Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
File:                     5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa (raw, json)
Hash identifier:          33qTVckNnPsBU3zpA9AnOP10nUKS4rmyLdHauQe9Bg8=
Subject key identifier:   8F:13:E5:3C:05:A3:07:FE:8C:C8:F5:EB:32:7A:72:E8:63:BD:2C:FF
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285847A04140A81703F18AA856A69E
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     262287
IP address blocks:        198.145.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:40:a8:17:03:f1:8a:a8:56:a6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=2d1debf7-876c-4b4a-8845-1979469961d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6e:70:ae:02:a5:cf:04:14:0c:bf:06:b4:9b:
                    a9:e9:4e:6b:34:8f:11:dd:00:c8:22:46:97:bc:8a:
                    90:b7:ec:6f:06:03:23:a3:e9:91:94:ed:98:8a:47:
                    6b:77:0d:6a:0c:14:3a:1c:72:71:8b:3f:15:b2:f1:
                    44:b9:11:cd:6c:22:81:c4:90:f6:44:99:a5:54:2a:
                    e7:c4:72:b2:be:a7:eb:86:a5:8c:73:04:95:6b:6b:
                    8e:66:ce:57:21:eb:5b:51:48:9d:f0:bb:95:a0:87:
                    2e:47:e6:64:d6:e1:99:20:64:70:b3:9b:43:0b:2b:
                    50:61:c1:0d:66:f1:03:60:38:8e:a8:4e:25:9d:76:
                    46:7b:4e:52:60:e9:1d:81:1e:36:f4:85:97:c5:42:
                    3f:3a:ef:32:2e:f1:52:a4:58:44:26:c0:b0:76:95:
                    6a:3e:14:c0:2e:d3:6b:e8:69:25:c4:9f:a5:e6:03:
                    1f:0e:db:c9:00:38:90:4e:a4:de:4c:3d:77:e9:dc:
                    0a:ae:21:ae:8b:88:02:11:58:72:df:0f:b3:c8:b5:
                    46:38:b9:92:5c:40:b6:e6:a7:9d:eb:2b:7b:fe:a2:
                    3a:db:23:41:2a:ce:a6:39:90:fe:c0:66:15:73:bd:
                    90:c5:85:ad:fa:05:13:16:dd:02:62:ce:72:58:af:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:E5:3C:05:A3:07:FE:8C:C8:F5:EB:32:7A:72:E8:63:BD:2C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:d2:f7:7f:22:fc:40:37:01:d8:2a:db:e2:c1:4e:c6:63:44:
         0c:52:7f:b2:e9:7f:66:0e:9b:e8:c0:e1:4a:ea:1e:b1:79:22:
         ab:87:35:17:58:25:6d:62:44:87:9a:29:47:21:49:0c:62:df:
         8f:51:df:62:b0:2b:d4:85:b0:b4:aa:99:a9:dc:f8:6f:51:9f:
         96:e6:04:12:7d:5e:2f:6c:4d:84:ab:96:eb:6b:73:c4:7a:02:
         5c:0a:3a:1a:11:66:a5:ce:ac:7a:12:c5:fb:59:be:98:ab:fd:
         34:c7:81:dc:a7:9e:5a:c0:fa:49:b7:25:84:62:28:56:94:f3:
         f3:58:b6:5a:d9:cb:c3:8b:d4:50:11:67:48:26:d0:9b:28:7e:
         bf:d0:7e:be:ba:4e:c0:69:56:bf:6d:b3:21:15:bf:6a:78:e9:
         7a:00:ba:38:a2:98:e7:b7:8c:19:87:d9:48:6b:71:6c:b5:00:
         e1:57:ec:b5:05:26:c3:be:8d:cb:c1:96:83:10:9a:be:eb:f8:
         31:71:a5:aa:09:7d:8e:ea:79:90:7e:5d:8e:07:d3:91:68:e2:
         38:fd:c2:20:77:e6:dd:72:c6:08:ec:4a:e8:8d:67:a5:57:5c:
         f7:23:1a:b1:fc:3d:d4:dd:70:0f:b7:73:3d:c3:7c:09:b8:9a:
         4d:77:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org