Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4964d9f7-0834-33f1-917e-ba00e4a689d0.roa
File:                     4964d9f7-0834-33f1-917e-ba00e4a689d0.roa (raw, json)
Hash identifier:          /f9c9vc+nmTAwNUns717DXwCq8YFQin6iCdZuBHnZ5I=
Subject key identifier:   39:9D:22:C4:BA:92:25:5C:4B:18:FE:B8:99:66:AB:F4:6E:D8:C5:88
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584742BB3D4948D0CCCBDF170D00
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4964d9f7-0834-33f1-917e-ba00e4a689d0.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     36445
IP address blocks:        149.248.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:3d:49:48:d0:cc:cb:df:17:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=f200f51f-0292-4f31-b7a5-c63a35e23aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:a1:fd:f0:bf:07:e9:78:f3:2c:7c:0f:c5:
                    e6:bf:9e:ba:8f:2a:3b:ae:52:32:93:b1:6f:03:de:
                    d2:ee:4c:da:0f:6e:d6:20:41:f1:9d:ab:18:fb:f1:
                    95:ad:c6:33:ad:4b:32:b8:ed:ff:df:9c:02:f8:a1:
                    08:ca:ca:0d:c3:5e:b5:70:f5:da:fd:1e:e3:0c:13:
                    f9:8a:44:57:16:9b:69:a6:ca:57:97:2b:82:49:55:
                    a8:7e:44:b2:6e:42:70:20:dc:1c:e7:99:f6:a5:da:
                    d5:26:bf:8b:a3:54:31:48:78:ca:0a:ce:2d:e3:47:
                    e6:7c:02:12:fc:0b:d9:4d:56:6a:ac:84:b0:4e:04:
                    c8:2a:f0:6c:e9:f8:ab:52:c3:cd:af:2c:52:f2:40:
                    a1:c5:b8:4a:6f:93:33:0b:6f:49:4e:62:4a:83:10:
                    a3:5a:18:14:7f:2e:86:b4:0b:18:45:8a:42:28:a2:
                    a1:a7:a0:a2:37:dc:7a:9f:6e:df:d5:0b:62:e0:c8:
                    3b:0d:b5:79:51:a4:a5:35:a2:6f:3a:7e:7d:57:77:
                    ac:d2:85:46:b5:cc:11:38:85:4c:ab:4a:c7:6b:a1:
                    31:f5:50:b4:8e:cc:41:a2:a0:e3:ce:50:45:2d:e9:
                    55:15:f1:9c:90:fd:fc:14:6e:c6:42:e5:25:44:11:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9D:22:C4:BA:92:25:5C:4B:18:FE:B8:99:66:AB:F4:6E:D8:C5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4964d9f7-0834-33f1-917e-ba00e4a689d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:da:71:6f:c1:07:5d:2c:b8:5d:54:07:56:e7:1f:14:4e:
         21:d9:53:eb:92:0d:51:c6:7c:2d:87:28:89:7e:0d:32:26:75:
         b5:34:cc:dd:69:72:58:ae:6e:0e:e3:10:1d:4e:67:18:37:da:
         63:78:f0:24:dd:46:78:87:91:5e:eb:c3:d8:de:3a:db:5a:50:
         5d:7d:45:e9:9b:d4:3b:ba:d7:4b:1d:6d:c9:83:ba:a8:3a:d9:
         c7:e2:61:4e:38:9f:ba:1d:4d:eb:d7:2b:ce:62:9f:49:e0:98:
         dd:d7:98:31:47:cc:04:d6:9e:9d:8f:43:19:3e:aa:b7:da:90:
         fd:f7:50:25:68:ef:50:cd:91:21:74:b0:e7:29:3a:fc:58:9e:
         77:d3:f7:e5:9b:74:72:06:a9:25:3c:0d:f7:ee:cc:0b:b9:8d:
         7b:0e:16:d4:35:ae:78:c4:47:81:39:12:ff:12:7e:3e:24:c7:
         1a:be:05:46:cd:49:b7:77:ad:5e:e2:8b:b9:a8:63:dd:65:0d:
         7e:f1:0d:c1:bc:a3:4c:b9:b0:d5:ba:17:bb:3a:a2:a7:ee:d1:
         70:aa:77:19:35:02:0d:d5:d3:ef:c9:35:47:bb:a9:1e:72:ef:
         03:ab:20:57:cb:53:74:1f:eb:89:f1:6a:0a:78:0b:44:c8:80:
         f4:6d:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:28 2024 by rpki-client on console-ams.rpki-client.org