Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa
File:                     6a790d2b-bde8-3761-a0ab-a46d1338c068.roa (raw, json)
Hash identifier:          8Y+IBT4AU7sueKK8f8xl2O4TocvnP3rCfNZN7EFf1tU=
Subject key identifier:   35:D2:1F:D1:50:8C:15:7A:49:AA:06:79:4B:68:29:11:9F:B0:7D:D4
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858473A5B309FE7669E3709207700
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     2559
IP address blocks:        198.241.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:30:9f:e7:66:9e:37:09:20:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=05179463-2e70-47e6-b07d-847443143ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:53:12:a4:8a:c4:e1:86:37:bd:af:54:7e:
                    da:16:ae:af:c1:2a:72:2d:36:18:9d:b1:91:e2:ca:
                    86:6b:8d:2e:07:b2:e1:f6:e2:1f:53:e0:67:db:5f:
                    9c:1c:0c:5a:91:21:84:ba:74:f2:6e:ee:17:93:dd:
                    5a:db:46:32:f1:c1:87:46:79:6f:cd:b9:4b:81:dd:
                    72:26:3e:b8:72:d8:78:43:0a:46:b8:b2:15:c6:5f:
                    40:e8:50:27:7b:0e:90:48:4e:e8:0a:cd:4c:bd:47:
                    de:ea:40:89:bb:f7:63:a4:9e:5e:30:12:db:0b:1f:
                    95:a7:c6:41:16:c6:9a:e5:f8:aa:40:58:8d:e3:ed:
                    4c:18:b8:c2:d5:31:33:07:88:f1:80:b0:c7:20:78:
                    f8:94:77:c4:2e:53:c1:3a:3d:64:89:99:27:e9:34:
                    ce:7e:6d:a4:13:29:dd:ee:2d:1f:32:a7:d4:51:8f:
                    c8:f2:be:2f:4d:5d:6e:cc:c5:54:ce:a4:b9:3b:db:
                    dd:9f:d3:8a:7c:df:64:42:69:49:db:f6:2a:b3:ea:
                    e2:ab:07:1c:11:12:f4:0b:64:70:de:14:82:0a:85:
                    0c:02:47:41:4f:8a:6c:72:92:39:61:34:3b:c7:4b:
                    0a:82:6c:dc:f2:70:71:b6:51:c0:43:fb:f4:9a:d4:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:1F:D1:50:8C:15:7A:49:AA:06:79:4B:68:29:11:9F:B0:7D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:e8:66:99:56:fb:b9:02:c7:de:bc:38:4c:3c:97:39:45:
         89:44:2d:4d:22:a5:4b:19:8f:72:fe:ae:a9:a9:46:20:1d:cc:
         29:7e:15:89:6b:8e:40:0c:6e:7c:4f:25:c5:38:53:ab:c1:90:
         c6:4e:4a:0c:4d:41:82:91:7c:d8:c5:b5:35:be:32:5f:8c:31:
         c0:b6:a1:fe:e2:1a:d7:ae:ae:f3:e9:8d:6b:47:12:74:5a:fe:
         f7:51:2f:e6:11:3b:f2:35:f1:54:1c:1f:db:03:86:c9:5b:1a:
         2a:01:96:5a:af:c9:28:a0:9c:47:f2:0a:3f:fd:0f:72:56:7d:
         18:14:1b:b6:34:7a:69:3f:d0:9c:a2:c4:1a:5d:a5:d6:e4:fc:
         74:3c:6c:33:2c:25:97:d6:57:42:e2:7f:5a:cd:4e:18:32:b4:
         0a:1a:bb:5c:04:b1:0d:23:47:0d:c1:a7:75:c8:b2:ce:c6:45:
         0f:07:f6:44:58:63:2e:dd:bc:47:66:6c:33:42:15:77:f2:12:
         f5:c7:74:e2:28:f3:dc:f8:1d:17:4d:a2:b5:f3:9e:c6:7f:da:
         ba:6b:1e:a4:4a:ff:42:86:92:b9:7a:f6:08:15:b9:db:51:10:
         41:38:d5:ca:46:2e:6b:55:e5:7c:2e:4b:10:a3:67:7c:0f:90:
         68:f1:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org