Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa
File:                     bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa (raw, json)
Hash identifier:          +SuQp2H4IFG8qAyhDceeMHFui+rjYL8sYTUJBMQeRJw=
Subject key identifier:   1C:3A:CB:12:11:38:C1:AF:F8:4A:E5:01:EB:4D:AE:31:F8:08:E3:B0
Certificate issuer:       /CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c
Certificate serial:       010D0C9F4328584757CD29EEF4C75580E0418280
Authority key identifier: 3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa
Signing time:             Thu 26 Sep 2024 14:08:39 +0000
ROA not before:           Thu 26 Sep 2024 14:08:39 +0000
ROA not after:            Wed 25 Dec 2024 15:08:39 +0000
asID:                     53566
IP address blocks:        198.96.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:cd:29:ee:f4:c7:55:80:e0:41:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c
        Validity
            Not Before: Sep 26 14:08:39 2024 GMT
            Not After : Dec 25 15:08:39 2024 GMT
        Subject: CN=2fe1366b-2625-4079-bbd5-5c2612c546f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:de:5f:44:78:f3:31:27:ef:71:fb:b9:76:
                    13:88:9c:fd:ab:c7:2f:d9:a6:b5:f5:7e:4c:7d:8b:
                    ef:4e:2b:6b:27:f5:b0:8e:b8:e6:82:db:b5:43:01:
                    76:97:da:68:8c:f7:57:4e:0b:99:17:25:dd:54:ee:
                    b0:43:46:b1:75:d2:61:ce:05:95:48:d3:d6:1e:07:
                    4e:3c:27:2d:88:e7:dc:40:6a:cf:e4:fd:9a:77:a4:
                    bc:29:29:df:0b:86:ab:23:32:14:e2:df:af:f0:5a:
                    6a:f9:a1:56:a8:45:73:b8:e9:2f:8d:e6:f6:7d:ef:
                    90:39:cc:17:06:14:d1:3d:0d:45:c3:40:ea:3a:f5:
                    5b:9a:c1:08:e7:30:85:d6:b4:1b:f4:f7:24:b0:44:
                    fe:9e:38:da:58:68:46:30:dc:79:b0:93:bc:8b:67:
                    ea:69:66:c0:87:c7:8f:55:94:97:2b:2c:5f:16:1b:
                    95:54:41:48:58:17:28:4c:ab:74:42:b4:21:c2:1f:
                    9b:5a:8b:82:e9:0b:c4:3d:66:33:42:5a:ad:69:fe:
                    e2:f3:b7:22:88:c9:cf:02:3b:be:b4:dd:b2:05:ac:
                    05:b7:da:de:d6:d2:5d:bc:b0:b9:69:33:4d:99:6b:
                    81:48:5f:1c:cb:5f:e4:aa:0c:48:87:7d:1e:5e:86:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3A:CB:12:11:38:C1:AF:F8:4A:E5:01:EB:4D:AE:31:F8:08:E3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl

            X509v3 Authority Key Identifier:
                keyid:3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.96.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:b1:41:d0:03:d0:eb:f3:e9:3f:8e:19:a6:f4:3c:26:01:
         43:4c:ed:f0:15:c0:d1:5a:21:09:29:0f:b4:02:ce:13:d7:62:
         75:b4:82:91:62:cc:fe:09:b8:79:a4:1d:1f:1c:2a:88:ee:ab:
         d7:2c:f0:3e:f2:03:f4:25:bb:83:10:c6:07:d9:f3:be:65:e8:
         bf:91:6c:ea:2b:cc:a5:94:51:43:1b:74:34:57:53:88:e7:c2:
         f9:2a:e4:50:0d:e9:aa:36:72:b7:5d:ab:2b:d1:d1:01:0d:a1:
         c5:87:0c:01:0e:f6:68:9d:d4:ee:dd:6b:5e:39:33:19:1e:ab:
         c9:2b:12:1d:70:d5:42:69:34:56:7e:53:17:a6:53:f2:90:ae:
         e9:25:59:de:be:6d:dc:9c:c8:ef:70:8b:16:7c:55:5b:84:09:
         4b:53:78:dd:69:c4:4c:a7:67:0e:61:26:45:d9:6c:bb:ae:bc:
         7e:9f:b9:36:fd:85:91:d3:13:cf:de:56:25:a9:d9:e8:84:95:
         0f:d7:db:42:bb:3e:84:9c:02:f0:80:00:86:99:47:ea:36:67:
         6e:5f:05:67:6c:15:ea:cf:98:e4:f4:90:ef:84:97:49:e0:72:
         4f:35:00:fa:6a:00:9c:54:d3:9c:8d:49:3e:ff:f0:b4:92:78:
         8e:d4:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:32 2024 by rpki-client on console-fra.rpki-client.org