Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
File:                     229e29fd-2ef9-3a98-a347-d8b492c6c819.roa (raw, json)
Hash identifier:          A5dJVYVqp/hupKSi9OULpGXMjPeAgXqeRkbTiNk1X7A=
Subject key identifier:   80:F1:94:9A:60:5D:CF:80:80:C1:0D:4C:2F:78:DF:CE:6E:6C:AF:6C
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285847299B1B0FF11869B02FABBE80
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     2906
IP address blocks:        198.38.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1b:0f:f1:18:69:b0:2f:ab:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=8218afd2-ece8-4a43-968f-0b8b78f3ef9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:44:c5:e1:10:4e:39:19:cd:8b:e1:1d:02:
                    1d:18:c4:fa:06:b4:b4:7d:70:00:75:ae:ee:91:36:
                    9f:8e:72:2d:8f:d9:9e:e4:9e:5a:17:8e:90:e5:74:
                    4d:19:aa:41:1b:dc:70:2c:21:7e:59:0a:ad:63:df:
                    dc:fd:e8:f6:7f:00:11:56:d9:07:93:d5:af:dd:d9:
                    6a:5b:62:96:07:be:bc:56:a7:73:74:0b:63:92:68:
                    9e:62:85:69:77:93:f5:da:ce:ef:d4:1a:23:20:b7:
                    da:e3:6b:33:8e:aa:3a:3a:76:03:22:bb:c1:31:e9:
                    31:c2:a4:b4:99:90:6e:10:47:23:07:ec:cc:73:e5:
                    9a:ff:e9:33:b9:c9:8b:8e:84:1c:41:b3:76:9b:5f:
                    76:72:22:17:17:82:54:b0:23:bc:3d:14:26:9e:67:
                    67:84:34:04:e1:64:aa:48:8b:76:a5:d9:1a:65:aa:
                    09:de:a7:0f:8f:d0:f5:78:c8:36:b6:52:22:3d:33:
                    6c:e6:c2:fa:ca:43:69:e8:26:a2:5d:fa:41:40:76:
                    d0:32:ca:f1:44:f3:85:57:47:de:cb:0f:95:d8:70:
                    99:35:29:49:34:26:94:6e:b3:68:01:ff:f1:b0:6d:
                    0b:06:a8:59:f5:09:db:46:5b:66:48:83:a0:e2:b3:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F1:94:9A:60:5D:CF:80:80:C1:0D:4C:2F:78:DF:CE:6E:6C:AF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:3a:4e:7d:15:33:61:0f:fd:d5:83:3b:cf:b8:fe:b6:ac:
         f1:c8:49:2d:f4:d4:86:67:fa:c1:6b:09:f1:e6:0f:a8:ea:58:
         da:a9:dd:9a:8f:af:07:1e:da:e8:17:8a:af:35:9f:23:c3:d1:
         9f:61:ea:04:8c:1e:41:69:ee:b3:51:11:ce:27:b0:97:b7:28:
         ad:48:30:ae:e7:86:41:f7:e5:cd:0f:4d:15:0e:3d:47:dd:73:
         8f:6f:0b:06:66:ed:d5:30:ee:28:f6:ca:72:15:01:f2:bd:08:
         77:a5:a6:30:6b:17:24:7d:75:0c:bf:ee:c2:fa:de:b8:dc:17:
         de:3e:d9:29:e4:aa:30:7f:e6:17:c1:34:21:42:f9:a0:a0:2b:
         7e:1b:ef:35:6e:ad:73:76:d6:1c:b9:6b:62:2d:b9:0c:6a:be:
         1b:fd:63:0b:42:a1:9a:91:2a:25:88:83:b1:f1:75:81:2e:f3:
         b7:23:55:c0:c0:c6:33:95:7e:c0:b4:fe:5d:25:c7:44:29:25:
         c6:56:c5:29:a7:09:3f:b9:92:1e:7c:ac:47:b8:30:24:7d:46:
         82:a2:ed:8c:db:a6:4a:72:a9:3f:ae:66:46:41:c1:95:bf:e0:
         04:9a:e5:a4:2d:77:1c:f0:0d:cf:c6:30:3b:99:15:6c:4c:b2:
         ab:5a:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:57 2024 by rpki-client on console-fra.rpki-client.org