Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
File:                     ff08339d-585d-3340-b3f1-2b16c2469a4a.roa (raw, json)
Hash identifier:          c9RVhgASXbCWl7a0gIY2woBALXwtblubM3clDTgI+xc=
Subject key identifier:   38:F7:21:04:80:FF:DF:BE:FF:5D:A1:0A:1E:F6:7C:E0:32:67:C1:93
Certificate issuer:       /CN=7486d668-0b59-485d-a30a-dbd53fab21fd
Certificate serial:       010D0C9F432858475A763DF569DE2547BF05C0C0
Authority key identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     16668
IP address blocks:        198.202.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3d:f5:69:de:25:47:bf:05:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7486d668-0b59-485d-a30a-dbd53fab21fd
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=aac2451b-ee73-4475-99f7-8ce7202aef0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:5b:f3:be:3b:de:32:2c:dc:3d:95:0a:60:
                    3b:59:48:12:40:33:be:49:c3:c3:94:51:1a:84:ed:
                    30:47:0a:c3:bb:55:ff:e5:5f:35:d9:db:f0:b2:68:
                    d4:c9:50:1f:54:b5:f6:76:0c:c4:a8:30:07:db:4c:
                    51:ef:17:b3:22:99:14:bc:37:27:d0:b4:90:3e:f9:
                    a9:06:1a:12:41:2b:5f:72:ae:60:8d:1d:9e:e0:8d:
                    60:17:19:fb:34:7a:69:5e:59:27:93:2b:d1:a4:e3:
                    c0:88:84:91:60:41:19:8b:48:ab:7c:8f:17:17:e9:
                    a5:6b:2b:bc:f5:f1:ef:1c:69:e9:cb:d1:20:6e:78:
                    a5:88:a8:0e:6c:66:7e:b3:1b:c4:4f:44:63:e9:fc:
                    91:0a:3f:ea:1b:98:3a:6a:f6:1b:0a:25:3b:05:b2:
                    41:cb:f0:38:aa:7f:77:72:ff:c1:ed:51:c1:67:83:
                    e2:b6:c8:5a:26:3e:46:31:37:ff:e1:5b:b0:32:b4:
                    e9:c3:0c:56:98:8c:5b:8b:be:82:32:9d:31:ce:69:
                    2f:46:27:13:81:f5:c8:aa:a8:c7:06:37:7b:c2:e0:
                    f9:7e:8c:a5:1b:2e:93:51:b6:1a:83:5d:a1:38:35:
                    13:b4:b7:2c:bb:84:d9:55:7f:88:21:46:68:0a:c0:
                    83:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:21:04:80:FF:DF:BE:FF:5D:A1:0A:1E:F6:7C:E0:32:67:C1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.crl

            X509v3 Authority Key Identifier:
                keyid:6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:4e:c6:1e:44:ae:df:25:c2:2d:31:66:5d:07:ac:fa:ad:
         55:5a:07:04:50:62:46:fa:25:66:2b:0c:5a:99:9d:7b:66:6c:
         b2:08:8b:17:e8:06:26:19:a0:6e:84:0b:4d:87:7d:85:06:26:
         9a:28:89:c9:90:6d:d1:4c:fc:1a:06:57:7b:26:46:b8:78:c7:
         91:a7:3f:bc:95:36:4d:13:69:20:01:ad:c8:5c:7e:3f:5c:c2:
         e3:fa:68:9b:75:84:97:25:ab:c5:9d:8b:08:16:cc:f1:de:95:
         aa:60:4d:2e:6d:1d:0e:ed:9c:4d:65:60:2f:d7:99:41:7d:2b:
         73:52:5d:44:8f:55:2b:3e:a2:89:8c:3d:03:c9:65:c0:42:e6:
         2e:ee:2f:2a:49:ef:23:8f:55:f4:b7:1a:ed:f5:d9:2e:42:a7:
         48:fd:f5:ee:b0:89:a7:64:77:77:97:78:11:5d:e6:f2:c9:79:
         ff:50:5c:b6:ea:8e:fc:11:79:48:64:81:b7:de:43:3c:a5:b8:
         23:83:60:0d:01:62:d8:b8:67:81:b1:93:e6:98:94:a3:b7:8e:
         b1:51:1b:7e:e3:ca:96:28:0f:f0:46:ca:f5:30:23:94:40:7c:
         20:5e:87:74:12:45:6d:d9:a2:de:e1:b5:5b:bd:84:44:82:b6:
         5e:13:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:46 2024 by rpki-client on console-fra.rpki-client.org