Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d563b298-1b3f-3615-bb01-29c0819ee013.roa
File:                     d563b298-1b3f-3615-bb01-29c0819ee013.roa (raw, json)
Hash identifier:          bSq7nJ5xHIxBjeKeJpOuFLXO2Xt86G22MMgWs4uhPxE=
Subject key identifier:   EC:45:07:82:84:00:93:A4:7B:95:4F:13:E6:D1:4E:95:7B:4E:12:17
Certificate issuer:       /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Certificate serial:       010D0C9F43285847CFD4A1318D5269746BA0428C
Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d563b298-1b3f-3615-bb01-29c0819ee013.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     63141
IP address blocks:        192.35.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a1:31:8d:52:69:74:6b:a0:42:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=16720c47-0215-485d-beb5-2f1a18ca2495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6a:d1:eb:79:ee:2e:5e:37:a7:ac:63:dc:ef:
                    54:62:08:07:93:2e:5b:d8:d1:85:6d:d9:ae:2b:ab:
                    2f:d2:3a:24:55:65:eb:30:58:e1:05:e7:15:65:b1:
                    06:b7:43:c4:0f:4c:10:50:46:79:f3:c2:ae:ae:a2:
                    15:89:8f:c4:c8:c3:f3:91:c3:ec:a4:95:0b:cd:e5:
                    f6:0d:2f:1e:3e:7c:80:50:f2:8a:79:05:10:0f:77:
                    c7:1b:2b:da:2f:66:6a:83:0b:62:47:33:42:6b:37:
                    67:a1:c9:61:93:de:46:d2:f5:d1:bc:11:0f:e5:ad:
                    7c:41:bd:7a:f2:a9:8c:9b:28:3b:4b:33:15:50:88:
                    41:4a:c3:c4:3a:db:d4:23:ad:06:80:8f:be:dd:29:
                    61:6e:5f:a9:fa:14:c8:00:d8:4e:71:1a:64:c1:9b:
                    fc:83:a1:d4:d2:af:8f:e9:00:e7:88:3e:89:6a:6c:
                    e4:6c:96:d3:f4:06:94:bb:1a:85:4b:04:93:79:2a:
                    6a:1f:60:38:0f:2f:b5:a8:70:3c:92:02:2c:19:4f:
                    d3:d6:1b:99:9e:a8:00:c6:07:99:38:8c:02:1b:bb:
                    17:5c:c2:07:69:9c:af:42:8a:0e:98:2a:30:88:af:
                    92:b7:2d:28:e4:2e:ca:78:e1:71:f9:e4:54:cb:e4:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:07:82:84:00:93:A4:7B:95:4F:13:E6:D1:4E:95:7B:4E:12:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d563b298-1b3f-3615-bb01-29c0819ee013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:df:98:1c:82:90:51:fd:84:ce:8d:24:46:d4:46:ac:48:aa:
         20:c6:92:82:05:35:e2:47:fb:3f:31:f3:97:69:2a:97:67:5a:
         76:75:72:ec:ac:ab:60:63:c0:78:6c:3c:da:e3:18:a6:26:fe:
         a9:88:27:99:f0:cd:d2:82:c4:55:ca:2a:38:95:06:2c:b0:77:
         b7:a6:14:ce:d9:b8:07:6c:78:73:70:1f:f6:4e:a8:f1:fa:45:
         f7:59:ee:92:b8:c7:46:6c:ac:8f:fd:f1:12:a9:ff:15:cb:97:
         33:c0:92:6e:f9:4e:1c:a7:dc:2f:8b:1b:94:37:57:f3:78:60:
         75:98:1e:d1:b9:f4:4d:bb:ac:c9:0d:ae:fc:90:3d:b2:04:73:
         75:75:54:ec:76:45:58:14:3b:73:0a:1c:b6:d4:54:c0:3b:be:
         32:ed:4e:98:6d:48:d8:45:f4:d3:ad:a8:87:8b:f2:b5:ca:ba:
         2e:42:86:d3:14:be:e1:3e:28:d5:c7:d3:fa:c4:a7:d6:76:cc:
         39:ae:54:d5:79:c6:b3:d2:b4:a3:1a:8b:13:78:f3:3c:2c:48:
         22:f6:7e:02:e6:00:6c:13:87:bb:df:4e:91:16:72:18:36:af:
         71:af:8a:ef:dd:db:9a:a5:d0:d9:d7:91:e7:e9:af:93:ae:40:
         60:bf:ef:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:23 2024 by rpki-client on console-fra.rpki-client.org