Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e9d917f2-b8b7-394c-a19d-c732e93a0605.roa
File:                     e9d917f2-b8b7-394c-a19d-c732e93a0605.roa (raw, json)
Hash identifier:          nDRRnp8cJroFO17GKQM3rX0bmjccTJ5pvAvOFVQNfK8=
Subject key identifier:   E2:FE:DC:0C:4C:30:77:8B:2E:70:84:1D:0F:C0:11:8D:44:77:3E:E7
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858478E1BC66831DDAE52901BB900
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e9d917f2-b8b7-394c-a19d-c732e93a0605.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     20016
IP address blocks:        198.145.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c6:68:31:dd:ae:52:90:1b:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=c11473c7-133a-45a6-95ed-75f76682e21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:f7:ce:a4:6a:4b:98:cc:e1:49:5c:75:44:
                    fe:47:b4:f2:05:7a:73:14:c1:ef:c3:ce:42:a9:a0:
                    b4:32:0f:03:72:fb:26:43:46:01:bd:fe:82:3d:5d:
                    0e:03:a6:69:66:69:e2:a9:67:05:56:ea:af:a0:1a:
                    76:fd:41:b8:f9:fd:2b:a2:e5:5b:44:41:5c:d4:04:
                    36:e1:0e:1e:83:17:b8:70:c6:ca:e0:db:81:60:80:
                    13:77:5f:7a:43:51:62:8a:11:f7:52:26:6b:67:05:
                    ec:44:c0:3f:fa:b0:cd:60:40:36:82:5a:ce:da:90:
                    92:d1:fe:63:06:07:2a:73:bb:ab:4c:2e:33:8a:80:
                    a3:e8:86:ac:40:1b:6e:b4:1c:f8:ec:e8:48:88:ae:
                    ab:e4:02:2e:1b:50:12:b8:e3:4e:85:4d:9b:00:2b:
                    ea:bd:bc:1a:33:f1:b4:bd:fe:48:c9:78:68:a6:e9:
                    f3:6e:df:cc:ab:39:89:15:e3:ca:8e:2d:cb:ca:70:
                    9f:e6:8c:88:b5:84:33:17:a4:fe:2d:e0:5e:c8:3f:
                    cb:5c:a3:a0:08:cc:44:d0:9e:e0:c3:67:6c:2b:96:
                    fb:bc:b0:29:63:56:e0:1a:c8:2d:d4:6f:7a:4c:da:
                    33:b9:f1:ac:44:41:ca:ca:19:b7:90:8a:67:7a:ed:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:DC:0C:4C:30:77:8B:2E:70:84:1D:0F:C0:11:8D:44:77:3E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e9d917f2-b8b7-394c-a19d-c732e93a0605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:a5:e7:99:14:45:19:8f:5e:6a:a8:2f:e6:15:97:92:df:
         78:74:c4:e3:3b:df:ff:6a:06:a4:0e:30:5d:ec:07:b3:59:4a:
         46:ca:75:06:f7:1d:e6:a9:3f:6f:1c:af:a0:22:4e:39:9d:45:
         3f:3e:44:69:76:55:fa:d8:1d:3b:db:f1:9c:e8:7d:a1:8d:3b:
         cb:6e:3c:3b:1a:39:9c:3b:dd:1a:40:f3:9f:e1:c9:4a:88:cb:
         54:1a:ff:0f:9e:08:8d:e4:b2:19:aa:fc:94:0b:30:b7:db:48:
         2b:9f:16:19:87:91:8b:67:6e:1b:ef:8e:85:93:f9:80:ec:3a:
         25:78:56:7d:bd:96:4d:17:0c:a8:01:6a:33:05:50:6e:cb:ae:
         f3:0b:49:f4:ba:22:bb:0e:fa:0e:72:b7:20:a1:f6:f7:b1:b9:
         7c:14:97:ee:bc:38:b9:3e:bd:a2:e0:4e:ef:49:ca:66:98:74:
         a7:34:95:35:06:cf:fb:46:c2:5f:93:fd:1e:f2:c7:7b:47:7d:
         92:a2:80:f0:ea:be:45:1b:66:6f:b2:52:19:c1:1b:c7:7c:6c:
         2d:1d:bd:50:4e:80:6a:2d:a4:35:cf:89:8a:78:f7:56:c4:7e:
         ae:08:02:8f:04:21:97:b5:29:56:a0:a0:cb:d3:79:8c:26:3a:
         84:62:c3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:40 2024 by rpki-client on console-ams.rpki-client.org