Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/c5898928-2040-3853-87b6-d6592b813b94.roa
File:                     c5898928-2040-3853-87b6-d6592b813b94.roa (raw, json)
Hash identifier:          g1gVj5KqEndl8pRUvezp00vCT5TdRfzJomkMVzdhqYM=
Subject key identifier:   89:9F:6C:C1:02:09:43:76:BF:83:85:D8:2E:07:48:57:92:19:74:66
Certificate issuer:       /CN=e42a3de7-584f-4010-acae-b7935ed3f602
Certificate serial:       010D0C9F4328584784566E097EDFFD29D18150C0
Authority key identifier: D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/c5898928-2040-3853-87b6-d6592b813b94.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     0
IP address blocks:        198.179.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:6e:09:7e:df:fd:29:d1:81:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e42a3de7-584f-4010-acae-b7935ed3f602
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=d37ecd05-2dbe-433c-a54d-7dc6debdd47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:7f:60:15:c6:97:76:91:5d:ed:ac:59:af:
                    0a:1e:b1:da:b5:b6:85:1d:18:a1:32:4c:47:85:f8:
                    a7:50:da:da:05:f8:42:96:8c:1a:38:44:8c:f8:a7:
                    bc:ab:26:ca:59:44:a9:cb:75:dd:a5:83:db:85:f2:
                    7a:c0:2e:ae:69:9a:d6:0b:17:ef:9a:90:c6:6d:16:
                    b9:90:b5:4e:48:71:22:d3:9a:73:ca:e2:e8:10:da:
                    64:01:f5:aa:79:a0:59:89:7b:29:6a:b8:5a:ca:d7:
                    f6:53:bc:d0:04:59:a8:18:a4:a7:fa:73:6e:c0:0d:
                    63:a5:d0:d2:6c:b8:2f:db:27:5b:ee:9a:06:3a:d9:
                    46:6e:51:c4:a6:c4:5a:9b:32:1d:06:97:88:38:15:
                    66:3a:f0:22:51:3b:10:df:3e:66:9b:72:ea:ec:f0:
                    a2:1b:03:df:8e:6f:1b:b1:31:31:7a:12:d8:75:2d:
                    46:35:06:94:c5:e0:31:77:75:39:69:fd:d0:e6:dc:
                    e2:11:25:30:5c:3d:9c:94:39:4d:8a:92:a9:92:78:
                    0d:d1:49:95:ff:c6:e9:c2:98:42:35:b1:30:fc:f8:
                    53:7e:96:7a:24:b5:89:70:58:eb:73:d9:d3:11:24:
                    68:72:21:c6:1b:3c:bd:57:dc:37:ec:de:f4:78:5e:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9F:6C:C1:02:09:43:76:BF:83:85:D8:2E:07:48:57:92:19:74:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/c5898928-2040-3853-87b6-d6592b813b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:83:7a:f6:d1:2d:f1:00:de:33:07:9b:27:59:f3:4d:dc:
         bf:a6:12:23:51:6e:43:f0:d2:17:e2:3e:47:ec:57:1d:d6:16:
         4f:29:c0:16:c1:34:ef:bb:1f:3e:78:3c:e7:b7:87:de:d0:41:
         10:1a:9d:53:11:e6:89:c5:9c:f6:d5:50:35:9f:ff:ab:87:92:
         a5:8b:7d:c2:8e:fb:44:fa:48:b6:52:3b:00:dd:be:a1:88:9c:
         fb:dd:96:88:c2:eb:66:f7:78:05:70:e7:8b:9a:46:65:c2:b5:
         20:95:b2:af:74:0d:1d:7b:42:16:40:a4:ff:4e:31:25:ff:1a:
         d5:b7:29:78:69:38:ca:7c:28:5e:42:c6:18:be:13:1c:8a:4f:
         b1:7d:af:10:0e:b6:da:83:55:0c:41:e6:2d:27:7f:97:40:ab:
         52:4a:fe:09:74:e4:8e:fe:7c:f8:6d:3f:48:7b:91:2c:b6:3d:
         17:a7:86:51:a5:52:03:2d:52:dc:7b:44:ce:46:6d:3c:4a:2b:
         a0:66:f3:50:e7:7b:9c:3e:18:e3:bb:05:22:3b:e2:83:37:4d:
         7c:7a:b5:64:b1:15:4e:51:5a:6d:9d:89:df:7e:64:fe:ef:2f:
         32:bf:60:9a:8c:ec:70:9a:1b:53:83:c1:ba:59:f7:ea:8f:ca:
         88:93:c0:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVm4Jft/9KdGBUMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQyYTNkZTctNTg0Zi00MDEwLWFjYWUtYjc5MzVlZDNm
NjAyMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk
ZDM3ZWNkMDUtMmRiZS00MzNjLWE1NGQtN2RjNmRlYmRkNDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9/YBXGl3aRXe2sWa8KHrHatbaFHRihMkxH
hfinUNraBfhClowaOESM+Ke8qybKWUSpy3XdpYPbhfJ6wC6uaZrWCxfvmpDGbRa5
kLVOSHEi05pzyuLoENpkAfWqeaBZiXsparhaytf2U7zQBFmoGKSn+nNuwA1jpdDS
bLgv2ydb7poGOtlGblHEpsRamzIdBpeIOBVmOvAiUTsQ3z5mm3Lq7PCiGwPfjm8b
sTExehLYdS1GNQaUxeAxd3U5af3Q5tziESUwXD2clDlNipKpkngN0UmV/8bpwphC
NbEw/PhTfpZ6JLWJcFjrc9nTESRociHGGzy9V9w37N70eF7y0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImfbMECCUN2v4OF2C4HSFeSGXRmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNDJh
M2RlNy01ODRmLTQwMTAtYWNhZS1iNzkzNWVkM2Y2MDIvYzU4OTg5MjgtMjA0MC0z
ODUzLTg3YjYtZDY1OTJiODEzYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTQyYTNkZTctNTg0Zi00MDEwLWFj
YWUtYjc5MzVlZDNmNjAyL2U0MmEzZGU3LTU4NGYtNDAxMC1hY2FlLWI3OTM1ZWQz
ZjYwMi5jcmwwHwYDVR0jBBgwFoAU0EsgVZKc63bkH2p1dCrZ7ZMu9pswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNDJhM2RlNy01ODRmLTQwMTAtYWNhZS1iNzkz
NWVkM2Y2MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrMSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfng3r20S3xAN4zB5snWfNN3L+mEiNRbkPw0hfiPkfsVx3WFk8pwBbB
NO+7Hz54POe3h97QQRAanVMR5onFnPbVUDWf/6uHkqWLfcKO+0T6SLZSOwDdvqGI
nPvdlojC62b3eAVw54uaRmXCtSCVsq90DR17QhZApP9OMSX/GtW3KXhpOMp8KF5C
xhi+ExyKT7F9rxAOttqDVQxB5i0nf5dAq1JK/gl05I7+fPhtP0h7kSy2PRenhlGl
UgMtUtx7RM5GbTxKK6Bm81Dne5w+GOO7BSI74oM3TXx6tWSxFU5RWm2did9+ZP7v
LzK/YJqM7HCaG1ODwbpZ9+qPyoiTwCo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:55 2024 by rpki-client on console-ams.rpki-client.org