Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa
File:                     acd6507c-4f88-3ba8-a356-fe09ba417a69.roa (raw, json)
Hash identifier:          c9hvDsiCl7kgf8A7tCbfL/6Juv7AIZNjxhsU9J2PoJg=
Subject key identifier:   70:4F:FC:B7:00:2E:A9:47:56:82:2A:FB:6F:16:35:9E:E6:FC:8C:CB
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584789EBF60172D4DA258D7D7740
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     40755
IP address blocks:        172.98.4.0/24 maxlen: 24
                          174.136.252.0/24 maxlen: 24
                          2606:3040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f6:01:72:d4:da:25:8d:7d:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=597cf098-da52-4620-bc4f-fa1ed5cbf8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:02:5c:fd:b9:83:51:4f:8f:8d:d2:a3:7a:d9:
                    5a:b7:07:ff:18:74:ad:07:0b:b8:39:10:53:c9:1d:
                    51:18:bd:90:64:b3:c3:12:57:79:1f:5b:2a:a6:4e:
                    41:f3:51:67:5d:73:fb:14:ff:6e:9f:6e:5a:61:54:
                    77:a4:26:ef:96:94:0c:16:c6:0d:1b:16:aa:65:b4:
                    00:20:bc:0e:7b:be:ad:2a:80:e3:83:48:b8:4b:9f:
                    4d:81:b1:a3:62:9f:d8:87:e3:63:94:9f:66:ce:48:
                    5c:cc:ca:e0:55:ec:b0:31:10:7b:bc:3f:c6:31:a1:
                    ef:e8:9f:a3:b8:9f:84:7e:28:fd:79:75:25:2e:95:
                    a1:33:59:8d:bd:a4:b5:cc:ee:05:d3:87:2f:47:d5:
                    1c:33:65:5a:d6:98:cb:a2:53:09:c4:2d:a8:46:12:
                    e8:4a:5f:66:ee:d3:60:ce:2a:c1:e0:b6:a8:0d:24:
                    e8:c8:ec:29:a2:33:ae:c2:d7:ec:e6:d4:fd:1d:d8:
                    24:fb:3c:08:52:26:e2:32:ed:24:09:08:1a:0e:1e:
                    34:ee:85:aa:af:17:33:4c:98:e3:60:a3:d3:a8:d0:
                    90:08:72:65:87:56:62:37:8f:80:a9:67:0d:4e:80:
                    03:d0:d7:4d:6a:9a:46:7b:47:68:1b:14:05:5e:db:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4F:FC:B7:00:2E:A9:47:56:82:2A:FB:6F:16:35:9E:E6:FC:8C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.4.0/24
                  174.136.252.0/24
                IPv6:
                  2606:3040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0a:9e:8a:ce:09:ce:ce:46:33:4e:8e:06:40:41:cf:0b:f7:
         d8:dc:16:f0:97:23:26:6c:75:77:c7:f1:ea:0b:26:e7:7b:a9:
         bb:96:af:57:71:b2:e4:37:bb:e5:55:ec:89:97:3e:4e:c4:cd:
         f2:59:1e:52:57:d8:7a:75:c1:3a:57:9c:a0:7b:44:a5:4a:c3:
         c0:19:7f:e2:2c:ed:a5:d7:d3:55:b2:1f:96:f4:81:50:2a:ac:
         42:e0:fe:0f:40:c0:f3:2b:22:fd:43:07:06:5c:33:bd:88:9b:
         c5:e2:9e:73:88:c1:14:a9:62:2a:a4:9e:56:1e:f6:45:be:15:
         d8:c5:5b:e6:01:fe:5c:d1:84:a7:42:c3:8c:ac:2a:41:12:f0:
         93:47:d5:d4:4d:d7:0c:e6:e8:f0:61:ae:97:19:b1:4e:c2:88:
         85:82:e9:35:7c:24:ed:23:c0:6e:76:6d:f3:91:72:f8:58:8d:
         fe:f0:a6:48:e1:f0:46:5e:6c:3f:57:0b:57:f2:4e:c2:cc:57:
         da:03:e3:38:bd:aa:c5:36:94:48:90:db:5c:26:af:fa:d9:f5:
         82:59:22:8f:b2:4d:e8:3e:de:e8:3c:7b:d0:44:f0:00:e9:95:
         8d:03:61:85:23:f0:aa:3c:ea:2f:b0:10:5f:38:0e:fe:d7:a7:
         cc:a4:c3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:09 2024 by rpki-client on console-ams.rpki-client.org