Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa
File:                     e408070a-3d28-36e7-95b9-81f2a086b77c.roa (raw, json)
Hash identifier:          W8sHZdY/WQ0bk9M1+z98dA4Q8+ecoKHdhT9H03bcGh8=
Subject key identifier:   56:79:22:7D:A4:59:F8:13:37:27:E0:71:A5:6F:E9:54:CB:7B:79:9B
Certificate issuer:       /CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
Certificate serial:       010D0C9F432858473D25E315B7F1CFBDCF5722C0
Authority key identifier: 74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     399248
IP address blocks:        198.207.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e3:15:b7:f1:cf:bd:cf:57:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=c9419889-bf4d-4cd8-a5f9-eb8932b5eeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:83:0b:51:0c:a2:85:a7:68:8c:57:22:c6:
                    5c:ea:9e:5c:70:01:3a:72:d6:68:e6:09:87:2d:7b:
                    62:57:d6:f5:76:57:8c:cc:ce:ba:7f:ec:93:08:df:
                    74:3b:de:a1:6e:c9:aa:68:8e:39:6d:8a:d0:7f:33:
                    9d:f6:09:35:27:cf:e3:06:cb:4d:11:48:c4:f9:10:
                    bd:7f:6e:ca:58:6d:43:fd:8f:7a:60:74:23:da:84:
                    06:b0:f1:31:f1:66:a2:17:94:58:c3:ab:1c:16:e0:
                    f4:c4:0b:31:2c:40:25:6f:e3:5b:55:b7:d2:63:61:
                    5a:2c:2e:02:b0:d6:7d:3a:3e:2f:4c:ea:fd:73:86:
                    0c:19:18:79:ac:82:56:c5:13:3a:b5:37:84:6c:dd:
                    d1:8f:d3:d0:24:40:88:4d:84:5e:e0:71:95:73:65:
                    c6:f0:8e:08:15:49:cd:d1:f5:0c:23:f7:82:ed:e9:
                    c9:e6:fe:35:ea:be:eb:47:8e:10:8b:0d:f1:e3:4d:
                    1c:2e:71:58:f6:6f:3b:f4:8f:15:53:ab:0e:45:fc:
                    cd:77:21:46:43:27:24:32:60:a9:3a:06:c7:fe:c1:
                    4a:6a:60:4e:ec:39:8f:f4:0e:c9:e7:0c:bc:d8:38:
                    69:bb:45:1e:7e:d7:4c:df:5b:f1:58:6f:e1:c0:cd:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:22:7D:A4:59:F8:13:37:27:E0:71:A5:6F:E9:54:CB:7B:79:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/e408070a-3d28-36e7-95b9-81f2a086b77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:48:58:03:61:92:16:13:a5:20:b5:8b:d8:2f:fa:03:59:b8:
         dd:f4:49:41:0f:1c:3c:0b:01:18:c1:0f:72:23:9e:5a:2a:0e:
         81:34:5c:41:6e:6b:b8:eb:ad:0d:fa:16:29:d1:28:bc:7f:3b:
         10:3a:16:fd:61:44:59:31:4f:06:c5:a3:d2:e0:1b:64:4e:c5:
         3c:76:7a:18:ff:40:1e:bd:f4:73:a4:c4:6c:ee:53:31:6e:61:
         34:0b:fb:d7:54:86:4a:eb:13:76:27:21:c5:48:71:14:6f:29:
         0c:2d:60:96:5f:cc:66:ed:5f:18:f1:ce:08:78:03:81:ce:8d:
         b4:1c:97:6e:22:8c:db:65:87:10:76:43:1c:f0:5f:3c:54:67:
         59:a1:cb:ec:ee:cc:d1:bd:ff:28:5e:d9:b8:fb:50:fd:41:b7:
         99:ce:e7:61:17:21:78:1e:b8:5a:c1:1b:8f:a6:dd:92:61:06:
         55:f3:73:b6:9d:3c:f0:97:87:99:0f:0d:7c:ef:ea:02:45:46:
         ba:26:38:d6:76:8c:76:d6:0d:ec:d3:34:0c:90:be:90:d6:71:
         73:53:a3:4d:78:b9:24:11:ea:1d:a2:72:65:f7:c5:da:7f:0a:
         05:20:eb:6e:27:f8:20:a4:6f:bd:6d:6e:0f:74:e5:95:3f:97:
         6e:d9:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:59 2024 by rpki-client on console-ams.rpki-client.org