Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa
File:                     44e8f65f-ce57-333c-a470-bc9213b738ea.roa (raw, json)
Hash identifier:          Xfe0n5EpVhuEE5xoL4bomxz4MQ3Sr1+xZb6wv42cKDE=
Subject key identifier:   21:1A:57:A4:9F:EF:9D:48:C7:59:B1:2B:D1:EC:0F:02:DC:2F:2D:ED
Certificate issuer:       /CN=08e01c34-608c-4615-9e00-7b09e447bf4c
Certificate serial:       010D0C9F43285847299B10BD2921D71C9CDC26A0
Authority key identifier: 4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     15116
IP address blocks:        198.182.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:10:bd:29:21:d7:1c:9c:dc:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e01c34-608c-4615-9e00-7b09e447bf4c
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=8c71afc2-01dd-4b63-afd8-ae54fa835a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:a3:21:c4:59:14:1b:d7:83:ec:a8:ec:a3:
                    50:02:fe:48:e5:79:4a:d3:50:b9:3e:34:2b:fd:51:
                    3a:9e:c5:bb:11:36:3a:61:8c:0a:7f:66:73:8a:76:
                    43:0f:77:1a:6d:1e:e6:33:ad:23:c0:02:c4:23:17:
                    10:3b:74:5d:b7:3d:86:e4:96:f9:e7:d2:a4:8b:9b:
                    e9:a8:15:e4:6f:a2:bb:6e:31:2e:77:00:b0:18:cc:
                    5b:c5:5d:bc:34:82:c6:98:12:a9:da:60:e7:94:a1:
                    0c:c0:88:98:77:dc:9a:4c:31:aa:0a:4e:24:b9:0b:
                    d9:dd:50:ee:b4:63:f8:0b:5c:7f:71:c5:be:f0:19:
                    b2:03:89:3a:61:70:5b:4f:51:81:b0:97:c4:40:7c:
                    1c:1b:b8:fd:51:a2:f4:2c:bb:f2:ff:e2:0a:f3:4b:
                    2e:4b:0a:b9:cc:50:8d:7a:4f:cc:c6:4c:b6:40:fe:
                    76:12:36:e2:cf:49:bf:85:c0:ba:a1:46:f7:14:d3:
                    f8:94:4d:fa:c2:9e:d8:64:83:b0:43:d8:39:66:df:
                    84:44:81:ed:af:4d:47:62:92:1c:d8:ad:ff:19:e6:
                    84:2c:7a:49:d3:7b:a5:89:6b:33:cb:6c:b6:84:18:
                    a9:e8:2a:38:4d:aa:52:40:b3:9b:73:f4:db:59:a7:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1A:57:A4:9F:EF:9D:48:C7:59:B1:2B:D1:EC:0F:02:DC:2F:2D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8c:ae:e2:62:ef:f2:8d:51:e6:3b:fc:62:cb:df:b8:8e:a8:
         9a:43:0a:94:98:7d:f9:13:66:ad:4c:3b:b9:bf:65:ba:e3:c4:
         f2:e9:21:b6:4d:44:95:cf:f0:fc:36:29:3b:bb:ee:9a:c8:e5:
         b1:4c:eb:dc:09:db:ca:f7:9d:6f:94:56:4a:7a:7a:63:3b:52:
         e2:56:83:5b:cf:9e:df:89:51:51:14:c8:74:91:2a:30:8d:c1:
         12:7d:9e:f4:14:fe:65:eb:22:ea:cc:fc:0e:a1:46:ec:6a:d9:
         0d:f9:d0:c7:11:5b:b8:cf:01:de:24:ec:c7:a1:e5:41:13:e8:
         ab:35:00:15:83:ba:2c:14:b6:3d:cc:93:d7:06:f8:3b:fb:84:
         a3:97:3d:9b:2d:0b:3d:39:47:8c:ff:a9:dd:9a:b9:f4:b7:8a:
         82:07:d1:55:1f:70:f2:c7:4b:c2:1e:62:cb:a6:f6:e0:3f:07:
         98:85:59:cb:26:fe:27:fe:ef:f4:87:d8:41:e1:83:ef:26:39:
         1a:d7:fd:97:d0:49:14:5a:5e:55:bd:12:fe:9e:1c:05:32:df:
         92:5e:f8:58:cb:a9:aa:84:74:5d:38:9c:38:2c:72:c1:52:fd:
         af:aa:1a:a0:69:c4:fe:4b:34:50:d8:c9:df:e8:04:11:41:b1:
         b6:b5:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:09 2024 by rpki-client on console-ams.rpki-client.org