Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa
File:                     60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa (raw, json)
Hash identifier:          3pbhqkKgRnmSQMLXxVu/yxvViereLMLJH+Agvq+lRZU=
Subject key identifier:   58:1E:06:2E:8E:BC:66:33:3E:63:32:7E:87:96:D0:2B:54:D7:8E:64
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F43285847B1015FE0182CDB09788E5600
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        198.176.122.0/24 maxlen: 24
                          198.176.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5f:e0:18:2c:db:09:78:8e:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=fc889466-13b1-4eb4-b017-bb0699aac696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:08:c7:14:24:ea:71:50:0e:e3:58:c7:50:
                    ba:ff:27:61:dd:eb:de:05:1a:c6:7c:82:4e:51:35:
                    cf:0d:4b:92:1e:11:8a:eb:28:d4:40:f9:03:1f:d4:
                    3c:13:a9:8d:60:11:38:b5:79:d8:eb:ca:1a:b2:d6:
                    91:5a:0d:7f:03:f6:58:40:b4:51:a1:72:ce:c0:26:
                    ec:87:85:dc:f2:a4:12:8c:88:8b:8a:a1:52:82:23:
                    e8:9e:b4:cd:44:96:47:08:16:05:d8:eb:b9:14:49:
                    93:df:df:98:5b:a2:bf:9a:ec:d6:99:15:09:ee:10:
                    b5:c6:ba:09:50:f7:83:36:da:8b:53:88:35:61:b9:
                    91:57:42:2f:13:5b:c6:19:c6:66:2a:e7:54:72:7e:
                    49:b4:e3:aa:ca:fc:53:45:cf:2e:63:fe:a8:83:e4:
                    e4:47:50:39:3c:c7:47:9c:9a:fb:c8:82:58:49:4c:
                    9c:74:a4:7f:50:3e:09:7f:10:04:13:1f:7d:fa:cc:
                    80:d1:43:35:da:90:b3:c2:cc:71:9c:da:a1:33:4b:
                    e0:dd:2a:98:7a:aa:e7:e2:86:a9:0b:ef:02:dd:17:
                    7c:f0:80:22:4c:ab:f3:9c:c6:00:08:19:5b:c0:d2:
                    51:ec:e4:27:62:8c:94:12:3e:41:3b:77:7a:35:d8:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1E:06:2E:8E:BC:66:33:3E:63:32:7E:87:96:D0:2B:54:D7:8E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:22:45:e4:1e:03:5c:1e:2a:79:ba:91:c5:3d:74:f9:ac:9b:
         a1:8b:02:5f:8d:fc:6b:b1:26:70:96:3b:b1:d2:29:5d:b1:5b:
         95:4c:1d:79:59:6b:60:59:6a:18:02:73:10:3e:72:8e:16:e5:
         13:a1:9d:f4:57:da:14:ca:0e:ad:34:51:27:6c:be:69:4a:4e:
         f2:7f:6b:ed:8a:6c:b4:e5:2b:17:7a:ba:3a:ea:e8:6e:30:4f:
         f3:8f:66:2d:14:98:55:9a:30:ec:be:0b:c3:7d:92:c8:b1:a8:
         42:46:38:cb:40:54:fe:9f:02:a5:c1:12:5c:31:c1:ba:3a:9e:
         0f:30:b1:4c:2c:67:7b:c6:c9:d9:a1:c8:0d:bc:f7:0c:85:5b:
         9d:fa:31:24:1d:a9:d1:2c:70:2d:b0:a3:18:9a:77:9b:97:ab:
         32:fe:e0:13:0e:e5:3d:0b:26:47:ce:c6:d3:b5:fd:54:09:fb:
         d0:d9:04:bd:47:e0:2e:74:7e:43:92:7c:1a:e9:a9:90:f8:78:
         13:dd:ad:18:68:ab:05:7b:ec:74:ce:99:b7:3b:6c:8f:5c:ed:
         a1:15:e2:c6:18:69:c7:b8:87:4a:7e:cd:e8:7c:4b:b2:a5:06:
         39:78:46:75:40:9c:21:ff:96:2c:fc:46:45:bc:81:e3:77:ae:
         b3:e9:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:38 2024 by rpki-client on console-fra.rpki-client.org