Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
File:                     81d14041-cb0e-36df-be9e-80b114230d9a.roa (raw, json)
Hash identifier:          qEu2wE/G89mqvPpmGlw/zsXM7vte7SwXj7YFGp2jvA8=
Subject key identifier:   86:43:5E:41:79:30:9D:98:A0:A8:27:E4:BA:56:85:79:F2:4F:E1:61
Certificate issuer:       /CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
Certificate serial:       010D0C9F432858472C65DA20E44706B4E81CBD00
Authority key identifier: F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        198.137.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:da:20:e4:47:06:b4:e8:1c:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=5f945c14-c83f-43e3-9f8c-b2dc0de8aa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:41:91:ae:67:a5:ff:d0:9e:88:1d:f9:32:
                    b7:45:1a:2a:f2:c8:7c:10:de:15:12:6d:61:d5:9d:
                    83:70:35:c2:95:4e:fd:20:a8:04:c7:26:c7:a3:ed:
                    d7:79:11:4c:35:45:23:eb:01:48:9e:45:a4:af:23:
                    62:06:cf:53:5b:fd:cc:6b:cb:63:6e:65:6c:5c:64:
                    2e:6e:47:8b:59:65:25:50:22:3e:59:78:e5:e9:be:
                    87:7d:54:2d:74:5c:ef:e9:fb:7d:f7:8a:73:47:3f:
                    79:c7:44:ae:6f:97:8e:8e:1e:ad:0b:71:42:21:4b:
                    69:41:d2:45:99:53:69:61:8e:20:9a:46:3e:53:32:
                    0b:86:ec:ba:d0:50:ca:39:c8:ec:7b:4d:1c:31:12:
                    02:b7:e3:8f:0c:a1:86:6f:a5:ea:db:8c:84:5d:93:
                    69:74:e5:11:5b:f1:fb:28:b3:73:5b:a0:20:02:d0:
                    c9:a9:92:28:59:9a:3d:8b:b3:82:60:56:1b:6c:a0:
                    bc:0e:af:97:1a:75:89:bd:72:4f:52:b1:ac:04:b5:
                    e7:49:c6:25:f5:b5:e0:41:03:de:11:fd:16:e4:a8:
                    c7:f7:33:3c:df:8d:b4:33:59:30:4f:b6:f5:92:84:
                    59:c1:73:7d:0a:ab:8b:6c:56:d9:6c:38:24:b1:40:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:43:5E:41:79:30:9D:98:A0:A8:27:E4:BA:56:85:79:F2:4F:E1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl

            X509v3 Authority Key Identifier:
                keyid:F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c6:f9:ba:39:20:60:aa:70:4e:f7:02:bc:45:69:5e:09:74:
         de:58:61:ac:63:e4:9a:2f:b1:54:95:72:8a:5b:58:26:21:f7:
         c2:50:87:45:3c:86:bf:0e:1b:3e:f9:e3:76:5e:48:7b:cb:89:
         0a:b4:61:22:48:82:bc:cd:38:e9:9c:f2:0e:fd:27:3c:b8:aa:
         80:22:d1:14:2b:5c:c8:c0:6a:d6:1b:84:4a:94:73:c8:9e:ea:
         5b:9c:4f:51:c7:b3:1c:c7:0e:7a:ab:b8:56:3e:c6:77:a8:d7:
         98:d8:7d:2a:c5:b4:70:c5:1f:9f:10:d5:bc:74:ca:b7:ec:98:
         c5:e4:78:01:20:63:98:db:b5:d4:f2:3f:62:70:c9:9d:b9:48:
         02:b0:15:07:98:1e:92:3c:1f:5b:e3:55:62:3c:5b:ac:01:80:
         36:24:d7:33:be:8a:76:ab:4b:0d:ab:20:38:fb:fc:de:dc:97:
         74:af:fc:d4:e8:90:5e:8c:e5:bc:28:67:f2:ee:8a:20:8d:48:
         59:45:a0:a9:c0:86:2f:71:2a:b1:65:ad:40:94:b0:b0:f7:56:
         2e:37:1c:d4:7b:81:4d:c7:a9:33:c2:5b:3b:c2:fe:6f:9e:86:
         a5:ab:27:a9:1d:fa:19:b3:ea:72:86:56:ad:8e:bd:de:17:88:
         e9:47:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:10 2024 by rpki-client on console-fra.rpki-client.org