Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa
File:                     90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa (raw, json)
Hash identifier:          O5JTzaeuAI6BhnWltK+9C23BEWWnwmeyunoVyv/nyJg=
Subject key identifier:   BD:F4:6A:D0:D0:FA:F4:73:DE:3D:12:88:A0:CD:D8:0D:CC:4D:CD:78
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F432858473095EF60ED21A396E9C75540
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        198.176.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ef:60:ed:21:a3:96:e9:c7:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=889d655c-4061-4fc0-9325-0a69f526f282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:bc:de:a8:78:ac:4c:aa:87:22:ea:ea:59:
                    32:8b:8b:d2:dd:53:58:93:c2:32:0a:33:de:0b:6b:
                    18:35:25:3b:ed:cc:35:be:0b:90:59:bf:f1:ba:13:
                    16:32:3c:87:c4:f5:ca:ca:dd:a4:b2:7b:05:4a:93:
                    39:99:ce:73:02:63:b4:19:bc:07:31:ce:c1:b2:a6:
                    2b:99:cd:08:3b:c3:38:d5:a0:7b:e6:bb:9e:81:af:
                    58:e2:4f:18:4b:0e:92:b2:b3:f9:5a:d2:9a:b3:45:
                    e2:05:10:f2:bc:df:c6:31:f8:c0:9c:4f:81:49:11:
                    dc:cd:65:82:09:9a:85:3e:86:ef:68:3e:5f:14:79:
                    b1:a3:04:c8:6d:7d:78:ff:0b:bc:b2:a1:35:e5:24:
                    7e:ee:93:c6:d1:a6:ae:b5:39:ed:b3:bf:3f:be:67:
                    c7:cf:4a:76:44:85:f4:3a:57:49:7f:54:9f:f2:42:
                    11:cb:9b:9c:76:d8:01:60:f9:f4:b7:d4:1d:4b:01:
                    94:84:c6:16:64:44:3b:3b:b3:58:fe:09:b8:51:8a:
                    7a:36:fc:9a:19:08:0c:a0:d7:8d:ca:bc:bf:6e:9a:
                    e9:1d:2f:81:05:b7:a3:de:50:00:7d:23:23:83:38:
                    f4:ca:d1:95:bd:38:41:f3:ec:0b:5d:b7:e6:7c:9c:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F4:6A:D0:D0:FA:F4:73:DE:3D:12:88:A0:CD:D8:0D:CC:4D:CD:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:38:43:84:1a:b4:85:bf:18:44:5a:e7:39:f8:cb:ec:b3:
         c4:98:e5:aa:cf:a6:54:e7:9f:41:38:98:c9:f7:e2:34:75:64:
         24:93:1d:b1:62:df:a3:0f:1d:48:f4:a8:39:3d:70:99:0f:f3:
         fe:77:cc:16:22:38:18:eb:63:33:e5:c0:81:73:48:e1:af:af:
         42:b7:b2:89:db:22:50:3c:93:62:02:03:74:ca:dc:26:43:34:
         8e:98:1e:c7:f3:ab:93:a8:7e:85:a1:52:2c:80:7e:e2:1b:35:
         c6:ea:ef:ed:f0:98:84:d8:e0:db:d7:66:30:8a:99:e9:ce:d3:
         8a:73:76:e2:63:48:c2:d0:cc:f4:77:11:d2:39:b0:a2:d6:d8:
         e4:50:ae:cd:d2:67:e1:89:13:b5:b1:32:46:79:86:0e:5c:5e:
         97:36:07:c5:14:e5:ea:09:04:ce:b9:c6:e2:e8:d7:6a:59:6c:
         f4:4a:40:27:ba:7f:84:8b:3c:65:7d:8e:c2:6c:26:ae:16:36:
         c9:11:0b:86:69:be:d5:bb:7f:73:7b:b9:26:a6:1b:69:5b:e5:
         6a:51:6c:16:39:d4:fe:8e:77:8a:4b:ba:5f:5b:12:44:9b:0a:
         9d:f7:46:fa:19:db:b7:46:73:74:cb:6b:06:2a:54:81:35:14:
         be:50:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org