Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/0b771c3c-d4ce-349a-bb75-0d1a73b3776b.roa
File:                     0b771c3c-d4ce-349a-bb75-0d1a73b3776b.roa (raw, json)
Hash identifier:          tZ49hjtF23P+50aFLpUHtei5DXl+t/jgAzD/krjTPj8=
Subject key identifier:   AC:B4:64:C6:EC:1F:A6:7D:F7:10:4B:FF:C4:64:C3:E7:88:AD:A3:08
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285847338A5613CB5FF05611CB1B80
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/0b771c3c-d4ce-349a-bb75-0d1a73b3776b.roa
Signing time:             Fri 13 Sep 2024 14:24:54 +0000
ROA not before:           Fri 13 Sep 2024 14:24:54 +0000
ROA not after:            Thu 12 Dec 2024 15:24:54 +0000
asID:                     54548
IP address blocks:        198.71.59.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:8a:56:13:cb:5f:f0:56:11:cb:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:24:54 2024 GMT
            Not After : Dec 12 15:24:54 2024 GMT
        Subject: CN=10c43071-444e-4078-b449-697e2e0e529e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:21:c2:bc:45:cd:ad:69:3a:de:b2:85:d1:
                    fd:ce:f5:34:85:75:4d:0c:f6:9d:75:b6:2b:ae:32:
                    7d:df:18:5b:6b:a0:98:b2:ea:59:6a:64:16:d0:31:
                    8b:a5:e7:10:f0:90:5a:66:ab:18:57:07:41:54:69:
                    c6:f0:31:26:75:bd:2d:76:a8:d8:15:d5:23:8d:8f:
                    a0:cb:d5:16:40:72:18:ca:13:7c:92:b4:dc:6f:ba:
                    86:63:95:de:0f:40:99:7f:a2:55:8b:98:ca:5d:41:
                    8c:d6:53:fa:e1:82:5e:14:72:c0:54:dc:54:72:4f:
                    43:c2:70:23:e1:54:9c:80:e8:85:a2:1a:5d:df:f5:
                    fc:d8:e6:40:2d:81:d4:3f:0f:11:be:b3:96:8e:bc:
                    1f:2d:ca:12:1e:20:c3:18:1b:ad:2c:6d:1b:6a:7d:
                    a6:f5:d3:af:e0:f4:d5:2d:13:0a:ea:78:f2:a6:6d:
                    83:6d:06:cb:dd:e8:f5:00:15:5f:47:de:aa:53:b5:
                    a3:fd:d6:57:5e:60:4d:01:11:44:92:55:7f:e0:7f:
                    61:1a:2f:fb:eb:08:1d:31:12:11:16:a0:d2:7e:62:
                    11:e6:2d:09:09:d9:83:9d:e6:0e:71:eb:b9:b4:90:
                    e3:02:b8:e8:94:2e:5f:1a:ef:1b:c9:5a:ae:d3:36:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B4:64:C6:EC:1F:A6:7D:F7:10:4B:FF:C4:64:C3:E7:88:AD:A3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/0b771c3c-d4ce-349a-bb75-0d1a73b3776b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f3:b8:40:33:b8:8e:ac:4c:5e:50:ab:2e:91:72:8d:8c:7a:
         c7:aa:59:10:3d:fb:38:be:41:57:fd:cf:6d:a3:9b:b3:96:53:
         80:0d:fd:82:e7:b4:11:dd:2f:c6:d6:61:2b:1f:5c:7b:78:6c:
         69:dc:87:09:be:9f:2c:6d:cd:8d:37:14:25:20:d9:90:66:0f:
         06:a9:5a:5b:1d:23:59:07:e6:0b:f8:1f:5f:4f:39:a4:3c:60:
         ec:6f:28:15:b6:c3:d5:2e:c5:6c:eb:7c:75:c5:14:0a:44:10:
         64:ee:15:6d:7d:d1:44:19:2e:eb:5b:6b:97:9f:90:0a:8d:8e:
         43:1a:bb:8c:cd:aa:db:8b:39:59:71:d5:cd:36:22:12:f2:d2:
         ef:44:a7:5b:e5:5d:65:b5:82:5e:81:36:d3:62:2d:00:13:e0:
         6e:9a:0f:e5:62:67:df:2d:1b:d9:df:d7:92:1c:cb:10:db:e2:
         83:db:32:37:51:dc:f7:6e:d0:a7:cf:4a:90:20:a4:ac:c5:2d:
         1c:9a:15:47:cc:6f:31:a0:0a:08:32:18:3f:03:08:e5:29:29:
         de:07:c4:ae:5c:54:97:8b:a3:ee:38:6d:49:e9:ca:10:9b:c3:
         28:94:35:d7:81:24:47:20:1a:f8:a3:0b:e8:f0:4e:58:33:ad:
         53:b7:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org