Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/f533168f-2bea-3c72-9cab-b9f24e61f615.roa
File:                     f533168f-2bea-3c72-9cab-b9f24e61f615.roa (raw, json)
Hash identifier:          Ugjcnyw3qx7FzULY+b3QXm77dCP5YLUflXrnOj6s4Gc=
Subject key identifier:   90:0D:74:CD:1A:D9:E1:D3:45:C7:08:21:C1:F7:BD:2E:AC:28:AC:45
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F432858473095EF4AB37371AC38B86680
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/f533168f-2bea-3c72-9cab-b9f24e61f615.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        198.176.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ef:4a:b3:73:71:ac:38:b8:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=d5764e2f-aafb-4321-b1a9-a9dcd571396b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:37:d1:59:5e:ba:2d:26:0c:d8:24:ff:96:
                    0b:f9:3b:e4:63:37:33:b2:5e:77:29:b0:ea:c3:83:
                    8f:95:97:77:7f:fe:2d:cb:33:ce:26:96:07:da:78:
                    98:d7:0a:46:1f:d7:29:bd:8e:f8:e2:c4:a5:d4:92:
                    c4:3d:cf:31:98:0e:be:28:94:4f:03:e2:35:c3:42:
                    d3:95:78:93:12:21:8f:e6:c5:48:80:42:2e:43:41:
                    08:db:19:56:47:75:5c:44:e0:c6:b9:9a:7e:45:b6:
                    6e:91:e9:df:41:5b:cd:6f:3b:6c:d3:26:9b:31:34:
                    83:13:3c:1f:95:5b:06:5d:2d:8e:fe:d4:4f:57:38:
                    ec:4f:80:e7:e4:58:6c:2a:09:58:43:5f:a7:ba:38:
                    33:d6:85:0a:43:6c:39:e7:8d:d4:37:37:86:25:7a:
                    3b:a7:2b:f6:d0:d3:5d:cb:21:ac:83:11:6f:ba:ca:
                    61:33:a1:72:6d:6e:fc:d3:42:03:80:fa:d7:32:46:
                    fb:20:4d:fa:63:87:b2:8a:d2:b7:ee:de:73:41:cd:
                    31:10:2b:88:7d:05:8b:9c:f4:42:8a:9b:90:63:a3:
                    2c:43:83:e1:cf:8c:37:78:de:62:2c:50:ef:8d:78:
                    07:54:a1:ff:9a:4a:29:58:40:26:37:4e:3e:92:e7:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:74:CD:1A:D9:E1:D3:45:C7:08:21:C1:F7:BD:2E:AC:28:AC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/f533168f-2bea-3c72-9cab-b9f24e61f615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:36:04:1e:e3:17:f9:98:32:7b:33:74:f4:77:92:46:50:0b:
         db:c1:8e:ce:34:c8:0d:20:f9:21:4e:b7:d3:ac:a4:31:67:a0:
         cf:b1:f1:ee:12:51:14:29:fc:c0:31:57:e5:e3:37:38:bf:d0:
         a0:72:ee:69:19:48:70:f1:3a:f0:5b:1f:cf:89:9a:33:c8:bc:
         05:4e:de:f3:6b:14:1d:f9:56:6b:11:9e:23:64:45:4f:74:43:
         90:da:ed:86:94:41:8f:91:fd:0d:c0:62:40:6e:47:55:7d:7c:
         4b:8e:ad:95:7d:b1:9e:53:0d:30:50:d5:ee:9f:78:dc:8b:44:
         61:65:73:53:7f:6f:9f:f1:4c:a5:a8:3d:50:48:3d:d6:04:55:
         30:52:83:f0:d9:63:64:79:70:40:bd:fe:be:ae:5d:74:d1:22:
         eb:1b:98:c5:53:bf:17:07:80:43:e4:a3:2b:97:7d:1f:f7:26:
         40:56:7e:2d:23:a7:f2:0b:aa:d9:b9:63:ec:4e:d5:89:c8:5c:
         de:c4:bd:56:7c:e8:dd:9b:69:63:5b:98:f7:d7:9d:a0:3b:b8:
         d4:1e:bf:c1:94:a7:db:d6:f2:ac:b2:05:ea:4e:3a:6a:c9:6c:
         f1:18:0c:87:6c:f3:e0:ce:e8:7f:16:d9:2e:0a:b9:e0:06:6d:
         dd:6c:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org