Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c1ca1801-c622-3da0-a442-ab5532c40db2.roa
File:                     c1ca1801-c622-3da0-a442-ab5532c40db2.roa (raw, json)
Hash identifier:          xdlp0H42WuH5mN+sHk7ejgdJOQwBPh3UuYxtFq2r6Po=
Subject key identifier:   DF:4B:79:D0:DB:C2:7C:83:AF:9E:78:1E:3C:6B:7D:1C:8D:F0:33:48
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285847BAE7FD495871C0A4E961C900
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c1ca1801-c622-3da0-a442-ab5532c40db2.roa
Signing time:             Fri 01 Nov 2024 02:07:44 +0000
ROA not before:           Fri 01 Nov 2024 02:07:44 +0000
ROA not after:            Thu 30 Jan 2025 03:07:44 +0000
asID:                     2559
IP address blocks:        198.241.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:e7:fd:49:58:71:c0:a4:e9:61:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Nov  1 02:07:44 2024 GMT
            Not After : Jan 30 03:07:44 2025 GMT
        Subject: CN=49589ffd-a316-4465-8ae4-333011b942f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:7d:dc:ce:6d:b6:f4:f8:df:41:4c:8a:cd:
                    9d:80:24:7d:cd:33:4f:6c:31:ef:5d:e1:65:b5:31:
                    cb:23:c5:2c:62:15:63:25:ce:6b:41:67:a6:d3:29:
                    13:72:19:85:ca:7d:c4:d4:1b:2f:9b:c4:8d:e9:e3:
                    87:15:84:03:84:cd:0c:a6:fe:44:86:49:30:57:5e:
                    15:91:23:b4:2e:45:f5:52:6f:24:be:a2:65:7b:11:
                    38:ef:61:af:bc:7c:3e:40:34:5e:7b:ce:65:eb:45:
                    28:df:84:90:83:97:b3:7b:87:c3:0f:63:b0:47:0e:
                    ab:2c:55:c3:da:2c:1a:15:02:f5:aa:20:85:cd:b0:
                    e7:44:a7:ce:1c:44:45:f0:4d:e4:ea:a9:3e:b6:26:
                    8f:73:17:7d:f3:a9:d1:f6:76:f4:5f:9e:b6:d5:70:
                    c2:18:00:f6:7e:c1:ca:0f:35:cd:da:a2:ab:ad:22:
                    65:06:ed:9f:da:9e:09:bb:8c:0f:31:bd:2c:45:76:
                    53:72:b9:e6:14:73:cf:af:af:fa:80:7a:df:86:d9:
                    70:56:7d:28:85:d9:cc:3f:88:e7:f1:ae:f3:8b:5e:
                    8a:2b:e2:59:bc:25:8c:52:9c:4d:3f:01:d8:0f:6a:
                    dd:f0:3c:c8:25:fa:c6:9f:dc:32:82:f6:a0:35:f2:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:79:D0:DB:C2:7C:83:AF:9E:78:1E:3C:6B:7D:1C:8D:F0:33:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c1ca1801-c622-3da0-a442-ab5532c40db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:af:e7:c3:f7:12:f6:8e:1d:93:c1:87:aa:c4:b4:3b:6f:
         2e:3f:39:66:74:33:92:69:63:e4:76:36:5f:10:bb:d5:ce:f6:
         f1:ad:e4:c6:95:1c:13:8e:c9:b9:bd:fe:10:2d:59:22:8b:21:
         76:2a:68:6c:3b:e1:7b:51:0d:3c:f7:b7:16:12:c2:d5:5c:ae:
         fb:9c:1d:63:c6:85:6a:b9:d9:04:a0:b3:97:de:10:69:53:ef:
         17:dc:e5:85:28:0a:35:43:72:6b:ca:fe:de:71:01:e4:b3:7e:
         a0:c6:4b:a6:46:a1:d3:f9:40:02:ab:ba:50:2a:10:1d:06:3d:
         b4:91:2d:ea:ca:e2:f0:5c:ac:ad:17:15:6c:25:1e:55:5a:74:
         ba:f1:0f:aa:be:7e:c5:af:a9:44:78:62:20:e1:00:8a:88:f6:
         25:a0:18:ed:3c:cc:03:24:21:8c:ec:69:fa:bc:02:c6:f9:78:
         6c:5a:83:99:3e:c0:06:7b:ee:95:78:bc:56:1f:e0:59:8c:96:
         ec:6c:4a:6c:72:a4:8c:28:2f:d7:79:ba:09:d6:78:80:ef:1b:
         ed:08:0e:62:aa:3b:f3:99:44:77:98:e8:89:35:6e:42:12:94:
         1f:af:2a:af:9f:7e:c4:c2:35:2d:95:c1:ea:4a:a9:68:c4:ad:
         33:11:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org