Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa
File:                     a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa (raw, json)
Hash identifier:          KlYqrSgAHleTemfqTtqA1PENmumzlhGdk7oX74AaENQ=
Subject key identifier:   DA:71:B6:74:62:02:AC:B2:0E:7A:73:8D:4F:7B:3B:79:F1:EC:BE:19
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F432858477EC10D808A8E2EBD8CE80900
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        198.187.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0d:80:8a:8e:2e:bd:8c:e8:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=1b31148f-c776-4b27-85e1-9b101d6fbb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:ff:46:b1:5d:cf:89:dc:9e:55:91:68:5a:
                    c3:62:36:a7:b2:e1:86:60:27:6b:2a:a9:6e:f9:f2:
                    12:0a:ed:80:73:a5:b6:73:a8:f1:a6:b5:af:d9:c2:
                    39:ba:6e:f4:92:cc:f9:49:6a:6d:d5:a1:45:ff:6a:
                    a0:e2:fa:7d:66:86:12:0f:1a:00:b4:84:64:77:b9:
                    8c:fc:2c:37:7d:93:b1:f9:89:91:3e:40:91:ac:ae:
                    82:a0:f5:8b:0c:e1:c8:6b:f1:bb:d5:0b:eb:5d:54:
                    1f:33:22:47:7f:71:b6:1b:2f:9a:e9:ad:4f:8d:4f:
                    84:84:ec:15:d0:68:e7:03:90:e6:67:d0:18:cf:ca:
                    83:2f:66:91:d3:69:aa:14:a9:4f:65:8e:f1:2c:a4:
                    7f:f8:03:22:53:52:99:80:29:97:cd:8f:17:7b:4d:
                    fa:62:2f:c7:12:bc:03:99:18:dd:41:f2:cf:d4:69:
                    8c:85:6c:f2:a9:4d:55:5b:d1:ce:5e:8e:c8:6d:0e:
                    c2:06:bc:57:62:d5:88:96:7e:4f:ba:07:c4:e3:65:
                    07:0a:36:2f:7a:9a:8c:a0:fc:54:28:11:99:85:bb:
                    64:c4:fd:04:cb:98:0d:7a:37:e7:cd:90:39:a4:9a:
                    a1:26:90:fa:d3:46:68:c3:7b:62:8e:35:79:e0:e8:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:71:B6:74:62:02:AC:B2:0E:7A:73:8D:4F:7B:3B:79:F1:EC:BE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/a0ca85b7-1a08-3076-b3ab-c1576d0fedeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:dd:2f:5d:28:bb:9f:a2:5f:7f:f5:e4:9e:8b:1f:28:b6:14:
         ff:a6:b9:e4:99:68:ba:9e:fe:18:a9:11:4a:c3:6f:3e:17:ad:
         31:94:a5:e1:72:0e:ac:45:00:5c:2b:07:6c:d4:a3:4b:fa:e5:
         80:3a:2d:a2:e2:0d:3c:f3:a6:89:b0:ec:04:ef:97:16:ac:86:
         da:23:41:de:12:1a:62:ff:d7:50:76:93:f3:53:11:14:61:f8:
         79:b1:33:e4:db:65:87:14:39:6f:4e:9d:da:45:ed:be:cb:eb:
         4f:1e:38:d2:03:30:55:ea:62:c3:dc:b8:72:3b:a2:ff:df:f2:
         c4:c6:47:1e:db:5c:16:15:d4:5c:b8:95:58:d1:9f:95:df:73:
         ef:6e:be:39:3b:20:35:e6:ed:e1:9c:2e:c1:5d:e5:f3:a3:cf:
         3a:a4:e4:d5:23:24:cc:51:7d:89:63:ba:4b:c9:f4:1d:5a:ef:
         37:48:35:b8:e3:47:11:2e:a7:a1:10:f5:3c:40:f4:ca:b9:af:
         e0:bf:99:a3:a0:37:21:29:2b:d7:67:56:0a:bf:7f:d5:8c:86:
         b1:da:f6:0e:d6:56:5d:f1:1e:65:49:f8:ed:4b:85:f3:68:b9:
         8d:f9:e7:60:5a:9b:8e:e3:79:fb:13:6e:3c:d8:47:26:63:18:
         16:c0:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:22 2024 by rpki-client on console-fra.rpki-client.org