Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa
File:                     793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa (raw, json)
Hash identifier:          U78xmdjiCV3pOh1sIdLyRrstRDQg/RQ5Fsa6JZnOkws=
Subject key identifier:   87:A0:9B:B1:54:C4:98:A9:8E:AB:A6:2C:8D:81:92:4D:FB:1B:3A:D4
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F43285845174ADC07C69D0358AD2F2FC0
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        198.176.124.0/24 maxlen: 24
                          198.176.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:dc:07:c6:9d:03:58:ad:2f:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=3c4689af-8910-421e-9de2-2c467e031054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:7b:62:91:54:34:7a:e1:7a:62:8a:02:48:
                    4f:63:47:bc:9f:03:8b:b7:b8:d0:88:21:2c:10:ea:
                    76:cb:7c:c0:a5:3b:9a:42:95:4d:e7:10:77:55:0a:
                    eb:08:a8:5c:69:27:91:c9:b9:b4:94:44:5d:a8:ae:
                    97:6b:62:31:9b:d3:b6:b0:f0:f2:ba:69:23:55:5c:
                    76:20:72:0b:b9:c3:33:b2:40:ae:fd:62:ba:76:c4:
                    c3:7a:c4:2f:ea:01:6c:da:50:c8:36:d0:70:46:00:
                    28:7a:0a:6d:3c:bd:21:a5:77:3b:74:bf:d1:16:a5:
                    79:c0:43:ff:8a:a5:09:42:f4:9f:f3:8e:83:b7:ac:
                    31:93:37:34:32:e0:45:51:9e:fa:7f:28:7f:27:63:
                    a7:09:19:bb:21:e8:41:2c:c4:71:fc:c4:3b:05:5f:
                    bc:9d:71:16:fc:d7:d5:c7:4c:ca:a2:21:68:54:2c:
                    d1:c0:1a:2f:d4:05:ac:e5:e4:8e:f6:6b:78:6b:91:
                    19:8a:3e:bf:a4:ee:83:6d:35:41:ee:39:0c:77:55:
                    7f:5e:9c:7f:cb:ee:9d:e2:45:2e:98:4a:78:2e:44:
                    68:d4:e8:2c:e1:99:e1:61:73:9b:81:28:66:c3:5d:
                    b1:d9:ed:b1:3b:ca:08:b1:3b:8d:79:d5:31:cc:24:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A0:9B:B1:54:C4:98:A9:8E:AB:A6:2C:8D:81:92:4D:FB:1B:3A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/793e6ca5-3c8c-36c0-ad5e-4431c63c212f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:6b:55:bd:c7:cf:8d:56:fe:35:fe:90:d2:81:5d:65:24:
         e2:3f:ce:02:e8:03:e0:f6:54:99:f0:16:e1:79:02:9c:25:d4:
         6e:a7:3e:e0:5f:42:69:97:68:1f:bf:6b:63:66:4c:d9:bc:70:
         ae:84:9f:83:1b:33:be:93:9c:d8:32:dd:6e:ef:59:6b:ac:2e:
         77:90:50:07:47:a9:08:9c:ff:57:c5:0d:6f:a8:6f:e5:0b:b0:
         ef:23:64:d9:8d:92:94:72:8c:df:16:eb:15:af:e6:48:d8:1c:
         d7:a1:eb:2b:c6:b8:ff:7a:d5:8e:ad:02:c2:45:47:cc:9b:38:
         b2:94:41:11:ef:70:74:31:4f:d6:b2:8d:ed:77:b9:7d:d1:8d:
         ae:a9:8e:ba:11:5c:80:32:d3:4b:60:c2:4c:de:0a:26:ac:7a:
         7c:26:24:64:b2:ec:37:b4:18:1c:1b:ec:6a:62:f7:d3:82:ee:
         3f:e5:78:f5:27:3b:83:2f:af:65:c4:6e:77:ff:c4:ed:31:9b:
         00:5b:e9:6f:7e:0c:d0:01:7f:da:ab:4d:de:b7:8f:ed:cb:48:
         15:f0:13:76:15:78:c8:35:30:e1:b2:82:db:08:d2:fd:c8:ed:
         1f:ea:db:15:e5:f8:73:29:85:b2:4c:d5:e0:d0:f1:14:c7:11:
         0a:f3:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:01 2024 by rpki-client on console-ams.rpki-client.org