier:   11:81:AD:EF:F0:DC:40:B4:FA:E6:CF:40:25:94:19:14:D2:D9:FA:C9
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F43285847E0BAD41C9FE1A5EEC5534400
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa
Signing time:             Thu 14 Nov 2024 15:17:27 +0000
ROA not before:           Thu 14 Nov 2024 15:17:27 +0000
ROA not after:            Wed 12 Feb 2025 15:17:27 +0000
asID:                     188
IP address blocks:        198.151.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:ba:d4:1c:9f:e1:a5:ee:c5:53:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Nov 14 15:17:27 2024 GMT
            Not After : Feb 12 15:17:27 2025 GMT
        Subject: CN=359a305e-44b8-4def-a343-757c65a612d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:bd:08:f2:a6:db:8f:dd:fb:20:fa:29:65:
                    13:eb:14:56:f7:2f:7c:3b:0c:39:f6:2b:c2:b3:e3:
                    00:73:2f:0e:9a:7c:22:e7:3a:7d:ef:20:da:41:ef:
                    09:c3:dd:3d:d4:4d:a0:26:e6:a5:1d:96:29:28:4d:
                    19:36:36:48:ce:ce:8e:02:5d:a7:85:bd:78:da:be:
                    7b:1a:17:b4:47:9e:ce:7c:f6:73:83:3e:94:bf:b4:
                    a3:6c:42:0c:df:34:9f:43:69:e2:9a:88:03:f0:9f:
                    d6:98:a3:a2:b0:e6:87:6d:a6:d3:b6:3f:f4:2f:1d:
                    3d:c5:3e:17:68:96:1a:90:6b:3f:91:b4:89:48:db:
                    94:c7:82:fc:65:e0:36:75:a9:c3:27:b4:c5:4c:ad:
                    73:82:14:5d:e8:3b:17:95:13:3f:5b:1d:30:82:9b:
                    67:d3:44:cb:1d:98:60:cb:29:bd:ad:d6:3a:c6:46:
                    2b:67:71:a5:6f:3e:cc:4c:85:7e:20:cd:c7:eb:e6:
                    8b:4d:1f:5f:fe:50:3b:07:0b:78:07:b8:b7:e9:9c:
                    2d:93:02:c6:07:dc:ba:2b:7c:78:37:9a:eb:18:07:
                    56:f6:84:65:82:a6:d0:a0:ec:ce:f0:a4:84:f7:11:
                    16:5e:c8:21:a8:ba:c7:f5:5c:10:02:6b:e9:5d:b8:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:AD:EF:F0:DC:40:B4:FA:E6:CF:40:25:94:19:14:D2:D9:FA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:d2:97:b6:6d:86:99:68:13:b7:a3:68:32:ef:47:51:bd:
         6f:f0:23:72:af:02:f9:04:d8:47:7a:36:78:aa:30:8a:4c:59:
         9d:21:29:2a:b5:a2:b2:25:9f:1b:3c:52:a7:6b:06:7c:4b:6b:
         54:a2:43:7d:c4:7e:2e:e1:ec:a8:af:50:a2:68:3d:cc:e4:e8:
         8c:9d:d7:45:b9:4d:7a:99:8d:f7:1c:8c:32:fe:7b:13:4d:a6:
         80:21:d7:a6:a9:44:6e:d4:6c:18:1f:86:50:57:4c:96:78:84:
         5c:18:9c:60:e8:af:80:a3:93:67:01:f0:82:f1:d7:04:aa:29:
         72:85:38:e5:63:ac:68:92:d8:4c:fd:73:6e:9a:ae:25:bc:09:
         44:61:3b:84:56:0f:22:3a:56:bc:a0:97:00:bf:32:43:bf:51:
         19:a7:bf:b7:60:81:4d:39:76:bb:9f:78:75:47:b9:e8:7b:1a:
         52:8c:b5:f4:18:a0:c4:b6:fe:ff:4a:88:dc:1b:b6:f9:c8:0f:
         fb:61:eb:98:58:77:b3:d8:c6:a4:77:e1:56:18:bb:40:69:b4:
         4a:4a:2f:33:b3:aa:6c:c4:0b:3e:0c:aa:1e:7c:49:b1:12:e7:
         46:a7:c9:3c:d9:36:66:12:e1:54:06:60:f6:b0:98:cd:c0:1b:
         aa:50:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:22 2024 by rpki-client on console-fra.rpki-client.org