Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/c552fca0-c03d-318a-8de6-dedb585a74d7.roa
File:                     c552fca0-c03d-318a-8de6-dedb585a74d7.roa (raw, json)
Hash identifier:          FpxmhP0RLh2sH51CwV4W/cuaknVQMDOAseEO8q0d6oY=
Subject key identifier:   7D:8B:D1:39:5A:1E:AB:62:A7:FE:60:04:20:C9:76:A6:8B:BA:AA:6D
Certificate issuer:       /CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
Certificate serial:       010D0C9F43285847E78F643D8A07B7305923FA00
Authority key identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/c552fca0-c03d-318a-8de6-dedb585a74d7.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     16509
IP address blocks:        198.235.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:64:3d:8a:07:b7:30:59:23:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=b49410bb-1720-4f63-a700-7cb55de54843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:56:d1:ea:26:db:3e:e1:9e:1e:3b:d4:25:
                    9a:3d:75:35:e2:28:df:4f:3a:a0:71:83:9a:37:e3:
                    4d:e3:30:b8:43:5a:03:54:ba:94:19:a5:30:7a:59:
                    17:2a:b7:bb:de:5a:11:38:ec:f0:b2:9f:e4:27:b0:
                    45:d9:c0:8e:b2:e2:5b:aa:97:1a:7a:80:1e:1d:49:
                    e1:05:c2:28:f4:bf:62:ca:bb:a8:2e:b9:82:ce:ed:
                    f0:84:15:e7:d5:42:d6:c5:57:26:ea:4f:06:4d:d6:
                    00:3b:04:5d:41:a7:a6:e4:19:bf:74:9c:56:40:17:
                    87:03:83:b8:3f:b6:0a:1c:29:3a:cc:0c:23:36:12:
                    94:c7:83:56:7e:6e:45:1a:d4:9f:e6:87:c7:73:e8:
                    8b:9d:f6:86:8c:a4:68:37:8a:49:1f:03:59:37:d7:
                    90:2d:d5:56:ca:b1:f6:dd:db:c6:63:5d:ca:c1:6d:
                    29:42:0e:2e:e5:ba:1c:51:76:d5:ce:1f:11:b6:fe:
                    8e:da:51:2d:6c:79:f8:5b:15:24:5e:66:96:df:13:
                    6c:75:7d:c0:7a:0d:2b:ce:ff:01:12:7d:36:6b:39:
                    c5:07:1e:08:85:9a:c8:c6:7d:05:9e:36:06:98:5d:
                    7e:01:34:1d:f6:69:7f:32:05:76:38:e5:b7:fc:2b:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:D1:39:5A:1E:AB:62:A7:FE:60:04:20:C9:76:A6:8B:BA:AA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/c552fca0-c03d-318a-8de6-dedb585a74d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:b3:6b:9c:38:5e:f5:29:f6:e1:5a:7e:b3:0a:a2:02:5d:
         c3:3d:f7:d1:b1:fa:ea:41:4b:53:26:8f:48:c1:4f:ad:6f:bc:
         17:55:77:a9:36:68:df:d0:fe:7f:7b:55:fb:ac:56:4e:ad:28:
         4d:cc:ca:ef:2f:3e:80:fd:bc:69:b9:22:36:35:1e:3e:c1:4b:
         b2:13:bd:71:c2:0d:57:3b:13:5a:ab:28:e9:28:19:ad:c9:d0:
         02:a4:bc:4e:a8:63:3b:fa:4e:6e:bc:39:8e:ed:e0:0f:f7:55:
         c2:63:de:e3:5e:a1:8a:53:7a:52:c0:08:e1:0a:07:57:b0:5c:
         2c:1d:f6:60:04:6b:60:39:4f:57:c7:88:a8:05:c6:5e:44:72:
         2a:21:68:25:8c:c4:2e:80:83:08:f0:5b:59:0b:a5:30:a5:31:
         91:43:96:5a:73:04:29:29:c1:f3:5b:4b:53:b7:ce:83:b0:65:
         55:e4:d5:0c:54:6b:e5:26:be:95:e0:dd:40:25:0c:08:e3:b0:
         a9:25:46:1d:1a:9e:14:25:a4:9b:f3:e0:1b:d5:f5:21:56:f0:
         6b:32:85:48:06:44:62:00:89:fc:fd:9c:54:33:8c:d1:5c:bd:
         d3:08:60:ab:bb:a8:ee:b3:5f:06:2d:0b:4a:86:87:be:a1:cf:
         8a:8d:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org