Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa
File:                     96c3f96c-fa15-3ebe-8307-e0e08190b905.roa (raw, json)
Hash identifier:          ayv2LPF6sbKRFqlfVx9W4itCkhYSCNCHVlwDm4UVtw4=
Subject key identifier:   E0:49:EF:FB:EB:77:93:F2:76:53:BC:84:64:01:94:BC:D5:09:B9:CD
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F43285847AE36C17F813A5B6298828C60
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     62563
IP address blocks:        198.57.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c1:7f:81:3a:5b:62:98:82:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=76398b9f-2fa8-4ef2-9cec-fc74c8f61809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:46:d3:5c:23:ec:d7:90:42:0a:6a:4e:a0:
                    05:b9:d6:00:db:0f:c2:df:59:4a:8a:4b:1e:1a:c7:
                    50:28:00:69:e6:46:b9:3e:5c:f2:29:29:2b:92:f2:
                    59:f7:28:a1:a2:71:fe:91:9e:1e:30:bc:96:a0:5e:
                    d8:15:db:52:33:5a:e3:42:c1:03:40:93:76:b7:73:
                    7c:01:79:fd:d2:ae:cb:fe:51:58:31:73:4b:e1:d2:
                    34:1f:6c:60:5b:96:fb:d9:1b:90:d5:29:b3:d4:d5:
                    ae:0f:1c:63:62:1b:f7:d7:5c:49:da:f7:c5:4d:c8:
                    5d:41:4c:af:0e:e0:e8:1e:af:e1:aa:92:08:f3:cc:
                    6e:b8:4c:68:83:75:b7:e9:b1:af:ff:41:67:90:bc:
                    27:78:a8:1a:a2:cc:67:f9:78:34:30:f6:47:67:8a:
                    ca:76:98:d4:dd:be:c1:f0:7e:c8:ff:f9:16:07:87:
                    75:b6:cb:9a:8a:01:a3:4a:a0:ac:ab:0e:d3:91:5a:
                    1f:ba:40:cf:98:aa:2a:6f:86:dd:fb:ba:33:49:ea:
                    c9:e0:d1:39:55:99:16:e3:3a:df:d1:1b:9f:2b:74:
                    53:35:fa:ec:0b:e6:68:41:2a:fc:1c:11:31:e9:51:
                    b1:fd:4e:e8:01:44:69:ce:02:c5:51:32:db:1c:35:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:49:EF:FB:EB:77:93:F2:76:53:BC:84:64:01:94:BC:D5:09:B9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.57.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:3a:7d:66:c8:d4:d2:f4:9a:3f:cf:36:4e:d0:fc:cd:c4:
         55:e2:3a:67:88:3e:ed:98:d9:55:65:b2:e0:f5:1e:52:38:bc:
         bd:9e:5d:e4:42:95:0f:4c:c7:cd:97:c5:6c:dc:ab:1b:bd:04:
         8b:d1:99:10:a9:e5:f5:bf:ec:c0:a9:56:61:5d:eb:04:d1:06:
         d0:74:32:15:d3:71:f7:ec:ab:64:6a:37:ff:28:0d:12:cb:aa:
         75:6d:90:c0:8e:31:87:26:75:87:52:9d:bc:d2:e3:dc:2b:12:
         e1:1c:6f:d7:c8:34:9d:c3:e0:41:c8:df:52:7d:e3:1a:19:30:
         45:31:11:32:5d:99:bf:17:5b:8a:7d:a2:ed:e4:70:17:a3:cb:
         82:77:19:9d:fb:32:c9:2f:05:3f:cb:79:6e:84:06:42:14:ad:
         b5:93:12:6d:54:07:f5:8e:c8:53:dc:0d:9e:62:f0:89:f4:ed:
         72:e2:80:a3:7c:de:1e:cb:5b:1a:09:da:5e:7a:e9:d4:c2:eb:
         8a:9f:da:e3:b3:81:25:c9:da:5c:1e:b5:08:de:59:8d:89:f3:
         bf:36:50:c9:a2:43:dc:5a:5b:ae:b9:07:cc:36:02:23:f9:8e:
         fd:f8:42:9e:0b:b3:31:64:53:7c:4d:ff:fb:f3:d3:12:bb:79:
         c4:b9:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:16 2024 by rpki-client on console-ams.rpki-client.org