Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa
File:                     8d352a99-b26f-325a-8066-4e236b1102a1.roa (raw, json)
Hash identifier:          PgrqCulVh9CV6sybEyT5vxVGY7ffEjI9cvvHMHXwRMI=
Subject key identifier:   70:E5:03:D9:1B:11:CF:7F:0F:FD:0F:C1:5F:D7:A6:39:A7:61:75:66
Certificate issuer:       /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial:       010D0C9F43285846FCF021CA8EA6AB2CF87FABA0
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     134365
IP address blocks:        172.98.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:21:ca:8e:a6:ab:2c:f8:7f:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=5130adf8-8eca-4c80-a458-fbb0f4ec4df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:73:67:c5:92:c4:25:6a:d0:89:d8:c4:b7:
                    8f:a5:0f:83:7e:73:9f:b9:cd:9c:37:4e:19:e5:04:
                    05:a2:04:7d:da:68:05:70:fb:4c:3b:41:df:d6:0a:
                    d8:9e:3b:ae:46:c3:da:f2:9a:c0:f8:05:c9:83:c1:
                    5b:6b:cd:4b:70:3b:2d:41:70:f0:53:60:b2:3e:ad:
                    98:c0:4d:4c:7c:06:55:e9:37:1f:ae:4b:22:7f:05:
                    65:99:02:00:2b:94:6f:c3:8c:6c:dc:4b:2b:f2:59:
                    19:18:ce:e1:c9:0c:b8:95:de:ba:7c:d9:96:3d:2b:
                    ae:93:ce:32:c3:36:93:ec:6c:86:80:45:45:e7:52:
                    df:47:c6:cf:93:b7:3a:6c:fa:4a:07:1f:94:9a:4f:
                    48:e3:a9:68:48:d0:1f:db:b1:d2:27:6c:1c:04:40:
                    dd:8b:e7:5f:78:a7:5a:df:90:7c:e6:23:27:24:da:
                    65:58:65:bc:7b:81:bc:1d:ab:bc:c5:18:61:1c:dd:
                    d1:3e:f3:82:f6:c4:0a:85:f1:a4:e5:6c:97:85:74:
                    69:45:10:37:83:28:eb:41:0d:e3:b1:83:31:38:bf:
                    77:ac:f4:c7:41:c6:a2:7d:f5:6b:a1:a5:62:33:17:
                    6b:46:49:d8:41:91:28:1c:bc:4f:f1:91:8e:02:e8:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E5:03:D9:1B:11:CF:7F:0F:FD:0F:C1:5F:D7:A6:39:A7:61:75:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b2:62:06:5d:f2:35:5a:c1:2a:11:bd:bf:d2:c9:a6:db:87:
         0b:a3:54:b3:c0:05:c5:05:42:f2:e2:25:0c:c7:87:ad:2b:b5:
         6e:97:50:7a:9f:5c:ad:01:de:0b:22:c1:74:0d:52:95:77:c7:
         41:47:2f:7d:f9:2e:db:ec:94:3a:4d:20:c6:46:31:28:d1:91:
         92:b4:76:a5:15:72:bf:7d:7f:d9:72:bd:d5:44:65:0a:d2:11:
         75:c4:cb:57:93:fc:4b:09:e0:88:c5:26:bb:43:4f:b4:40:af:
         86:ab:fc:0e:41:56:fa:5b:29:04:d7:33:33:ba:cc:92:bd:df:
         02:a4:7d:be:40:36:ef:64:16:24:e3:8d:4a:eb:73:62:ce:ba:
         8f:01:9b:96:59:5a:4c:14:45:2a:cc:46:13:5c:0b:37:04:c8:
         f0:13:f9:bf:ca:83:94:26:a8:77:e8:12:be:fb:17:ae:e5:f6:
         13:24:64:d8:14:74:9e:ce:0e:ea:56:f0:fa:65:b8:2d:29:8e:
         23:5f:df:2d:c9:a1:85:83:40:89:2e:25:f9:4f:3b:13:7a:a5:
         19:87:94:cd:68:88:52:57:2d:0f:e5:e0:10:ce:b0:52:68:2d:
         e0:f4:9f:48:72:fe:6b:13:83:9e:27:54:62:0c:41:72:dc:86:
         5d:02:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:08 2024 by rpki-client on console-fra.rpki-client.org