Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa
File:                     8e361a8f-c2a7-30c1-872e-d892d5132b12.roa (raw, json)
Hash identifier:          WsT47uXVPcXM7nsxWC3c2WvT9U2UwJ6TTwOZqLkWj6I=
Subject key identifier:   9B:F4:FD:1D:58:50:1C:D3:C9:12:A1:23:DA:DE:2E:74:56:3C:55:BC
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F43285846A2B40023AE182F8E3F0BA500
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa
Signing time:             Tue 23 Jul 2024 17:16:39 +0000
ROA not before:           Tue 23 Jul 2024 17:16:39 +0000
ROA not after:            Mon 21 Oct 2024 17:16:39 +0000
asID:                     16509
IP address blocks:        198.169.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:b4:00:23:ae:18:2f:8e:3f:0b:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Jul 23 17:16:39 2024 GMT
            Not After : Oct 21 17:16:39 2024 GMT
        Subject: CN=c2f6b682-11c5-485c-b1d7-03ab9a2b53e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:87:02:bb:08:22:36:12:e4:c0:e3:88:87:
                    a7:25:98:d1:29:9f:11:9e:89:99:6e:27:27:7e:77:
                    2e:28:8f:7b:b2:ce:2d:38:cc:58:79:96:7f:e3:a3:
                    93:20:a2:ca:34:dc:8a:a7:54:8c:7f:05:61:5b:51:
                    74:77:69:6b:cd:70:6f:75:fe:04:98:3f:85:28:f7:
                    ab:b9:65:b8:16:d9:23:38:8e:51:13:34:30:f0:c6:
                    22:27:8d:f1:c3:0c:c8:d4:fd:b1:a2:62:93:47:50:
                    41:ec:57:cd:b2:1b:3e:33:d3:19:58:9d:70:87:44:
                    42:c0:de:14:61:ec:ac:42:39:c4:6a:7c:37:84:aa:
                    d7:6d:72:dd:b2:8c:f3:8f:f0:cc:93:f5:16:60:fd:
                    c4:45:9b:df:bf:df:e2:50:58:7d:5b:4f:7f:26:f1:
                    4d:00:9c:58:39:0f:fa:20:11:2a:84:0a:19:c3:22:
                    81:6f:68:4c:b1:56:b2:b6:4e:5f:43:60:2e:68:4a:
                    bd:df:23:7f:c5:7d:ba:b3:89:6f:12:31:b1:f9:ca:
                    01:fd:a8:8c:89:3f:74:a9:3b:74:34:54:cc:5a:02:
                    fe:ea:55:cb:23:c8:e7:80:24:97:df:6b:6e:9c:0a:
                    b3:88:9e:08:05:3b:a2:4c:ff:2b:8c:0b:cb:f3:99:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:FD:1D:58:50:1C:D3:C9:12:A1:23:DA:DE:2E:74:56:3C:55:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:86:90:80:7c:8b:b2:e7:0c:dd:64:fc:49:e2:5a:67:5a:
         fd:66:8e:d0:18:bd:71:c7:8e:45:ff:89:1e:64:04:a3:54:6b:
         7c:99:c8:73:b4:65:85:0c:c6:59:07:3d:2f:8b:e5:10:e9:7e:
         28:2a:cd:5c:a6:88:7c:c7:37:3d:cc:ea:be:8c:d4:e2:72:30:
         a0:63:e8:a5:2e:23:87:7f:a7:ee:2e:bc:ba:14:2c:08:79:90:
         60:99:cb:28:e9:60:0f:0a:91:28:41:f0:2f:2f:34:f9:d4:34:
         74:36:c5:e6:77:ac:8c:39:f1:49:c8:74:e1:4b:7f:09:38:2f:
         b0:51:19:14:09:ca:19:56:23:95:a0:4d:ed:e3:1c:5f:26:81:
         28:8e:71:6a:ea:03:23:27:a2:40:27:61:be:76:e7:6d:39:76:
         60:09:aa:22:80:2b:70:4b:d3:c2:4b:ae:c0:f0:63:2a:fb:ff:
         82:9d:e2:fa:65:c9:29:5a:8c:bf:68:ed:10:41:9a:b5:eb:c4:
         91:2a:bd:45:31:34:22:5d:95:a8:f9:c0:14:c4:10:45:89:b8:
         a0:21:59:6e:0d:46:b0:ab:15:ca:f7:35:c6:9d:4f:7b:52:28:
         f8:8d:de:c1:9a:db:8e:c1:cb:c6:a2:7d:12:25:f5:8a:f0:d5:
         3a:dd:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:13:28 2024 by rpki-client on console-fra.rpki-client.org