Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa
File:                     df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa (raw, json)
Hash identifier:          f3dCl8VMa/7WUpPwOaBGnVFJyx1Rypw/kBdpBE8QeF0=
Subject key identifier:   A2:E1:76:EF:5F:17:B7:62:D8:39:A5:A0:E3:C1:6D:A5:F4:10:3E:A5
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285847B3CC107CA94A6FFFF9C39880
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     13213
IP address blocks:        198.145.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:10:7c:a9:4a:6f:ff:f9:c3:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=b76b758e-f93e-47d8-9ea6-38521d52823a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:e9:9a:76:fa:4d:da:75:64:3b:ad:32:44:
                    2e:31:1b:c6:12:43:61:7c:ff:f7:56:8c:12:8c:ba:
                    22:3f:68:83:5e:d7:14:6d:dc:66:e0:ad:47:8f:d8:
                    ae:f0:0c:68:40:c5:39:af:f2:6a:34:ad:fc:9e:b3:
                    3a:1e:1c:fb:f4:2c:b9:ac:ba:e8:d1:97:f1:9c:f4:
                    79:cd:90:1a:79:0c:2d:2f:17:ff:fb:f3:4f:30:b0:
                    9d:8a:5a:6f:3a:1b:01:0d:4a:a9:a1:95:77:f9:92:
                    33:00:04:db:76:5e:31:b4:bb:3e:34:53:84:bf:bc:
                    0b:0c:e0:06:05:a2:a6:a9:0c:2d:28:51:6f:bf:20:
                    9d:b5:6e:a9:94:61:57:8f:75:81:a9:f1:b5:a1:18:
                    82:cc:98:72:5a:19:12:40:51:54:09:ce:0a:82:a7:
                    9e:8f:42:59:8a:3a:97:56:05:63:ee:38:b5:dc:46:
                    2a:96:0e:a5:15:b2:af:a0:c0:3e:1a:77:d2:1c:79:
                    37:7e:72:d5:7a:60:b7:e9:44:53:8a:6f:4b:15:c4:
                    92:fa:4c:bb:d1:41:a0:2c:23:db:49:44:f1:f4:97:
                    03:5b:b8:9d:12:d1:73:5b:c6:70:1b:21:96:cd:8b:
                    1b:11:e2:39:4c:e2:de:19:a1:b6:85:99:e3:51:85:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E1:76:EF:5F:17:B7:62:D8:39:A5:A0:E3:C1:6D:A5:F4:10:3E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:ee:76:c5:f1:cd:58:de:9e:c5:c3:0b:17:17:4c:46:31:
         af:cd:f1:8b:61:25:4f:67:ba:81:f3:f5:9a:80:a8:a8:ab:96:
         0b:ba:bb:9e:92:d9:c4:37:2a:54:48:48:8a:0e:30:12:eb:82:
         9b:aa:9d:1e:8e:38:c4:ab:66:29:96:5a:a0:58:af:d6:1e:39:
         36:0d:41:1f:ca:35:47:8b:d9:f2:c6:c0:be:a2:24:7c:7e:8d:
         53:10:db:62:3d:bc:ef:03:4a:2e:d6:dd:4c:79:eb:de:06:a2:
         21:f6:1e:d4:3b:79:e6:ad:1e:f7:fa:58:1c:46:c7:d1:1e:11:
         28:1a:3e:1d:98:d6:06:1a:f5:42:b4:c4:b5:2b:49:fa:50:69:
         b4:14:2c:05:86:ec:38:b3:e2:bb:15:c3:7e:a4:f3:31:00:30:
         bd:37:6a:47:d8:16:1c:7a:8f:ff:c4:53:cf:3d:d2:76:9a:84:
         14:1e:3c:bd:ab:9c:9c:d2:5d:32:e5:b3:0f:e1:72:4e:ff:4c:
         27:db:ed:37:4b:ac:5f:6a:ce:e2:77:ec:b3:66:15:72:f7:27:
         74:10:55:37:5d:34:a1:e2:81:65:3a:45:63:4a:78:fa:52:ee:
         b8:65:75:35:36:9c:25:bf:4b:b4:b0:93:a4:0b:ec:ba:0a:a7:
         d6:5a:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:27 2024 by rpki-client on console-ams.rpki-client.org