Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa
File:                     a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa (raw, json)
Hash identifier:          vQE7eBLRcQVgFpW1hTDwuexqN7Jzf5Kye8PtAPz+oy0=
Subject key identifier:   B9:BC:4A:51:39:F1:AE:3A:79:6B:9D:6E:A0:62:72:65:E6:BB:A2:ED
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F43285844DF752B399B20F67277D8C180
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa
Signing time:             Tue 13 Feb 2024 02:00:25 +0000
ROA not before:           Tue 13 Feb 2024 02:00:25 +0000
ROA not after:            Mon 13 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        198.187.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:75:2b:39:9b:20:f6:72:77:d8:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Feb 13 02:00:25 2024 GMT
            Not After : May 13 01:00:25 2024 GMT
        Subject: CN=bc3205f7-37ab-4251-b369-66d2951e7c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:21:60:95:2c:2b:6a:4e:3d:75:d8:9f:ee:
                    43:bd:59:5b:95:ed:73:e8:04:61:b2:5a:54:a0:93:
                    e0:da:66:68:27:c4:a2:aa:4a:73:bd:c1:2c:9d:a7:
                    7c:01:dd:18:7d:72:93:17:58:8c:61:ad:28:5a:29:
                    df:7c:1c:d1:58:8a:f6:c5:46:6d:2d:5c:56:f5:bf:
                    9b:3d:4d:59:80:21:d4:13:1d:f1:63:0a:c7:19:8b:
                    08:05:bf:af:d3:d0:0e:9c:39:c3:24:cc:8e:6a:7e:
                    57:4b:56:37:c8:cc:ea:8e:46:89:32:54:c6:54:63:
                    a7:98:51:4b:8b:f5:f5:c4:21:fb:d4:f4:d8:84:04:
                    26:d8:f1:72:22:cc:5d:a5:f6:06:33:d8:8c:fa:61:
                    09:4c:e5:0b:91:7a:8f:a9:cb:e2:ad:04:17:51:b6:
                    7e:d2:a0:09:61:46:d9:e4:56:6e:54:13:65:01:62:
                    55:88:39:ac:41:e0:70:59:41:26:1f:12:91:39:57:
                    0b:22:90:ee:32:4d:25:5e:15:a3:f1:d1:b8:7f:8d:
                    3c:35:1e:9e:3d:a4:24:e0:ea:b1:6f:5d:8e:cd:7d:
                    d3:22:fd:10:ce:6c:68:da:e8:51:e5:5e:5e:b3:d1:
                    9b:c0:50:a3:6d:65:d1:8a:18:50:5c:55:e3:b3:4f:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BC:4A:51:39:F1:AE:3A:79:6B:9D:6E:A0:62:72:65:E6:BB:A2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e5:b0:58:43:46:1a:fc:dc:1a:4a:9b:ed:c3:17:21:a8:cb:
         d3:f0:aa:c2:61:aa:5c:25:2d:eb:3a:86:4d:b4:d5:b4:32:98:
         c5:9c:3a:9c:f0:85:13:f7:2f:b1:77:b8:a4:af:6b:89:0b:73:
         98:13:a6:d9:b5:b0:3b:6a:a4:31:88:23:a9:a2:d2:f3:d1:77:
         87:e9:01:e4:f5:5e:df:06:ae:27:f6:fc:eb:02:cb:f1:a4:b2:
         c1:08:77:f8:c7:b6:67:7b:de:a4:46:f2:f6:ae:a5:cc:c8:fd:
         a3:a5:58:a8:c9:67:c9:7b:5c:47:ef:e0:38:ed:2c:f2:80:4d:
         64:fb:7d:c4:a8:70:c2:b4:0c:55:e7:6b:f8:e6:9e:b1:c6:a5:
         a1:3d:2a:6b:57:5f:6f:35:6d:07:e1:90:9c:25:e7:9f:55:46:
         4a:0c:5e:68:13:6c:ae:cd:fd:c5:b6:50:23:11:e2:ca:16:03:
         11:5c:01:4c:c1:2d:b9:54:d8:22:cf:01:de:12:b5:58:1f:02:
         8e:8a:ae:c3:44:88:6b:6d:d6:43:4a:48:b4:0e:52:3f:df:13:
         ae:c8:fb:95:35:2e:d4:28:10:5c:db:32:b2:aa:3e:60:29:39:
         5c:c6:46:9c:b0:a5:fe:16:09:07:27:6f:90:3d:b5:15:26:4c:
         e3:1f:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:08 2024 by rpki-client on console-fra.rpki-client.org