Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/fda8011d-5953-38de-b1ba-00f9bface3d5.roa
File:                     fda8011d-5953-38de-b1ba-00f9bface3d5.roa (raw, json)
Hash identifier:          iBbh8rb67imiVdvL9YVRuE8pnHS+4tZ6PGqfs/jQACg=
Subject key identifier:   1C:19:30:F8:37:A1:BB:83:42:5D:56:7C:D1:D9:B6:EA:33:6A:82:3F
Certificate issuer:       /CN=c03bc5c2-262c-4743-971b-dfdc92defb06
Certificate serial:       010D0C9F43285847818BC57EDAAF82EBDBF9C420
Authority key identifier: 34:D9:46:01:3A:A1:97:25:D5:34:4C:85:5F:82:63:D4:AC:28:06:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/fda8011d-5953-38de-b1ba-00f9bface3d5.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     32347
IP address blocks:        192.197.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:c5:7e:da:af:82:eb:db:f9:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03bc5c2-262c-4743-971b-dfdc92defb06
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=27e4f232-540c-465c-9167-f50fb26a3d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:82:34:30:1d:8c:f3:32:7a:76:4d:47:94:
                    99:c7:9c:12:a4:a4:78:87:4f:fe:59:00:3c:31:72:
                    4f:04:86:81:e8:c9:e7:83:e7:73:e0:29:e8:99:ed:
                    ee:fe:c1:54:7e:fd:f2:2a:82:85:42:e6:07:4e:6c:
                    c7:b4:e2:74:48:ba:6c:1a:cb:ee:05:25:ae:60:93:
                    4e:96:e7:39:f4:ac:2a:32:43:9c:89:ae:27:87:fa:
                    16:b2:dd:d6:14:f9:96:e6:70:21:59:45:98:be:67:
                    37:ae:2e:7e:cf:c5:fb:01:21:41:98:f1:02:b7:bb:
                    2a:51:5e:26:0f:0c:58:67:69:a6:e7:a6:5d:dd:9f:
                    33:07:58:ed:70:e8:ea:37:bc:b7:5d:8d:8e:09:fe:
                    85:b8:bb:5a:98:f1:1f:3e:36:db:3b:b6:15:0e:e6:
                    97:9c:c9:14:c6:0e:bc:48:6a:c4:f5:cc:9f:51:d5:
                    6a:17:04:7a:00:05:3f:f7:ef:6f:f3:8d:6d:61:cc:
                    5c:7f:1b:f7:1a:2f:4d:1c:30:00:93:7c:ef:26:ed:
                    2b:e1:2b:56:4e:b4:77:28:b0:68:c8:cc:83:1f:85:
                    85:e7:4e:a2:93:f1:8a:3c:bf:fe:64:92:e1:03:df:
                    58:82:93:1e:6c:21:d2:bf:ce:37:45:52:30:5b:bf:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:19:30:F8:37:A1:BB:83:42:5D:56:7C:D1:D9:B6:EA:33:6A:82:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/fda8011d-5953-38de-b1ba-00f9bface3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.crl

            X509v3 Authority Key Identifier:
                keyid:34:D9:46:01:3A:A1:97:25:D5:34:4C:85:5F:82:63:D4:AC:28:06:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4c:d2:be:e1:76:21:7d:8b:54:7d:61:25:b1:db:55:68:96:
         92:18:a9:57:24:02:1b:06:5e:4e:9f:c7:96:94:18:49:44:df:
         17:7d:19:33:5a:0e:33:db:45:a4:ec:6c:3e:12:c0:1b:a3:1c:
         2e:82:1d:8d:cc:53:72:5c:a6:96:b9:7a:89:1c:12:47:7d:f4:
         b0:9d:93:70:4a:06:67:35:7f:f3:d6:f3:d3:1f:63:86:cf:27:
         bd:a3:39:8b:9e:1d:97:d7:93:5b:8e:51:c2:75:e2:10:ff:a8:
         14:b6:a0:fd:f3:06:d1:60:53:f1:72:8a:4d:65:d1:67:61:07:
         0f:69:bb:69:d3:d4:fc:15:59:19:b6:4e:46:af:67:c4:f8:9d:
         28:73:39:e5:ec:bc:70:14:99:8c:c4:e6:2a:07:49:8d:5d:c2:
         a3:27:c7:f7:f4:f2:c4:1d:ba:3d:77:72:e2:a0:57:60:fd:af:
         41:21:2f:df:01:e0:35:1c:89:97:cc:66:7f:8b:6d:98:86:4b:
         0e:cb:b6:c2:28:42:bc:44:fb:24:a5:a5:06:07:58:1d:11:45:
         e2:c7:bf:ca:ba:28:d2:f4:ae:71:32:b7:8b:ce:53:f8:20:e5:
         84:c1:0c:40:92:62:10:63:bb:62:1a:e0:72:7c:34:e2:97:a7:
         e4:fd:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org