Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa
File:                     071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa (raw, json)
Hash identifier:          bfCYr3qSty4CzoGNu2h4Z8DSjB8wNI9++fpztyQt2DQ=
Subject key identifier:   D5:44:97:FE:72:F8:2D:67:8F:FA:7A:8B:52:59:87:6C:0F:D8:86:80
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F43285846FE558CCF6699D6749700E700
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa
Signing time:             Sun 25 Aug 2024 13:00:40 +0000
ROA not before:           Sun 25 Aug 2024 13:00:40 +0000
ROA not after:            Sat 23 Nov 2024 14:00:40 +0000
asID:                     16509
IP address blocks:        166.98.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fe:55:8c:cf:66:99:d6:74:97:00:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Aug 25 13:00:40 2024 GMT
            Not After : Nov 23 14:00:40 2024 GMT
        Subject: CN=86a9f7b2-e1aa-4be3-a900-917765b2d6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:1b:71:21:d1:23:39:f5:ee:7b:d5:be:c9:
                    6a:61:ce:45:63:9e:8f:20:85:80:eb:ec:46:3b:90:
                    cb:c7:a4:b7:98:a8:8c:1e:ed:32:4b:14:c7:ff:7e:
                    ab:e5:46:94:1d:33:e2:db:7f:88:94:1c:d6:23:48:
                    3c:b4:cc:fd:da:f0:2d:a1:2b:39:86:1c:f2:08:84:
                    f1:0b:df:81:81:2f:82:7d:72:f0:ed:e7:fb:40:81:
                    02:b9:8f:30:7f:ce:c8:e0:80:59:5b:f7:9a:38:48:
                    66:8a:b6:02:6b:21:a2:32:90:07:37:bc:39:6c:86:
                    05:81:0e:91:83:56:1d:a5:72:c9:db:a8:4c:8d:b7:
                    5e:21:0f:48:15:e8:ed:1e:ef:5a:2c:e2:1e:55:67:
                    76:cb:f2:cd:68:47:01:2b:71:81:d4:55:6a:8e:90:
                    05:0e:ca:24:a5:ce:27:05:21:7d:f2:c7:86:ef:a7:
                    1b:5a:53:19:42:7f:ee:05:71:21:8a:1c:13:66:00:
                    7f:87:76:ea:04:64:46:37:07:0c:b2:b2:2a:28:4c:
                    2d:8f:ee:83:b2:e2:23:7f:4f:dd:02:53:23:78:78:
                    38:b3:d6:ed:4c:56:ff:1f:d6:dd:89:c5:99:f1:e1:
                    01:7f:20:fb:66:b6:24:dc:9e:30:59:bc:0b:79:f3:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:44:97:FE:72:F8:2D:67:8F:FA:7A:8B:52:59:87:6C:0F:D8:86:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/071bff91-fd22-33f2-8b9c-d1bd4b9ff371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:83:57:79:07:7f:86:fb:90:20:6b:d8:04:08:bc:5c:9f:
         88:b6:36:f4:55:59:ec:e4:14:af:4e:04:4d:7e:37:6d:91:f8:
         a0:b6:21:98:ba:95:b1:4a:65:1b:a9:aa:c9:f9:c3:b1:de:1b:
         35:65:56:f0:89:23:a2:74:c7:e8:94:b5:ef:6f:fa:27:e5:ce:
         ba:5f:fb:05:ee:77:84:12:dd:6f:dc:b6:5f:71:ea:3f:99:91:
         68:0f:24:28:63:63:bf:4c:d4:f4:ab:e5:b1:83:79:a8:b3:75:
         17:7c:7d:6e:e2:c2:42:13:44:cc:55:5e:e3:31:1b:d4:62:06:
         e2:81:65:36:e5:e0:37:3b:e1:cd:12:ab:55:e5:fd:0a:c8:c2:
         ef:58:cf:86:b7:2a:bd:83:70:b8:80:42:b3:8c:0e:a5:85:dc:
         12:76:d8:90:a7:7b:85:c9:3a:80:98:9b:29:17:ec:fe:1f:96:
         0c:65:86:82:82:06:f6:7b:58:55:fb:ea:a0:40:b3:e0:c5:55:
         65:2f:a7:5b:6d:d9:d8:b5:e7:70:ee:17:7f:12:b8:91:79:1b:
         8d:a8:db:c3:95:ee:40:f7:dc:35:45:88:44:67:d5:81:3c:31:
         a0:32:e8:d3:78:b5:96:54:7f:28:8d:19:0b:0b:62:a4:b8:bd:
         e8:b7:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:15:13 2024 by rpki-client on console-fra.rpki-client.org