Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/b882522c-9c45-3037-8ecf-f145dba3c415.roa
File:                     b882522c-9c45-3037-8ecf-f145dba3c415.roa (raw, json)
Hash identifier:          7OgFEnO674Y8ejYhKauoGynbs0E1mrI+gFCKB5tZsik=
Subject key identifier:   6A:FF:E2:24:9D:8C:1F:64:D6:CC:4C:C9:BD:A9:10:79:82:01:DC:0E
Certificate issuer:       /CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
Certificate serial:       010D0C9F43285847C1DF69F73BC77CF71E0C1B80
Authority key identifier: 01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/b882522c-9c45-3037-8ecf-f145dba3c415.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     7922
IP address blocks:        198.178.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:69:f7:3b:c7:7c:f7:1e:0c:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=9fcfd096-6469-4edd-b6cc-adc7c9f20877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:55:57:35:60:09:07:96:28:21:ee:4b:c9:
                    9d:96:0a:96:c3:78:74:77:7b:45:52:3c:2b:2b:a7:
                    26:12:13:db:3c:b9:e2:9f:4c:d5:7b:6e:67:01:2c:
                    b4:c9:3f:c7:01:65:e3:2d:9f:ea:11:da:19:fc:cc:
                    71:1f:60:54:6f:1a:40:e1:a2:0e:a6:ae:46:48:4b:
                    25:7c:74:fc:3f:ac:c0:ad:0b:72:31:3c:70:eb:9b:
                    8b:35:b2:ac:69:9c:cf:8d:a7:c4:9a:49:74:8e:2d:
                    8d:9c:25:b9:70:6a:39:ec:cd:ee:f9:ac:13:56:2e:
                    2f:24:fe:1e:93:dc:c8:7c:35:db:6e:05:01:54:74:
                    a5:a6:de:62:1f:9e:c5:5c:cf:25:2c:d6:f5:d4:33:
                    c2:85:dc:a3:b6:da:25:fc:12:2c:8b:52:a5:4a:79:
                    2a:68:98:3a:78:bd:f7:93:59:da:72:5b:d6:a2:28:
                    01:f7:60:88:2a:fb:5f:0f:4b:e0:21:15:9c:db:a8:
                    dc:6c:2a:1a:50:fa:e1:72:27:36:1a:42:84:b3:bd:
                    b5:5d:a7:07:e6:6b:9a:68:03:65:77:1e:7f:78:ea:
                    33:f7:8c:db:c6:2e:80:54:74:d8:33:91:84:b3:7c:
                    7e:68:49:9a:79:b2:b3:dc:1a:92:f1:29:28:70:fa:
                    0e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FF:E2:24:9D:8C:1F:64:D6:CC:4C:C9:BD:A9:10:79:82:01:DC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/b882522c-9c45-3037-8ecf-f145dba3c415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl

            X509v3 Authority Key Identifier:
                keyid:01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:52:2f:6a:ce:e5:ca:29:ad:1c:b9:bc:5f:19:5c:e3:ae:
         3c:57:98:1f:c6:89:84:9e:4e:25:5e:29:e3:0b:bb:73:a7:6c:
         72:99:34:e3:87:6d:f2:86:d4:df:f2:b8:cd:16:69:f5:72:bf:
         ee:8e:35:f6:3a:41:09:9b:30:d7:bb:99:01:47:5f:60:0a:2d:
         58:9f:5a:87:ea:fe:c9:9d:5a:46:3d:cd:75:f4:f2:b8:4a:14:
         17:2e:af:7e:c0:dc:8e:bb:7f:0a:2e:70:ca:f3:af:15:f8:4f:
         7a:37:fc:e5:74:8a:89:44:ef:9b:b9:d7:f5:a4:f9:ed:f5:3c:
         a2:b6:70:87:29:61:22:ba:0f:19:d8:5c:ef:22:fa:ae:bc:5a:
         a8:92:ee:df:ee:92:f4:3e:cc:97:1e:56:97:0a:68:ec:d6:f3:
         67:32:3b:63:e9:3e:99:d7:a3:1a:ed:db:d5:1e:85:19:d0:25:
         f2:26:d7:75:be:33:d9:d6:c3:0d:d1:e4:10:56:aa:b9:8f:c3:
         2b:df:d0:8e:70:c7:ff:8b:45:78:b2:03:b1:2c:45:ae:5d:b0:
         d2:ea:6c:4a:d3:7f:a3:1c:c2:ca:28:fd:e8:c4:29:94:f0:2b:
         e0:d5:45:50:b9:8c:a3:49:a3:2f:c1:fc:75:f6:ec:95:3f:b3:
         a4:7c:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:26 2024 by rpki-client on console-ams.rpki-client.org