Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa
File:                     7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa (raw, json)
Hash identifier:          nyVmH8eXePjHjLJv4MT9F3y10vPci9eQcnSlQpD4CTM=
Subject key identifier:   80:90:5A:2D:2E:3B:99:E6:81:81:19:4A:3B:B5:15:E7:00:61:F5:EA
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285844D17FC4C9A33E8B4FC85958C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa
Signing time:             Thu 08 Feb 2024 02:00:26 +0000
ROA not before:           Thu 08 Feb 2024 02:00:26 +0000
ROA not after:            Wed 08 May 2024 01:00:26 +0000
asID:                     1239
IP address blocks:        198.145.110.0/24 maxlen: 24
                          198.145.97.0/24 maxlen: 24
                          198.145.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:7f:c4:c9:a3:3e:8b:4f:c8:59:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb  8 02:00:26 2024 GMT
            Not After : May  8 01:00:26 2024 GMT
        Subject: CN=8aac0057-bde8-4435-96b1-f6f5fd740777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:89:63:0e:7a:3b:05:9c:bd:e9:fd:a8:a3:
                    f6:b5:fe:29:11:55:c5:a0:20:f4:f5:c5:77:cc:37:
                    e8:7a:4d:0c:ec:2b:f6:e5:1e:69:41:81:5f:90:65:
                    de:39:7d:29:ca:5e:fa:f2:46:86:57:4b:e0:ff:67:
                    0a:fc:8b:39:b1:70:d4:6e:1f:42:5a:cc:53:da:ea:
                    0c:2d:f7:0c:99:f5:72:bf:8f:32:4a:82:b6:02:9c:
                    02:3e:8d:a9:ac:f3:b2:00:67:52:2d:e0:ee:91:41:
                    20:e4:c7:77:a2:ce:4b:52:d9:bc:95:43:ac:9a:e8:
                    8e:17:8c:08:ee:f7:79:3b:56:3a:4b:23:93:52:fb:
                    49:12:31:c6:df:34:c0:59:86:93:c8:28:89:af:2b:
                    50:57:c3:74:70:f7:39:2c:73:ab:95:67:cc:7c:24:
                    82:13:d1:9d:54:13:e1:9b:21:2d:87:af:dd:fb:88:
                    31:9d:d8:75:95:76:c0:0e:dc:73:b5:66:f0:db:a9:
                    26:2a:b2:53:13:bc:58:9f:e9:5d:9a:85:e2:59:65:
                    2d:9b:fd:f3:b6:d8:62:01:19:15:e8:ad:f9:2a:df:
                    e5:86:8b:4f:1f:ef:e8:ac:91:27:7f:3d:45:16:d3:
                    e5:98:1c:ca:cf:36:5f:0a:23:1a:28:ea:9e:44:64:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:5A:2D:2E:3B:99:E6:81:81:19:4A:3B:B5:15:E7:00:61:F5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7bf35fb3-66f4-3aea-91b5-7a492ced52f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.97.0-198.145.99.255
                  198.145.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:dd:aa:72:42:cd:2f:d8:64:22:b5:2a:ed:6f:9a:62:a3:
         fc:34:e0:56:43:f1:d0:ef:30:34:d7:a9:92:a9:f2:d0:77:19:
         0a:09:18:48:7c:15:3d:98:27:96:e0:02:ab:c9:31:00:e1:1f:
         d0:c6:72:c7:f3:c2:da:12:70:b5:e7:10:ec:96:d7:ec:06:3b:
         06:18:28:31:e1:fe:75:87:70:f9:4d:b8:e6:d5:28:38:39:82:
         d0:00:78:5f:aa:f5:f0:59:b4:b8:93:b6:24:c7:c6:b1:a2:85:
         f5:11:7f:84:7b:00:b9:75:6b:8b:1e:04:61:50:8a:2a:71:14:
         53:7a:e0:50:94:8b:36:0a:f0:5c:59:b6:4e:00:88:11:43:94:
         0f:2b:5c:9b:58:88:61:fc:66:2e:84:ac:99:a9:e0:a6:24:ef:
         5a:2e:73:31:69:e8:60:46:65:4b:37:24:12:e0:77:98:21:18:
         af:b5:0d:9a:93:9f:79:67:8a:37:ad:50:84:ee:19:15:5d:36:
         94:ea:f0:cf:e1:64:04:be:07:6d:a1:32:33:65:08:53:e2:b9:
         b8:f3:60:7e:88:5a:4d:0b:86:77:a3:d1:20:a8:d0:9c:c0:d2:
         06:23:52:4f:45:42:13:ad:5e:1d:69:ff:d3:f8:f6:01:99:e7:
         52:5d:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 02:04:29 2024 by rpki-client on console-fra.rpki-client.org