Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa
File:                     8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa (raw, json)
Hash identifier:          SIxTHRgmqWQ1UqoiTK5cefsq88AbQLweawWljE1FDBk=
Subject key identifier:   AC:A9:5C:91:36:A7:2C:47:3D:EE:00:D5:53:BA:F4:53:FF:7C:D6:96
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F432858474C80C5A6ACD1D7C9830E20C0
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     399646
IP address blocks:        149.112.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c5:a6:ac:d1:d7:c9:83:0e:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=73cdd338-0f91-422d-8b69-a6ffee47d45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:84:00:11:df:13:fd:01:37:60:db:8e:a1:
                    3f:0a:ca:e7:64:ab:bf:1a:20:c5:3e:e5:9d:b9:49:
                    2d:9c:3e:80:89:f0:60:27:00:99:e3:ce:4f:f2:1e:
                    b4:41:30:a9:59:2d:e6:b7:4f:5b:52:8a:fb:f9:39:
                    e3:d8:22:23:fc:03:0b:8b:2b:75:66:64:c5:7b:9f:
                    bd:c4:b6:00:91:d9:70:69:0b:f1:74:88:24:1d:78:
                    b7:58:2a:f1:85:7d:9b:fa:02:1b:31:30:b0:ea:86:
                    e0:96:ee:c3:00:44:30:fd:47:13:73:ec:36:0e:9c:
                    76:8b:3d:14:65:7d:8d:08:21:18:8d:71:91:7b:ec:
                    10:92:39:cd:28:5d:0f:d3:e5:cb:4d:56:cb:95:f6:
                    1b:76:90:3c:84:f9:6b:73:a6:f0:36:f7:f3:3f:c2:
                    ef:0d:f4:a7:15:35:9b:66:a1:86:77:8c:05:57:e1:
                    23:4d:f7:c8:a3:e1:1b:b4:51:39:95:d3:0d:7b:0b:
                    61:4d:40:b3:af:9e:b4:2f:ed:95:4f:8e:56:8f:5a:
                    7f:db:6a:35:c9:87:7a:04:01:d8:ed:63:4f:c4:2b:
                    b0:98:54:a4:e9:98:91:8f:72:b0:5d:08:c9:7b:bb:
                    1a:e9:27:df:e5:8c:72:4f:20:7c:49:89:52:ca:53:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:5C:91:36:A7:2C:47:3D:EE:00:D5:53:BA:F4:53:FF:7C:D6:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:31:8a:ce:54:64:d4:5e:3b:19:6e:ab:9d:de:ee:ee:77:34:
         94:ca:4b:df:c0:52:23:57:ed:22:76:d5:83:1f:4a:07:bc:67:
         8a:97:8d:c3:09:31:cd:91:2d:70:d1:ec:16:17:44:e7:b8:0a:
         f3:e2:e1:24:0a:18:92:8f:78:f6:32:29:69:73:cc:6e:3c:b2:
         e5:43:20:12:87:27:f2:5e:e7:e2:a9:53:6d:55:9d:b5:35:fa:
         c4:ba:6e:31:f0:b9:dc:42:7f:3c:c7:98:ae:08:5d:34:b5:11:
         d3:2a:a8:0c:2f:f8:91:eb:24:87:6b:39:6e:28:2a:e8:a6:e4:
         15:c5:dc:d8:3f:28:62:95:c6:f4:a2:7e:6d:4f:36:a8:9b:20:
         3b:7d:60:6c:b2:bc:92:84:8a:d9:8d:fb:18:0f:ed:f6:42:56:
         e1:b6:3e:38:3a:8e:f0:a9:ed:45:52:0a:fc:21:15:2f:ff:c5:
         91:cb:d6:75:cf:d9:70:74:0c:66:0a:e6:44:cf:d5:a4:e6:ef:
         6b:13:b8:62:e9:7e:5f:ce:37:c0:21:58:39:b8:fe:80:ce:d0:
         1b:26:08:70:77:3f:02:49:06:17:e7:42:67:bb:32:8d:da:71:
         2b:38:1f:cf:5c:a0:93:63:4e:e5:7f:d6:8e:e2:b7:ed:be:0b:
         b4:a1:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:17 2024 by rpki-client on console-ams.rpki-client.org