Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa
File:                     fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa (raw, json)
Hash identifier:          PC1TDxFYKfDztNnUn24SQCFop3T9onXuqOCaSr2g3l4=
Subject key identifier:   53:B7:65:89:F1:A3:94:80:1C:39:56:68:BE:6C:A2:3F:77:C2:B8:42
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858478E4BC92B2552D48BEF543E80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa
Signing time:             Wed 16 Oct 2024 02:37:26 +0000
ROA not before:           Wed 16 Oct 2024 02:37:26 +0000
ROA not after:            Tue 14 Jan 2025 03:37:26 +0000
asID:                     2559
IP address blocks:        198.241.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:4b:c9:2b:25:52:d4:8b:ef:54:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Oct 16 02:37:26 2024 GMT
            Not After : Jan 14 03:37:26 2025 GMT
        Subject: CN=3c9f101a-0344-4f32-a21b-4d35cfc289fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:05:8e:ec:2e:49:af:5a:46:ee:e7:5d:c8:
                    dc:94:f6:0b:76:f8:dc:03:78:9a:2e:2e:c3:68:ff:
                    7a:06:58:3c:d6:20:d7:01:85:0d:99:76:ee:a8:72:
                    04:08:72:8a:e0:2e:a6:dc:50:2f:77:1d:b6:fb:66:
                    42:ae:95:20:33:90:40:9a:e9:4f:07:f1:a1:e3:03:
                    96:e4:dc:b6:6a:c5:a2:8a:d7:31:48:32:be:06:e2:
                    84:83:c2:39:ff:13:c8:39:77:74:26:8d:73:35:a5:
                    57:73:d3:67:e8:72:01:30:e1:3d:60:43:d8:9d:53:
                    a2:c1:68:b7:91:ac:cc:bb:50:fb:86:8b:e2:04:56:
                    2f:7b:58:44:71:79:f1:cf:c4:7d:50:80:55:33:13:
                    ed:cf:93:5d:63:bb:d4:0c:5a:d6:71:96:c6:ee:45:
                    1f:e2:64:52:79:7e:b4:79:dc:5b:52:64:0d:99:b0:
                    47:75:8d:1b:2f:f9:9b:d4:e2:c8:2c:e2:90:32:a3:
                    22:7e:43:f1:b6:a1:d0:f8:e0:5b:b9:ed:63:a0:0c:
                    72:1f:d1:36:3c:d9:14:b5:95:df:df:39:93:a1:12:
                    16:94:25:26:16:37:85:fc:d1:66:8f:4e:fc:69:e2:
                    6d:10:ff:20:9b:c3:01:a0:32:40:48:eb:be:5c:ba:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B7:65:89:F1:A3:94:80:1C:39:56:68:BE:6C:A2:3F:77:C2:B8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:a0:ef:64:86:0f:ee:f4:b7:34:a7:60:f9:c6:59:5a:33:
         99:af:17:2b:33:6a:2e:d4:75:54:ee:14:10:71:04:af:51:54:
         fa:8c:d5:ee:d8:4f:ce:dc:6c:1f:f9:ae:86:ec:fb:99:0c:71:
         22:e6:f7:fb:e0:6c:72:c4:7c:2c:f4:3c:8c:55:db:fc:21:14:
         a7:09:7c:75:43:1e:81:37:61:39:dd:a3:db:2f:b0:d8:90:4a:
         75:5a:d5:38:d9:6e:57:70:86:92:d7:b8:ab:c3:32:78:29:5c:
         de:4b:78:0b:dc:54:eb:db:ff:3b:81:19:f8:19:e2:60:a5:02:
         68:31:c3:35:1a:87:00:57:89:4b:b0:f0:be:c5:90:60:2e:a2:
         9e:a3:9c:61:ea:5e:5f:5f:bf:2e:cd:26:21:6f:66:6f:0c:c4:
         dc:7c:08:5a:85:25:aa:dd:e9:ff:bd:64:25:1a:fd:38:42:96:
         b6:a3:02:ee:6d:e5:87:8d:8c:39:f2:c9:5d:14:ec:94:8b:e0:
         9a:f4:2d:cf:13:39:14:b0:d8:cc:80:6e:d1:5e:c5:a9:d0:ea:
         b8:9f:47:fe:7b:98:80:e1:6e:ef:c0:88:97:6b:d6:e9:0d:ff:
         ec:cc:b8:94:39:55:b0:97:e1:0b:05:35:77:1f:bd:7b:eb:fc:
         35:2e:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org