Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
File:                     e6160c10-b008-3fd8-8017-49e70935a60f.roa (raw, json)
Hash identifier:          +s1NYC8ZuQgV3a63B6uf2V8GDi4co3qUI/Ip6c/yJdk=
Subject key identifier:   75:8B:42:4F:B5:B4:D7:28:F0:D8:39:84:FA:96:57:BB:0B:57:BF:B8
Certificate issuer:       /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
Certificate serial:       010D0C9F43285845777DBDEDD2CE7356F80F69C0
Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        198.99.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bd:ed:d2:ce:73:56:f8:0f:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=39f9dbdf-f2be-4e7d-97e1-fff4a4930f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:c6:c4:50:94:c0:5b:1f:c3:be:3d:7a:90:
                    24:66:80:f0:2a:bb:0d:ac:b2:7b:c0:ea:d5:c0:0a:
                    f5:d0:5f:8b:ee:40:78:32:57:f7:75:71:ca:f6:3a:
                    0b:ca:10:a5:4a:ca:1c:f5:0f:d8:9f:97:3e:a7:86:
                    d2:a5:c9:12:a5:1d:4b:1a:64:09:eb:8b:00:7c:e9:
                    d2:3f:40:a0:b3:e4:c6:35:06:13:79:da:82:16:9c:
                    4d:7f:67:04:a0:66:8e:af:75:9e:ee:61:ec:02:8c:
                    c7:d0:a4:4d:fd:19:de:1e:83:10:89:f0:5d:b3:29:
                    a2:87:12:0c:62:3e:66:59:5c:d7:a2:3a:b0:19:b2:
                    38:dc:ea:ea:c9:0f:59:7e:40:bc:a2:87:09:04:af:
                    1f:b9:e5:6a:02:07:2c:5e:67:12:19:af:55:79:b4:
                    cd:80:bd:05:c1:ce:ab:13:86:cc:5b:d2:e5:ad:52:
                    b0:c5:f1:d0:b2:6e:61:42:1a:af:16:08:c7:4c:47:
                    cc:aa:21:aa:f6:40:c8:5d:4f:bf:42:93:e0:d4:17:
                    40:03:29:4c:8f:67:55:d5:82:de:89:a8:51:f5:07:
                    c4:40:52:8f:a9:44:e1:91:61:82:e4:0b:34:93:f3:
                    18:a2:e7:91:2c:5a:b7:8a:89:ea:ca:ee:dc:cc:ad:
                    21:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:42:4F:B5:B4:D7:28:F0:D8:39:84:FA:96:57:BB:0B:57:BF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl

            X509v3 Authority Key Identifier:
                keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:40:ee:81:b5:be:d3:3b:aa:02:54:9d:48:87:b8:42:1a:d9:
         61:9e:c6:2b:b3:10:22:3a:72:31:9d:3f:86:66:b0:ae:62:0b:
         89:7a:5f:e7:be:4a:22:94:0d:98:94:4a:ff:6b:ad:a2:3b:e8:
         44:88:03:09:00:2e:8a:e5:56:53:48:dc:ac:c2:79:ca:99:64:
         6f:5a:87:b0:c9:f4:51:ce:e7:07:8a:40:6c:30:f1:f9:f9:b4:
         fa:c9:02:5f:b0:bc:11:bb:74:fd:1b:e2:b1:7e:70:e6:b1:90:
         6a:d0:22:8e:03:f1:c3:ec:8d:d7:76:03:8c:aa:2b:23:19:51:
         58:d3:2e:a5:3a:fd:eb:17:7d:53:9c:cb:f0:f1:29:59:c3:8d:
         d5:80:f4:0d:26:e8:42:7d:4e:50:df:8c:a4:66:a8:eb:c7:cb:
         24:9e:9f:7f:3a:4f:bf:ca:27:d7:48:5b:05:2f:45:d1:81:34:
         26:3a:b0:60:2c:3e:82:56:b7:2d:31:2a:be:b9:a2:b0:6a:06:
         d4:b3:a3:02:5e:02:27:0f:ee:f7:4a:97:4e:1f:aa:76:c3:c1:
         f7:48:e0:24:c2:24:2c:29:94:fa:ad:f0:47:79:85:45:b9:30:
         2b:a7:4e:11:42:d2:2f:e9:da:62:98:81:03:94:54:b9:84:ca:
         ff:4b:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:39 2024 by rpki-client on console-ams.rpki-client.org