Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa
File:                     e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa (raw, json)
Hash identifier:          Q5uwMLqXb3+N8kCDF6Y2oeg70oyuVZ1rlNvCW0W6qHI=
Subject key identifier:   1C:3B:6A:CD:89:61:B0:2E:A2:2A:FE:B3:EA:FC:F4:FD:CC:F2:AD:59
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858473D30445BC3CD097313085740
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa
Signing time:             Tue 17 Sep 2024 01:21:31 +0000
ROA not before:           Tue 17 Sep 2024 01:21:31 +0000
ROA not after:            Mon 16 Dec 2024 02:21:31 +0000
asID:                     2559
IP address blocks:        198.241.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:30:44:5b:c3:cd:09:73:13:08:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 17 01:21:31 2024 GMT
            Not After : Dec 16 02:21:31 2024 GMT
        Subject: CN=43beff6a-2310-4be0-8dfd-fbc8e5291cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:67:63:11:c4:05:ae:e5:6d:22:31:99:f4:
                    bb:ed:9f:67:0b:22:67:81:a4:03:94:3f:b2:59:2e:
                    a9:2e:2d:c9:28:de:b2:2b:7e:55:19:c1:82:e9:ef:
                    87:7a:f6:47:0a:74:39:ac:8a:8d:bc:01:b7:c8:5d:
                    84:d4:10:88:3b:47:40:e4:71:d0:8d:46:ce:3c:55:
                    d1:91:ad:59:27:11:8a:97:99:bc:18:50:ee:90:86:
                    ba:77:56:8d:94:25:cb:6c:d5:e7:dd:09:0c:a4:b1:
                    74:68:4b:6e:63:3f:10:a3:f8:24:e9:2e:25:fc:4b:
                    2e:e0:f5:d1:c9:9b:6a:16:e3:62:0e:93:76:3d:9b:
                    dd:21:62:01:c5:67:6a:f9:26:d0:12:c6:08:c9:1d:
                    71:6d:c2:8a:02:4c:c7:27:25:93:9e:e2:f5:96:6c:
                    3d:f0:0e:45:f9:44:8e:bb:40:ca:e3:cb:1c:e6:cb:
                    27:1d:9d:0d:39:21:21:75:23:26:65:c7:e6:7c:9d:
                    dc:c9:07:52:d9:d0:3f:b5:c5:6c:8a:22:89:28:82:
                    6d:58:56:4d:d1:3b:90:a4:64:1d:51:69:9d:b6:42:
                    00:1d:eb:c3:86:a7:42:ad:6e:5c:bd:03:dc:d1:28:
                    8e:25:ef:59:f5:09:8e:e8:84:73:7c:23:00:46:fd:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3B:6A:CD:89:61:B0:2E:A2:2A:FE:B3:EA:FC:F4:FD:CC:F2:AD:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:94:63:d7:49:93:df:2e:7e:bc:14:3d:99:87:bd:ae:d7:81:
         f5:93:ae:0c:f4:bf:88:7c:70:76:28:4f:fc:19:5a:9d:47:b1:
         97:65:f9:6d:b9:ee:e9:73:c5:b1:bd:5d:2d:95:76:5b:b7:98:
         93:f7:0d:42:01:f8:00:91:9e:2a:6e:f2:7b:f9:af:51:36:e4:
         d3:cd:55:83:8d:e6:7b:c5:3f:e5:6b:b4:1c:11:6c:7a:cb:16:
         57:58:74:c3:46:f3:0f:e6:1d:6a:ee:25:00:87:bf:ee:c0:56:
         f0:a9:9f:cb:13:fb:02:6f:1d:65:1c:ac:c1:3e:4d:bd:df:31:
         19:ea:fa:c9:7d:fd:23:e9:0f:14:9a:08:c8:06:94:64:db:d7:
         52:75:07:f7:10:80:b0:90:67:29:41:1a:1e:49:22:42:a4:35:
         c7:c1:fc:44:a2:a4:4d:06:60:cc:d0:93:1d:17:5d:aa:a9:a1:
         64:18:e3:6f:52:4a:fc:6a:17:20:b6:9a:7d:2e:e6:58:c8:0f:
         33:fd:8b:9f:25:48:09:ec:c5:d2:be:87:d9:8b:8e:54:59:4c:
         c7:b8:c0:11:db:35:8a:dc:2e:33:b1:d9:72:8b:b0:38:71:75:
         5d:23:ed:d4:06:0d:15:37:fa:ac:03:39:c8:f3:bb:89:e4:eb:
         c7:25:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org