Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1acc8926-09da-3feb-8663-0ef5cad8cb18.roa
File:                     1acc8926-09da-3feb-8663-0ef5cad8cb18.roa (raw, json)
Hash identifier:          IIYX2cPhfhF9oH7KFZnF8aJADRDSQIyJnWE/T/2yN+s=
Subject key identifier:   D4:2C:FD:7F:2E:D9:97:F5:32:49:0E:30:13:90:1A:F6:6F:02:C1:5D
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285847B101580455939BE8F88A5E00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1acc8926-09da-3feb-8663-0ef5cad8cb18.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     9009
IP address blocks:        198.145.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:58:04:55:93:9b:e8:f8:8a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=9da2b0d5-15f3-4169-8263-c6d69a073f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:89:cd:ac:6a:75:b8:24:2f:9d:58:5e:f5:
                    17:ea:52:57:21:85:c5:3f:d0:b3:3d:fe:ef:e1:82:
                    ae:14:c1:35:84:a7:63:e8:3c:f9:01:66:65:7b:c4:
                    35:7f:8a:9f:aa:0b:98:f6:93:ff:f8:a0:21:0b:69:
                    e0:1f:9c:f2:f5:a2:07:4a:61:7b:65:c1:16:03:5f:
                    3a:7d:b3:22:d4:c7:54:a9:d3:bd:3e:3a:6b:b7:d9:
                    70:2b:8c:9e:93:5d:05:c3:ed:c3:b4:90:c5:8f:e9:
                    f3:ed:bf:59:dc:bb:f5:7a:92:e3:6c:1d:4e:b7:33:
                    1f:82:26:02:98:f0:a0:f4:1c:78:70:8c:47:98:ff:
                    30:3e:7f:00:6f:f1:85:21:18:fe:2b:5d:08:05:71:
                    ef:93:f0:ab:06:d4:00:85:8e:3f:b7:5d:a7:57:2f:
                    46:25:6d:82:72:dc:20:a1:4b:e1:59:84:dc:21:6e:
                    fe:83:48:ed:8d:d8:fa:e9:45:13:1a:98:77:20:26:
                    f2:4a:41:a1:52:5d:87:ae:cf:df:44:bf:78:36:39:
                    b9:35:4a:25:ad:40:b6:91:60:96:64:4d:38:14:30:
                    b1:e4:84:fb:8d:22:80:35:f5:0d:6b:51:8c:cc:e1:
                    0e:9b:ef:6b:b1:30:18:52:cf:57:49:c2:77:9c:e1:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:FD:7F:2E:D9:97:F5:32:49:0E:30:13:90:1A:F6:6F:02:C1:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1acc8926-09da-3feb-8663-0ef5cad8cb18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:9a:5b:b9:2c:e5:20:38:b7:21:62:67:18:62:9c:11:c5:21:
         ed:8d:cb:29:02:db:0f:7b:2b:2e:d9:f0:4f:27:a0:49:e7:a1:
         18:13:0e:d3:a5:de:b4:91:f6:36:01:f5:6d:3e:88:80:1f:84:
         ab:c2:a4:54:d3:d4:be:a2:74:df:09:02:be:74:fe:49:5b:6c:
         00:00:10:67:ff:e3:14:b6:5d:dc:b6:b8:ff:03:ce:12:bc:ea:
         20:12:4f:c4:cb:4d:91:ef:c3:a5:ef:ee:b4:6c:d5:7f:e2:64:
         db:f0:36:85:eb:6a:64:b8:65:0b:05:31:78:4c:42:df:fa:e2:
         00:0e:8b:e3:cf:06:2c:2f:37:d7:73:fc:6c:65:67:7c:d5:05:
         6b:86:b0:ac:04:73:20:eb:03:39:ed:ea:51:a5:3e:b6:1e:03:
         f2:20:57:d4:a1:be:8d:cc:6f:18:ff:ca:14:95:18:87:d6:e5:
         d2:00:c7:3c:32:af:0b:0b:4a:a9:61:eb:51:0f:1e:93:12:73:
         e2:69:dc:31:cf:b8:f9:7c:16:5d:8e:30:d0:20:8c:e5:a4:2a:
         e2:62:0c:70:1b:59:d3:eb:a9:92:dd:97:2a:d8:79:6c:7f:b4:
         5b:81:5c:f1:b1:ac:64:35:05:20:a8:c9:fd:be:43:2c:ce:e9:
         f6:a2:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:35 2024 by rpki-client on console-fra.rpki-client.org