Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa
File:                     e9618a84-cd25-3185-ba38-a4cc840a603b.roa (raw, json)
Hash identifier:          haf1jbNkPpv/7WWT1HD+cmA4841vBSg3h2seQYhfZa0=
Subject key identifier:   F0:39:82:B5:5A:1D:66:A3:06:2C:F4:6B:42:71:BF:1E:3F:6D:DA:18
Certificate issuer:       /CN=3416eb84-d1fa-4d16-850d-b6024c13b511
Certificate serial:       010D0C9F432858467B3AF0A2433004E65345EA00
Authority key identifier: C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa
Signing time:             Tue 09 Jul 2024 13:56:12 +0000
ROA not before:           Tue 09 Jul 2024 13:56:12 +0000
ROA not after:            Mon 07 Oct 2024 13:56:12 +0000
asID:                     21930
IP address blocks:        198.202.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:3a:f0:a2:43:30:04:e6:53:45:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3416eb84-d1fa-4d16-850d-b6024c13b511
        Validity
            Not Before: Jul  9 13:56:12 2024 GMT
            Not After : Oct  7 13:56:12 2024 GMT
        Subject: CN=3f9be320-baf3-4e82-abab-d46c17ab7489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:43:b5:15:fa:15:24:08:96:5e:61:b3:e5:
                    ed:b7:69:60:6d:c4:0a:26:82:a3:b4:53:b3:c4:e7:
                    e8:4d:09:65:54:e5:17:11:83:99:4f:4d:8f:56:2e:
                    78:72:d3:15:81:03:8f:24:a6:85:26:05:40:1e:7a:
                    d2:14:d3:e1:ad:e5:04:f7:ac:a3:09:07:af:79:9c:
                    59:8b:93:8b:a6:b5:1b:55:fb:63:60:f7:e4:83:fe:
                    21:05:8d:25:ce:84:4f:33:00:83:23:46:f9:16:5d:
                    17:03:9f:64:3f:3c:8e:51:e5:55:cb:a5:25:9a:6f:
                    cc:55:a5:0e:63:d3:81:7c:2b:5d:5d:c1:1c:7a:c1:
                    1b:7b:fc:d0:a0:72:fb:10:f6:81:d6:33:9e:ff:0c:
                    73:28:1d:b8:de:c9:be:d9:8e:a3:98:4f:df:34:6a:
                    26:bc:7d:3a:af:4c:5c:1e:2c:a8:c3:ef:fb:b2:f8:
                    3d:4c:7c:88:75:5d:30:89:06:cb:c5:07:8d:51:e2:
                    bd:0a:79:6b:f2:26:2e:94:16:bd:0e:a7:7a:e0:f4:
                    99:c5:27:11:11:bc:4b:41:c7:cb:85:b2:09:ce:00:
                    7b:1a:45:5c:09:71:a6:23:24:30:e3:db:20:6f:f3:
                    07:4b:98:79:44:80:be:a3:8e:40:5e:b9:af:43:15:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:82:B5:5A:1D:66:A3:06:2C:F4:6B:42:71:BF:1E:3F:6D:DA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl

            X509v3 Authority Key Identifier:
                keyid:C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:b6:f3:7e:09:ac:ed:d5:31:af:a3:70:cc:d3:40:cf:f2:
         9f:bc:c8:b7:b0:cb:52:b0:3a:16:7b:d4:a4:35:c4:08:9f:79:
         bc:dc:b3:d3:da:04:17:a4:58:3a:bf:3e:b6:3b:42:26:c3:f2:
         6e:29:c0:87:ed:65:46:56:2a:bc:73:90:f6:32:ea:fb:63:b6:
         b5:36:54:b6:10:11:5f:8d:0d:15:88:21:1f:4d:01:0d:bc:14:
         b6:27:bc:61:3f:f4:03:bb:2a:1d:32:21:fe:0f:ea:75:38:28:
         08:da:ff:d3:1a:dd:84:88:76:b9:9d:d5:7f:13:a8:2c:49:24:
         99:60:bf:79:7c:dd:9a:b6:55:e5:f3:a6:2f:88:e0:e9:e0:88:
         a7:62:05:c3:29:8f:7d:b2:d7:5b:4e:1d:44:5f:4f:55:37:51:
         f8:46:91:db:16:10:a8:41:23:1b:5a:89:12:07:1f:ef:1f:e4:
         fb:90:45:68:c7:dd:8f:9e:a6:e3:d7:1b:e8:7e:72:21:08:61:
         ae:b5:6d:2b:f7:96:ac:fa:b2:35:8d:f2:3c:b7:f6:14:9f:ea:
         2c:3d:f4:93:0d:0d:b4:65:bf:c0:7f:4c:d2:a8:d8:7e:ea:2b:
         b0:40:84:8d:e5:26:bd:bd:76:31:f1:41:6c:cf:39:3f:c3:17:
         ff:84:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:08:48 2024 by rpki-client on console-fra.rpki-client.org