Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa
File:                     8631463d-fa88-3c11-b8a3-266ffd71912d.roa (raw, json)
Hash identifier:          jYGD67W8pcz8pfDKL0x4KQuYkKxlx5djiMF24N8mkjs=
Subject key identifier:   47:9F:CD:0D:9E:34:00:2C:4D:6E:F4:C4:59:44:59:2E:2E:27:F2:66
Certificate issuer:       /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial:       010D0C9F4328584729A94290BCC2790D9148AE80
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa
Signing time:             Tue 10 Sep 2024 01:29:08 +0000
ROA not before:           Tue 10 Sep 2024 01:29:08 +0000
ROA not after:            Mon 09 Dec 2024 02:29:08 +0000
asID:                     4226
IP address blocks:        198.91.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:a9:42:90:bc:c2:79:0d:91:48:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
        Validity
            Not Before: Sep 10 01:29:08 2024 GMT
            Not After : Dec  9 02:29:08 2024 GMT
        Subject: CN=e6abb714-0e7d-47cb-b9b3-bb2ba6cd1d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:06:27:af:dc:92:70:5f:72:9e:45:db:4d:
                    81:95:75:f1:bc:7e:21:ac:67:97:8f:94:ed:47:08:
                    cf:38:d7:7a:ad:ec:20:b3:b5:30:4e:cc:44:d7:4d:
                    50:c3:c1:28:b5:8d:f6:89:58:5f:ab:0f:f4:24:1c:
                    e8:a8:79:47:09:eb:ab:63:3e:cf:01:2e:35:87:b0:
                    7a:31:5b:b6:5b:72:c9:99:31:5e:4f:4b:25:8f:39:
                    9c:c4:1f:9e:69:24:83:87:71:6a:7f:67:64:13:fc:
                    b3:3b:4e:bc:6a:93:bb:18:ba:0b:5f:a5:71:99:d2:
                    af:cb:3b:a0:9d:0b:19:bd:f3:2e:2b:ad:88:08:52:
                    f0:15:83:67:0c:bf:9a:45:da:2b:3c:b1:6e:1d:86:
                    68:b0:87:46:64:9e:1a:77:f1:be:63:5e:a8:97:2d:
                    a8:7b:cd:e8:98:0d:b5:93:c7:59:20:f7:8e:28:87:
                    16:e3:93:81:d1:e2:ca:91:0f:7e:9b:35:5e:e5:fd:
                    fe:47:1f:5b:e7:e1:a1:b1:02:a6:84:1f:cc:44:c0:
                    5a:8b:12:65:12:a2:6a:f2:aa:09:ba:c4:4e:ae:e5:
                    64:72:e2:fc:1d:21:01:3c:3f:10:72:a0:70:74:71:
                    9c:c4:a8:01:19:e2:32:f7:ab:b3:36:0f:39:58:b9:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:CD:0D:9E:34:00:2C:4D:6E:F4:C4:59:44:59:2E:2E:27:F2:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl

            X509v3 Authority Key Identifier:
                keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.91.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b0:89:20:5a:56:8f:f9:e8:85:5a:5b:90:1e:6c:94:cd:49:
         b6:d0:80:a8:f2:26:f1:36:4d:ea:e0:fd:c3:28:57:ce:80:58:
         a4:d1:2c:b7:e2:54:53:92:03:2a:ae:5a:cd:51:fd:8a:b0:af:
         ca:00:71:50:6e:56:6e:2d:7b:d4:a3:0e:52:75:f6:1c:1d:ca:
         11:b8:f6:b6:5a:d1:34:43:5c:d4:fe:a3:07:c8:5e:7a:e6:57:
         a6:c0:51:d7:74:c4:0d:fb:8d:ad:f1:b8:a4:af:0d:49:0e:67:
         19:b9:58:7a:f1:e9:93:39:64:79:3b:1c:6f:a5:c8:cd:6f:75:
         cb:60:99:44:3b:59:d5:71:07:4b:2d:be:27:40:a7:5e:98:46:
         57:28:7a:18:a5:45:c6:a1:cc:36:20:16:45:43:1e:87:e1:71:
         7e:a8:19:2f:4c:58:b1:f8:a3:9b:87:7c:2c:12:28:ee:8a:ef:
         5e:1b:a8:79:8e:99:10:fa:d4:10:81:e4:43:e6:33:f4:9e:ba:
         ac:78:01:52:e6:74:74:21:01:07:4d:14:12:33:f4:d1:25:20:
         23:8e:52:2a:7b:c8:d7:54:cd:2a:32:28:92:ce:58:5e:9b:c6:
         3c:e9:cb:e3:30:b4:a2:d2:a0:be:12:fe:ca:ec:b9:22:84:5a:
         af:f1:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org