Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
File:                     e6160c10-b008-3fd8-8017-49e70935a60f.roa (raw, json)
Hash identifier:          0DIAluj9Ct/Mvt5aHB/qV/bpn2ODRy1l0okrJDufMOc=
Subject key identifier:   0F:0C:D5:30:E5:41:20:91:55:DB:4E:7E:E3:A6:65:32:96:43:92:93
Certificate issuer:       /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
Certificate serial:       010D0C9F43285847362B485EF5DDAD6D5E07F480
Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        198.99.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:48:5e:f5:dd:ad:6d:5e:07:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=20f7b4a3-ba6f-461d-b4ec-c9a97b0a0699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:84:58:06:d2:d2:75:26:0d:49:66:b5:f1:
                    e5:e6:c2:48:94:d8:f8:15:ec:30:2d:41:55:b4:54:
                    54:b4:0f:7e:f2:57:e6:ea:00:7d:4c:8e:97:d7:73:
                    b3:9f:cf:e0:f0:c6:f3:5e:bf:ca:5a:e9:1c:b4:01:
                    c7:f6:c8:86:d0:a4:a7:74:89:11:26:ff:f5:9b:b2:
                    cc:ce:6a:38:cb:f3:6f:f2:e0:f1:0e:8a:ef:92:06:
                    bf:77:50:5c:cf:aa:82:f4:f0:4c:0e:2d:8d:ed:8d:
                    72:ec:29:d9:c2:d7:70:bb:2e:e4:65:47:58:10:c6:
                    b1:27:19:58:9f:b8:b1:c1:a3:f8:8c:4c:89:e9:47:
                    c7:08:c1:87:c9:5e:71:d5:3a:25:5a:aa:41:ba:7c:
                    da:0a:6a:d9:74:c3:76:91:91:24:e2:1e:12:7f:00:
                    91:58:47:55:e7:a8:7a:83:ec:22:1f:47:7e:94:60:
                    36:83:4d:af:57:bf:ce:c7:a0:26:64:bf:67:a1:df:
                    f8:90:00:4f:1d:54:e0:a1:7e:3e:e6:21:cf:be:e8:
                    78:4f:c5:e4:bd:0e:d9:12:36:ed:68:7a:46:52:de:
                    2c:15:79:e2:85:30:3b:7a:86:b6:58:a4:d1:59:fa:
                    e6:98:79:87:4b:c3:77:32:a9:1c:c7:51:c6:4a:34:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0C:D5:30:E5:41:20:91:55:DB:4E:7E:E3:A6:65:32:96:43:92:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl

            X509v3 Authority Key Identifier:
                keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:75:83:92:40:c3:fa:89:63:bc:23:aa:fa:e7:e7:88:af:b8:
         1f:41:2f:be:ce:6b:43:2a:24:45:d5:44:df:0e:09:f5:d7:fb:
         f6:42:00:e1:63:d1:72:4e:8d:a1:bd:41:6e:01:ed:51:71:dc:
         2b:55:a5:cf:de:98:8b:91:2d:89:ae:ff:81:aa:1a:c6:10:bd:
         6a:fa:a3:3c:05:e3:a2:a4:28:1b:6c:1d:00:0f:97:83:5f:8c:
         72:77:8e:93:bd:08:5a:59:e3:d4:ad:d8:57:d5:f5:94:9a:37:
         b6:d7:0c:61:d7:28:b7:e6:f0:84:ef:6e:92:0e:4a:0d:f8:31:
         33:ac:1c:24:1c:21:0a:a1:9c:f0:04:53:09:9a:c8:77:e5:04:
         bf:be:e1:a1:4d:95:3f:1f:e6:0e:90:ee:75:3f:64:6e:17:3c:
         3a:58:1a:9a:fc:82:ab:50:fa:42:ca:56:0b:06:cb:4d:73:d2:
         27:81:83:fe:d9:e8:94:d6:da:20:f0:3c:95:8e:71:d8:00:aa:
         bf:52:96:f4:9f:a0:7d:84:a3:36:53:90:7b:8d:12:70:50:6b:
         e2:08:13:97:8f:bb:05:45:b5:8c:2d:16:58:99:38:2a:fc:63:
         2c:ca:65:b7:d6:3b:58:3d:27:64:3f:b2:3f:aa:87:c3:ac:69:
         9b:f8:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:43 2024 by rpki-client on console-fra.rpki-client.org