Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
File:                     61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa (raw, json)
Hash identifier:          qmdixQ0gmPOWeDLYQOoG0iDMYDwfo/kIAET0Bt+P74E=
Subject key identifier:   0C:F7:B3:F8:CA:72:B4:3D:A0:3E:10:5D:8A:8C:43:FA:CD:A5:2C:42
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285847924BDA2BAC3A2480B5941CB0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     13347
IP address blocks:        198.145.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:da:2b:ac:3a:24:80:b5:94:1c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=035d8c02-e253-49c8-b284-19aaecdc385c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e8:48:52:ee:e2:94:74:21:f8:9f:ee:dd:6e:
                    a0:22:22:5a:04:83:9c:e1:85:bb:52:6c:26:33:6e:
                    a3:e1:47:01:c5:01:b1:a4:a2:4c:d1:df:5b:a6:ec:
                    fd:b6:47:65:58:87:3f:aa:70:9c:3f:1c:7c:10:89:
                    c1:f1:47:92:17:95:45:8e:56:58:a7:ac:89:60:c0:
                    b2:ff:13:04:cd:49:d7:34:39:cf:ff:ca:04:05:9d:
                    a6:68:1b:11:1d:df:eb:fc:a6:3d:03:9a:cf:f7:ce:
                    5b:00:87:23:eb:ff:0f:dc:55:7d:5c:d0:f0:75:10:
                    27:9c:ef:be:4b:e9:f7:0c:43:41:7f:c3:05:57:94:
                    f0:08:8a:e4:61:31:9d:4e:1e:7f:f8:42:5b:76:06:
                    bb:b2:35:d7:33:f1:3f:a8:bd:7a:d9:4a:de:e8:d4:
                    0b:f4:a0:4d:bd:dc:72:ca:db:b6:c1:f3:ab:b9:2e:
                    35:d3:b2:1e:8e:4b:85:80:12:69:a6:8b:2c:1d:ce:
                    a0:6b:98:67:f7:69:21:05:0c:00:4d:88:60:b8:72:
                    7f:d9:98:80:5d:09:73:95:b2:72:8e:f4:ca:5a:00:
                    06:24:90:3d:f7:cc:96:6c:1e:1d:97:c6:3b:91:d7:
                    58:b3:4b:2d:f2:a6:26:c1:cf:43:cf:23:24:4f:20:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:B3:F8:CA:72:B4:3D:A0:3E:10:5D:8A:8C:43:FA:CD:A5:2C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3e:29:b5:cd:3a:84:af:a7:14:b9:6f:1e:e7:8a:35:14:a2:
         ce:92:d0:5a:c2:19:0c:29:3b:bd:82:f8:38:ea:6f:f6:00:6b:
         22:68:fe:51:8a:73:a0:fa:14:02:79:24:5f:fd:8e:85:24:f9:
         c8:0e:11:10:de:db:3c:7d:12:ae:19:0d:46:70:5c:41:a2:48:
         1d:03:f3:c8:1f:6b:29:e8:40:fe:e3:58:43:30:41:6c:76:54:
         01:39:dc:2e:b4:17:d8:b7:55:61:a5:f3:93:2e:a1:03:2c:1c:
         ea:7e:31:c8:b0:37:b9:7b:3b:88:65:03:6c:ce:18:4b:a1:15:
         e2:5a:c8:03:91:20:dd:c4:5c:30:b3:51:66:ec:4f:1c:7a:d1:
         07:0b:49:33:dd:79:f2:37:ea:d9:ad:96:01:b0:e4:00:61:3a:
         66:0c:e3:6c:72:5e:31:53:37:0b:42:eb:d4:90:22:cb:5c:2b:
         21:20:0d:30:6d:bb:53:5b:45:da:93:75:94:32:fa:cf:07:58:
         65:07:fa:37:5e:ff:b5:bb:fe:3d:4d:a6:9a:fe:3a:00:8c:3b:
         b0:e0:68:71:72:e9:f4:c2:14:69:9e:53:80:5a:15:c6:5b:c3:
         2f:e8:39:44:c9:80:d0:86:fd:df:9f:21:0e:24:72:96:82:4d:
         26:bb:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org