Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/77889bca-f733-33f2-8666-e0faa79f2be4.roa
File:                     77889bca-f733-33f2-8666-e0faa79f2be4.roa (raw, json)
Hash identifier:          g+iAUkRPIfpziV6eD9pTGnTX+L4F07NNI/qsniSguDU=
Subject key identifier:   0A:0F:4B:45:39:3E:3A:AE:31:85:15:67:11:8C:90:40:AD:CE:70:52
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F432858473FF08D5DEFCE28BCAAB91890
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/77889bca-f733-33f2-8666-e0faa79f2be4.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     6315
IP address blocks:        198.60.104.0/22 maxlen: 22
                          198.60.108.0/23 maxlen: 23
                          198.60.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:8d:5d:ef:ce:28:bc:aa:b9:18:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=e10be2f1-fc80-4cfc-b501-931be8531458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:c3:a4:fd:bc:39:2d:c2:f7:a1:00:53:59:
                    14:49:9a:04:a0:0f:d7:00:6f:c9:36:5d:46:14:32:
                    45:45:5d:d4:ba:27:4a:a5:73:07:fe:6b:c3:05:a0:
                    83:89:c1:1c:bf:84:65:46:57:59:47:2f:8a:ab:fe:
                    61:c5:f8:44:49:17:16:ad:2d:be:f2:a6:08:24:19:
                    7a:62:f7:7a:88:6a:0b:ab:2e:7c:40:5f:34:4e:3f:
                    58:9c:15:a8:81:db:62:13:99:81:ad:9a:a6:a7:37:
                    49:e2:42:6b:31:7d:21:ab:cc:f0:c7:5e:48:ee:cb:
                    22:ff:70:b7:c4:76:6e:1a:c6:34:ec:88:e3:43:6a:
                    7f:37:f3:c2:ef:84:06:b8:0d:e6:ff:cd:5d:34:de:
                    60:c8:8c:9f:30:81:a9:5e:a6:6a:28:b6:86:ad:f5:
                    12:4f:d9:22:fc:24:7e:04:44:b0:fc:8c:68:8a:e8:
                    ab:85:1c:2b:1b:b9:4b:ff:45:3c:c9:10:36:7e:cb:
                    97:8e:73:17:62:a9:ad:e2:f7:d9:5a:00:06:d2:fa:
                    49:22:f3:a0:99:ff:64:fa:5a:58:41:08:13:c0:14:
                    58:c9:5a:61:88:bf:f6:3b:ad:07:4d:1f:1a:30:c3:
                    93:c2:54:50:ed:dc:56:e9:88:e5:8f:b5:d3:88:d4:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:4B:45:39:3E:3A:AE:31:85:15:67:11:8C:90:40:AD:CE:70:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/77889bca-f733-33f2-8666-e0faa79f2be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.104.0-198.60.110.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:76:bd:e2:ab:8b:7f:f1:cc:64:79:3e:84:4b:15:8c:c7:39:
         06:7f:65:68:b6:6e:75:4f:32:45:fb:56:c0:50:5c:e4:8d:48:
         5c:e3:e1:27:d8:14:7b:79:9f:f7:26:6d:40:36:cc:97:ef:89:
         07:92:b5:75:26:47:7e:10:af:ae:e4:3d:33:7e:42:61:d9:fd:
         c4:7c:09:c0:3e:40:7b:e4:d7:da:7c:61:05:ac:27:a2:62:b5:
         1c:f8:cc:b1:61:64:51:17:95:95:33:b3:68:31:8c:f8:20:1f:
         fe:96:c0:7d:7f:c3:78:bb:b0:5a:f7:b0:4d:2e:d1:fb:fe:82:
         80:1a:1d:8a:da:01:1f:5e:70:67:67:ea:c1:6d:53:3d:a0:1a:
         a3:a6:84:fc:94:e5:c7:58:d2:29:7a:fb:82:98:d1:fe:6a:e1:
         6c:83:39:7d:e0:49:a7:3e:b9:a5:25:83:a5:31:c1:5d:b8:bc:
         af:4b:dd:6a:8a:48:da:66:ac:e5:bf:7e:e9:1e:85:9f:3a:ca:
         5c:28:5d:e7:51:28:e8:aa:30:8d:8d:6f:84:38:f9:c5:bf:cd:
         87:3c:dc:ab:dd:b9:90:07:fd:41:25:1b:6a:37:1c:14:c0:c9:
         5b:38:34:f8:c1:1d:c6:67:fe:1f:d2:8d:ff:03:e8:20:25:20:
         34:5b:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:52 2024 by rpki-client on console-fra.rpki-client.org