Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa
File:                     843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json)
Hash identifier:          zXct0H9Oul9P4FnfEYB4IlDGPrtrwHYBhh9LMLplTNA=
Subject key identifier:   C6:84:E4:1E:8D:63:61:9D:BF:4A:FA:D6:05:F3:85:18:58:3B:47:C7
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F43285847643B71644057D28FD7713FC0
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     2572
IP address blocks:        198.209.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:71:64:40:57:d2:8f:d7:71:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=780adb62-5860-4db9-a6a6-1c21a0bb9a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:f6:1a:e5:63:68:9e:83:59:88:25:2d:e5:
                    7b:b5:4c:fd:1d:07:86:bf:aa:24:81:9d:4e:d3:90:
                    9e:70:8c:9a:ed:e8:62:b6:44:1b:96:7c:98:9a:9d:
                    c2:e7:ff:9b:37:28:f6:fd:88:a6:99:f1:ca:f2:b9:
                    df:54:8e:2c:bc:1b:4b:95:44:e8:22:60:0c:1f:6f:
                    9c:87:10:91:5d:49:3b:ee:e7:2a:d9:cc:d5:55:17:
                    9c:d0:3b:c3:be:96:94:98:8e:9c:b5:f3:0c:52:f0:
                    c2:98:2f:58:0d:ac:3d:50:22:9a:d8:77:5b:60:58:
                    02:3f:02:8a:3a:23:fb:e9:97:c3:81:da:21:fd:39:
                    d6:e2:4a:86:e7:2c:6c:e5:0d:04:e8:27:0e:2d:0c:
                    4a:da:50:5a:9e:9d:79:f2:74:af:37:a5:02:87:08:
                    fe:95:65:2c:3c:f6:30:fd:0b:79:ae:5c:c9:98:6c:
                    6a:11:0f:e6:9d:41:40:aa:e6:86:5f:03:d7:86:15:
                    0c:a0:de:82:9f:d7:2c:a0:3c:55:f9:2f:ff:b4:54:
                    3e:4d:23:43:5d:0b:86:31:3e:f2:7c:96:5d:c8:73:
                    9e:93:da:7a:54:c1:5c:59:df:67:52:5d:e0:74:12:
                    10:d1:b6:59:42:31:ff:02:86:de:49:10:fa:a7:53:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:84:E4:1E:8D:63:61:9D:BF:4A:FA:D6:05:F3:85:18:58:3B:47:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:2c:f4:73:1b:a7:ad:3d:4b:12:d1:ab:54:af:f0:52:d6:
         91:37:a1:db:a4:6f:48:b7:75:e1:23:48:ad:67:80:e6:38:c5:
         98:c9:b9:38:49:58:d9:95:4e:32:8a:af:80:4f:70:ff:22:91:
         d5:57:cd:48:98:7d:ad:4f:b0:a6:8d:9c:e0:bb:c6:bb:fa:46:
         f6:10:9d:df:7c:4e:44:e3:58:31:b0:d8:90:10:ce:b1:62:b5:
         14:2b:7b:25:2d:78:b8:04:b1:9e:a4:02:4e:fb:19:e9:5b:26:
         63:87:68:94:57:02:0c:8c:31:10:a2:7a:20:53:e6:43:71:c3:
         e1:0a:55:73:37:77:49:14:f1:ba:3d:ee:a1:fd:8e:d3:b8:76:
         e5:5b:65:d2:04:38:8b:92:ea:b0:58:0d:03:6b:11:66:93:2e:
         7a:46:3b:43:be:ef:0e:75:ea:b8:dd:2e:95:ab:7f:ec:13:b7:
         88:08:ec:b2:58:89:36:97:2e:14:b0:34:f6:f4:8a:ee:02:28:
         f1:4a:8d:65:2e:b7:c0:71:77:c1:87:25:bf:39:49:cd:b0:7e:
         5b:3c:90:dd:da:f9:1a:6f:3c:9c:fd:1b:8a:26:35:a8:8a:d5:
         d4:fb:c3:c4:bf:29:73:ae:75:d3:10:de:f8:b2:27:34:70:56:
         2a:b2:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org