Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/3002c08f-8974-3f48-b96c-2c15198fbcb4.roa
File:                     3002c08f-8974-3f48-b96c-2c15198fbcb4.roa (raw, json)
Hash identifier:          Wn3Al2GKnCxEvD8kPdNxN+2JTEOYbcVpTR5hlad2wQc=
Subject key identifier:   67:9E:27:17:70:3D:6D:7A:43:16:DC:ED:F6:59:F8:3D:24:82:C7:3D
Certificate issuer:       /CN=13168988-4625-42dc-9138-e5632130d1ba
Certificate serial:       010D0C9F43285848090FC0020939452DCD28F2EC
Authority key identifier: BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/3002c08f-8974-3f48-b96c-2c15198fbcb4.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        192.197.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:c0:02:09:39:45:2d:cd:28:f2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13168988-4625-42dc-9138-e5632130d1ba
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=6177d84d-8ccf-4c3c-a95e-03b1af403311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:3b:af:b7:52:ca:23:23:ec:a9:0a:cd:0d:
                    dd:a5:49:2d:ae:d0:e3:b7:6b:e9:5b:4b:11:8a:52:
                    cc:77:6a:03:79:3d:2d:c7:a2:f5:e0:b2:b1:c3:14:
                    09:d7:c3:b6:12:89:93:b0:8e:4c:55:1e:10:e0:70:
                    b5:89:90:b8:8d:74:df:08:12:c8:32:8d:d3:b3:a7:
                    5c:f3:59:b2:ee:bb:9d:6d:30:63:64:c1:aa:4b:84:
                    67:eb:7b:f3:fa:f8:f2:8b:87:53:4b:0c:39:c6:a7:
                    71:0f:e6:cc:41:12:08:22:9a:f2:01:19:5b:42:1a:
                    54:84:1b:3f:35:81:2b:a5:6e:41:92:a7:a9:be:4a:
                    d8:ad:2e:da:85:e5:30:60:c4:01:59:6b:8f:a3:9c:
                    ea:be:16:43:8d:09:f3:26:40:de:e2:58:59:56:d1:
                    78:01:38:ac:9e:61:d3:28:17:82:60:60:cd:0b:60:
                    36:c0:a8:9b:a6:83:2c:94:a8:f3:83:76:a9:ba:b1:
                    06:24:10:7f:9f:90:94:bc:05:0e:86:47:96:4d:8b:
                    0a:62:8d:5e:8c:09:06:cb:69:99:ac:91:ae:fd:15:
                    7d:6d:b2:45:ab:b3:76:e6:2a:40:25:a4:15:c4:e0:
                    44:3c:c7:39:0e:fc:69:1d:f5:49:f2:07:77:fc:bc:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:27:17:70:3D:6D:7A:43:16:DC:ED:F6:59:F8:3D:24:82:C7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/3002c08f-8974-3f48-b96c-2c15198fbcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:81:8d:c8:56:97:b8:18:ab:bb:8d:43:a6:4d:e4:af:60:aa:
         73:f1:88:c2:af:ee:7d:ea:5a:f0:11:2e:8a:85:99:87:be:0f:
         fb:d2:08:01:46:85:89:dc:05:ce:6c:0c:60:80:67:65:9a:5b:
         12:98:b6:d8:29:6f:ee:59:e8:3c:c4:bb:95:9d:0e:50:4b:13:
         b2:3c:14:82:73:ba:01:aa:76:c9:b1:6b:89:3c:8c:18:32:8b:
         54:01:f7:14:3b:4f:2d:31:61:41:33:44:41:f2:c1:0c:4a:ca:
         9c:64:5a:09:a7:77:40:ef:e6:d0:f4:10:2c:90:c6:6e:72:49:
         b3:5a:7e:49:e6:08:78:57:a3:a1:08:71:7a:66:8a:c3:ad:f5:
         f1:7a:0e:40:e0:ff:59:e8:d8:54:9f:40:16:68:a2:45:1f:97:
         06:e5:8b:e6:fd:7e:83:ad:73:fd:89:fa:05:14:df:41:df:fb:
         3e:7f:85:20:73:9b:6a:11:09:e5:57:14:c4:f9:44:82:ea:ee:
         56:fc:ee:5f:1f:35:cc:69:5d:f8:44:b1:f0:24:a7:df:af:cd:
         84:fd:c6:82:f7:dc:2f:4d:0b:bd:74:11:c9:88:47:ea:79:ca:
         d4:34:11:8a:dc:2c:36:b6:69:7e:46:b7:4f:cd:01:71:07:ea:
         52:0b:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:55 2025 by rpki-client