Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa
File:                     2dcaddd7-5406-3583-af09-5bb2496ce200.roa (raw, json)
Hash identifier:          IOBra0sRulP3qdFb7Gx0HDbkm3CC0M7tlY5SelS/rF0=
Subject key identifier:   EC:CE:05:B9:4C:C0:E4:F4:C6:A6:70:FC:C6:EE:63:D3:72:64:30:FA
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858471345A2386F641975BD0C7700
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa
Signing time:             Mon 02 Sep 2024 01:00:31 +0000
ROA not before:           Mon 02 Sep 2024 01:00:31 +0000
ROA not after:            Sun 01 Dec 2024 02:00:31 +0000
asID:                     2559
IP address blocks:        198.241.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:13:45:a2:38:6f:64:19:75:bd:0c:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep  2 01:00:31 2024 GMT
            Not After : Dec  1 02:00:31 2024 GMT
        Subject: CN=9fe84397-d729-444b-b19c-d39e7981971b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:36:39:95:4c:8e:76:3c:4a:8b:16:64:0d:
                    85:3f:60:c4:51:bc:b7:cd:9b:c7:38:a3:86:77:f8:
                    22:30:0f:7f:9a:71:7f:75:4e:b4:db:c1:f3:3e:9e:
                    86:dc:03:70:fd:cb:f8:34:d3:e1:b4:16:8b:c7:ab:
                    8c:71:9f:5e:ee:53:18:61:82:bc:61:77:a4:45:67:
                    d5:09:c1:b1:48:48:e4:02:65:c7:b2:c9:0a:cc:bd:
                    66:7b:67:ad:83:06:97:32:f2:69:2e:d8:81:95:d8:
                    e7:c9:66:1a:c5:b8:2d:f3:60:81:cc:df:9e:a1:67:
                    45:0a:6c:df:98:58:03:37:39:60:05:99:71:08:a4:
                    f2:aa:d3:93:81:40:48:54:e4:a5:52:5e:3a:e2:e2:
                    2b:08:cc:2b:6b:85:d4:0d:80:c6:fa:bf:d4:9c:d6:
                    09:9a:0f:de:3c:4b:48:4e:e9:aa:09:e0:06:81:82:
                    e2:36:ef:b8:02:af:41:e0:90:a2:ec:e4:c7:3e:f2:
                    38:d0:1b:55:d1:7d:de:3e:1c:73:8e:1f:5e:02:9c:
                    23:a9:48:8a:db:2e:0c:c6:7e:2e:4f:06:21:4b:24:
                    87:90:7c:20:62:84:eb:96:fe:6e:2b:27:6e:96:34:
                    97:1e:5a:a9:86:48:90:4c:76:cb:38:7d:6f:34:e9:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:05:B9:4C:C0:E4:F4:C6:A6:70:FC:C6:EE:63:D3:72:64:30:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c9:99:34:b2:76:03:ea:12:35:5d:53:82:f2:bd:df:c7:8e:
         e9:82:a2:89:9c:24:2a:4c:23:8a:eb:01:5a:2a:13:5f:18:7a:
         42:c7:4e:64:1a:ef:90:af:ff:d2:6a:aa:77:e7:00:f6:38:bf:
         93:21:42:c4:b5:b3:42:87:78:66:5c:29:b7:e0:37:9c:ec:61:
         b8:41:9f:94:2d:a0:cd:c9:d8:18:66:df:92:ae:99:d8:f8:50:
         ce:45:11:72:3d:3d:ec:a4:22:77:f7:84:37:77:6f:bf:89:e3:
         d9:23:27:c2:ba:8e:3d:27:ee:c6:cb:a9:b7:60:90:cd:85:a0:
         a4:11:b0:be:1d:9f:85:96:67:e1:71:4b:14:35:c9:a0:78:ff:
         8e:c1:0e:4c:b2:f8:0b:3a:7d:03:01:38:33:6b:97:bc:9a:72:
         29:da:f9:93:d4:97:65:f9:f1:27:6a:b2:1a:25:e2:b2:2a:dc:
         92:a7:5c:af:25:f6:9e:0c:02:49:71:55:da:dd:b5:70:78:af:
         aa:b3:f7:8b:94:be:7d:1a:d7:d9:c6:42:71:c4:bf:ba:11:2a:
         56:97:e3:4f:fc:ff:dc:f2:6e:1c:a3:30:4e:c9:34:69:e0:65:
         22:36:61:4c:f7:83:40:88:45:8f:50:63:96:50:b5:53:18:47:
         7b:8b:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 19:58:28 2024 by rpki-client on console-ams.rpki-client.org