Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa
File:                     2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (raw, json)
Hash identifier:          byMNeQUet3JZDSqbpdX3G7PRUnjs17E3NQqiJxof3D8=
Subject key identifier:   B9:88:3E:8F:F4:02:2B:32:17:C6:5A:3E:F7:83:52:FF:90:7C:C1:A4
Certificate issuer:       /CN=e35c7007-7a33-480f-a32e-40481f8f1792
Certificate serial:       010D0C9F4328584769D0CE191ABAA360DBCA8A00
Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     53636
IP address blocks:        199.47.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:ce:19:1a:ba:a3:60:db:ca:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=698b2c15-db70-41b5-8314-b8b17877cc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:d1:9d:f7:9f:3e:48:c3:d2:13:f0:0c:f2:
                    18:a9:c4:70:e0:ec:82:4c:02:2d:ea:37:87:6b:26:
                    6a:71:c4:ac:8f:5e:c2:a6:16:64:af:27:d1:ed:47:
                    ca:fe:8b:b9:55:44:71:6f:70:eb:23:6b:e7:64:01:
                    b5:14:6b:9c:c9:d8:2d:a4:41:8f:87:7d:d6:fc:51:
                    b9:20:1d:98:26:0b:98:50:82:51:73:57:50:19:e4:
                    3e:c3:57:5b:98:9c:19:90:ce:83:23:32:96:b0:ff:
                    13:10:b2:f5:72:4f:a9:02:42:ee:51:cd:0d:76:e2:
                    70:d8:40:2a:f7:28:32:e5:45:b0:f5:8e:cd:06:b7:
                    25:56:f2:2f:7e:ee:4f:54:88:50:4b:76:91:42:00:
                    a0:41:7d:86:8a:b3:fb:98:07:58:59:b5:90:dd:f1:
                    de:23:eb:e3:06:81:9c:9f:31:ab:c1:9d:68:1c:30:
                    f2:3b:45:77:f0:57:c8:0a:0f:c0:80:60:27:db:13:
                    56:68:04:53:74:c9:d1:e9:26:63:8a:9a:7c:45:6e:
                    d8:e9:ca:07:95:5b:cf:f9:5b:05:7e:cc:11:e9:60:
                    72:9e:f8:3d:f7:e1:d3:d5:03:92:dd:88:7b:3d:df:
                    52:51:36:37:aa:33:5c:59:2e:e5:0d:e1:21:22:fe:
                    cb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:3E:8F:F4:02:2B:32:17:C6:5A:3E:F7:83:52:FF:90:7C:C1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl

            X509v3 Authority Key Identifier:
                keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:aa:22:be:19:f7:bc:7f:55:a9:f7:cb:dd:cf:bc:9c:db:
         18:37:36:29:d4:79:2c:1c:b4:a2:8f:9d:d7:fb:fa:27:02:89:
         b5:d5:13:29:70:aa:b2:e1:25:d7:4d:d7:4c:74:2a:2f:91:34:
         9e:ba:b1:b7:3a:f5:20:25:fe:ed:55:99:5a:cf:7c:29:65:2e:
         6f:3a:09:6a:96:6f:65:bf:45:26:c5:47:80:b9:f0:3f:01:21:
         47:4e:5a:5e:66:56:e5:db:4a:46:19:e3:66:33:5a:7d:28:27:
         9b:f4:49:3a:e5:6c:f8:8d:8f:62:97:a5:92:bc:4b:71:c1:d7:
         d7:15:3a:bc:99:18:eb:95:22:61:9a:1d:90:11:0f:cc:b8:7f:
         68:84:2f:bb:72:10:0a:99:20:1e:d3:ca:77:92:a8:95:8a:bb:
         ef:ba:82:1a:96:8c:82:b2:be:3b:11:aa:03:17:92:96:2a:81:
         51:de:9c:cb:af:42:40:dc:ee:d6:79:ec:3f:f8:89:46:7f:5e:
         a5:d6:e9:05:ca:fb:17:6c:f3:bc:b2:28:54:75:eb:42:3d:3b:
         32:88:50:32:ae:4b:b2:21:c3:fb:5f:4f:06:1f:a2:f5:f9:08:
         e7:b7:7a:b4:eb:2c:0c:af:58:c8:21:98:ef:98:cb:f4:30:78:
         1c:34:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:51 2024 by rpki-client on console-fra.rpki-client.org