Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa
File:                     0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa (raw, json)
Hash identifier:          sC/aI7UKpIvlj7PZYoKvVhiPgUDR/Xkfs8prqCe3p+Q=
Subject key identifier:   6D:AA:92:A5:EC:7F:BC:7B:25:61:84:D9:59:CC:AB:52:77:CC:60:C1
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F43285847B1015A4F6CE53D1F46AC5B00
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        198.176.122.0/24 maxlen: 24
                          198.176.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5a:4f:6c:e5:3d:1f:46:ac:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=8297b434-86f3-423a-b2e7-002bffd6c1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:ca:66:76:79:40:6c:45:66:30:0f:80:a3:
                    aa:b5:53:b8:4e:a7:ce:66:a3:4a:46:2a:2f:62:f2:
                    19:90:47:87:49:f4:15:7f:f1:4e:6d:f5:de:98:97:
                    10:31:66:9b:c6:7c:59:e9:03:40:da:df:8a:dc:f4:
                    cf:a1:2d:6c:35:5f:8f:11:50:bf:cd:6d:e3:44:f8:
                    f3:ff:09:7c:f3:cf:4a:59:11:60:52:14:8d:53:4a:
                    33:cc:92:61:97:20:f8:8e:7d:bb:43:51:ac:51:7a:
                    31:fb:f3:45:e0:95:ed:39:cc:6b:7a:cf:3e:fd:e3:
                    62:56:a6:5a:d8:56:45:f1:6c:51:2a:b2:4e:92:86:
                    04:cd:f4:bb:12:36:92:d8:7b:a9:6e:14:a0:8a:f1:
                    6b:bd:dc:fd:46:a7:50:91:cb:95:c5:32:fd:54:35:
                    f8:0f:2c:a7:30:b1:85:e6:3c:07:20:d2:38:5e:af:
                    0b:32:23:f1:e2:40:aa:0f:4e:f1:b7:3d:7a:25:2d:
                    a0:9e:f8:38:4f:29:7b:79:c5:b4:5b:5a:21:b1:b3:
                    1d:e5:9f:e8:76:6b:e9:4e:6d:bc:11:55:d5:91:9b:
                    04:d0:1c:bd:03:6d:fd:04:ec:04:3b:31:1f:2a:85:
                    17:c7:1c:4b:9d:e1:cd:09:3a:a3:45:b0:83:85:3a:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AA:92:A5:EC:7F:BC:7B:25:61:84:D9:59:CC:AB:52:77:CC:60:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:54:49:8f:da:44:f0:47:2f:76:99:9a:14:80:fb:dc:6b:
         ac:48:6d:77:7c:5c:2a:ab:e1:9c:2d:52:b6:d0:b6:93:d8:54:
         a7:c4:99:41:08:fd:d3:5b:cd:d0:fd:86:82:80:12:2d:e6:aa:
         c0:66:6d:ea:cc:7b:4f:72:7c:ac:d1:64:e5:6e:d7:57:07:c5:
         2c:c9:f1:34:ed:e4:76:bf:ef:23:d8:d6:d9:ed:f6:b7:af:8f:
         7b:c9:28:4f:fd:08:4c:58:ad:dc:73:72:33:a4:45:27:2f:10:
         1b:86:f9:09:f2:3e:3d:69:99:b0:f9:59:20:91:c5:88:46:7c:
         21:33:d7:30:b8:ea:95:aa:fa:a1:b3:89:52:f0:74:f4:3f:35:
         4a:0c:34:c8:33:07:51:12:11:53:0c:36:51:7f:42:fe:cd:f5:
         cd:31:be:94:8c:72:5e:1d:7d:40:43:92:88:29:48:38:3d:c6:
         97:d4:23:d9:4f:8d:c2:26:78:13:33:5c:99:a2:54:80:fe:0d:
         b1:fb:2b:35:1f:e1:5e:eb:3f:8a:2c:99:9b:57:46:6e:a3:d4:
         82:da:26:26:37:40:65:8a:21:cc:33:ee:71:00:64:6c:e4:56:
         be:65:7f:97:69:d8:36:68:c7:8d:83:a7:c7:5b:76:ba:fb:dc:
         f0:62:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org