Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4630b1f2-4078-3ac1-be85-53895d1a5cf3.roa
File:                     4630b1f2-4078-3ac1-be85-53895d1a5cf3.roa (raw, json)
Hash identifier:          fapn2WJpIBep73KVoZkvn1gouesww0MycN8OrYnyxqk=
Subject key identifier:   D5:E1:1F:0D:D8:8C:AB:CD:30:C5:DF:47:76:F9:4C:D5:EB:B0:E5:C4
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB6A7A8BC00810A523691A0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4630b1f2-4078-3ac1-be85-53895d1a5cf3.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     11404
IP address blocks:        198.244.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:a7:a8:bc:00:81:0a:52:36:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=872424ab-2639-4e13-b7d0-f74b1a4cf096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:21:f8:df:81:ce:46:af:7b:3a:f3:6b:3c:
                    13:b2:85:39:47:bd:44:33:27:34:36:5b:fe:d5:fd:
                    6a:a6:70:8c:c2:70:aa:de:97:e4:c6:cd:65:13:04:
                    d3:0b:06:36:f1:e1:e8:4b:82:b5:ea:6e:0d:77:b7:
                    c7:dc:0d:1b:3c:50:41:e3:d9:5e:5c:f8:ff:c4:26:
                    6d:43:3d:fe:6e:3e:79:ab:cd:2e:e6:20:93:a8:2b:
                    d0:c6:28:2a:72:51:4c:c8:72:4c:ac:b7:a7:2c:3c:
                    90:37:01:2b:ee:42:dd:f6:6b:fa:e1:21:f9:ce:48:
                    2e:f3:dd:45:62:a6:75:53:93:06:ff:ac:39:fa:cb:
                    12:b2:21:51:97:1a:6f:88:42:20:40:44:54:12:13:
                    ed:76:b7:c3:85:f3:7b:d1:06:aa:25:18:b0:b6:68:
                    25:45:8b:1e:2c:47:b2:08:06:fd:99:ee:57:c1:d4:
                    64:75:95:0c:5a:59:0c:bd:7b:30:7e:ae:0b:3b:34:
                    23:bd:9a:43:81:23:f1:bc:6a:9e:26:56:5e:c5:a6:
                    8d:9b:4c:93:67:cb:b2:0c:01:b8:a9:11:7c:43:77:
                    e0:1b:00:42:44:62:11:02:0a:96:3d:c2:ef:36:e8:
                    60:1b:10:d8:b0:91:bd:f2:8d:17:bc:c8:8c:88:0d:
                    63:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E1:1F:0D:D8:8C:AB:CD:30:C5:DF:47:76:F9:4C:D5:EB:B0:E5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4630b1f2-4078-3ac1-be85-53895d1a5cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2f:ba:26:67:45:4c:63:4c:13:b6:28:43:47:d3:02:76:f0:
         fa:e7:e7:75:3d:a0:95:31:27:79:46:6e:e1:4b:e0:bf:0f:e0:
         fb:f3:f3:e1:80:5a:a3:6d:f4:60:b3:07:c2:ba:ff:ae:7e:08:
         1b:17:cb:7e:a3:70:1a:c7:63:9b:fe:59:52:99:90:8b:b8:cd:
         22:35:b1:4f:a6:55:85:07:1a:98:e4:30:85:ba:ed:30:0a:09:
         2a:58:d5:ce:db:e3:a9:09:c0:cd:89:be:fb:81:a8:b9:2c:66:
         0e:4e:37:bc:9e:70:b1:ab:d0:d1:d0:08:58:e7:07:d7:57:d0:
         19:1f:cf:87:2e:05:fe:b0:0d:fc:44:91:4f:fe:b0:ea:43:16:
         48:62:a0:35:72:65:af:98:db:91:e5:0a:7c:55:36:1b:86:c4:
         a4:bc:65:6f:66:49:d7:f9:3e:88:85:5a:f5:cf:60:d5:2e:dd:
         83:9b:a6:76:32:88:a3:b9:bd:a3:d7:19:00:ef:c2:9b:18:24:
         d0:f6:a2:5e:07:75:d6:50:96:53:1b:a9:c6:86:87:37:b5:92:
         21:8e:60:a5:f6:c7:c4:ad:cc:44:87:fc:b2:85:f8:d2:1c:dc:
         35:b2:59:f5:be:d1:57:c9:3a:14:3c:62:2d:93:43:3e:f9:9f:
         14:47:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org