Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5ee02f25-812a-307e-80fe-b0d6b0c824a4.roa
File:                     5ee02f25-812a-307e-80fe-b0d6b0c824a4.roa (raw, json)
Hash identifier:          YDtosAmacqk7y1aC3AejHnYEezv7hVKTEyWmkuSzJBQ=
Subject key identifier:   E6:BC:8B:19:9D:11:C5:1A:78:D8:6D:45:68:8C:CC:B1:9C:A0:59:F7
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858477230E5E33808B48B65EAA8C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5ee02f25-812a-307e-80fe-b0d6b0c824a4.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     1239
IP address blocks:        198.145.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e5:e3:38:08:b4:8b:65:ea:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=5df977b6-18d8-450d-863a-b196dfe5ed32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:81:7b:ce:72:63:39:db:4b:d1:ad:9b:d0:
                    ff:7d:0b:4a:68:1f:4b:fe:3a:95:3c:e4:b8:c4:85:
                    f7:fe:6d:34:d6:f6:d2:6f:fa:1e:57:17:75:cd:35:
                    48:c2:ed:26:1e:c4:4a:94:9d:39:56:2b:82:2b:cc:
                    67:b8:82:af:6b:95:e3:21:a5:3a:a8:14:f8:89:13:
                    0c:9b:ee:02:cd:63:72:2f:26:eb:50:d7:50:5b:51:
                    e6:d1:68:99:43:1c:f8:4d:d3:f4:05:c6:7c:84:d8:
                    ad:4c:2a:b1:2e:3f:79:8a:f5:6b:b6:50:0a:a3:93:
                    9b:b2:38:2a:f0:b3:df:f2:42:b5:99:ad:70:b8:e4:
                    6f:bf:b4:49:5b:94:b4:fb:35:d2:1a:b1:ad:c2:1e:
                    8e:bc:23:58:03:ee:6a:94:10:08:bc:c4:b5:c3:4c:
                    bd:c8:66:7f:c3:4e:e2:c4:13:ff:58:d8:a9:f0:d6:
                    7a:e7:a7:d6:3d:96:19:82:b2:d0:9b:90:ec:37:98:
                    32:2c:29:01:88:15:75:8f:fe:b9:a0:b9:e7:31:88:
                    34:a5:f7:d6:25:c1:b4:00:e3:7d:b1:75:ed:0f:ba:
                    64:33:ef:d2:b8:eb:02:b3:a5:06:04:bc:c6:68:67:
                    63:a8:a7:f3:43:13:9a:c1:4a:29:b1:1a:f9:26:eb:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BC:8B:19:9D:11:C5:1A:78:D8:6D:45:68:8C:CC:B1:9C:A0:59:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5ee02f25-812a-307e-80fe-b0d6b0c824a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:85:32:ae:75:f3:58:00:4d:aa:96:b7:b4:56:d1:45:f0:5e:
         96:2b:db:07:bc:34:5d:d5:78:d1:d9:e1:ca:cb:47:c4:07:49:
         88:d9:de:fd:ce:b2:a2:75:d3:38:05:cf:7c:f8:15:49:da:ab:
         4f:df:f6:81:08:d9:3a:88:df:f6:d8:fa:37:48:29:db:1e:e8:
         4a:43:e9:10:89:a3:2a:b5:da:22:17:75:d5:71:48:3c:cd:40:
         fd:1c:ee:7d:23:a7:54:e3:62:8d:35:22:2b:e2:71:10:c6:ea:
         60:29:4c:dd:02:6e:2e:cc:a5:e6:13:64:c7:de:61:7f:d9:dc:
         64:01:6d:a7:06:86:c6:bf:89:26:ff:d1:fb:c0:28:ea:a7:30:
         fc:4a:ed:26:f1:b8:32:57:1d:f2:11:67:7d:8b:ac:7a:bb:07:
         8e:a9:00:c6:7e:f1:bc:f2:d3:e0:ca:cb:48:b7:d1:9f:c4:d5:
         a2:7b:0c:8e:aa:0f:b1:e6:b3:6c:b5:e9:79:73:64:ef:aa:05:
         ba:ed:d1:6a:48:79:d1:ed:cb:21:b5:79:24:69:a8:f0:e8:c2:
         60:50:82:3f:6f:80:72:27:0d:3a:fd:7d:2a:b8:54:eb:64:17:
         af:72:5e:3b:2f:ec:38:5e:73:47:81:09:cc:e2:d6:12:00:57:
         66:86:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org