Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/a5ef74db-124a-3ae8-8045-e4e2495d03fb.roa
File:                     a5ef74db-124a-3ae8-8045-e4e2495d03fb.roa (raw, json)
Hash identifier:          yFwvR0S/Wq7Fk9RfZqz6Hd4Mv5BLxfgHIVGrZl0LOC8=
Subject key identifier:   97:B5:19:EF:3A:1A:90:39:55:82:6A:0E:50:40:87:2F:85:8C:51:2F
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F432858451E4597A52DED8339551E5DA0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/a5ef74db-124a-3ae8-8045-e4e2495d03fb.roa
Signing time:             Wed 06 Mar 2024 14:00:31 +0000
ROA not before:           Wed 06 Mar 2024 14:00:31 +0000
ROA not after:            Tue 04 Jun 2024 13:00:31 +0000
asID:                     19551
IP address blocks:        198.37.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:45:97:a5:2d:ed:83:39:55:1e:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Mar  6 14:00:31 2024 GMT
            Not After : Jun  4 13:00:31 2024 GMT
        Subject: CN=033f5ef9-034f-4f4b-833d-849c632a3ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:db:1c:20:e5:a3:35:83:71:c3:1d:9b:bd:
                    cd:2e:da:61:11:8a:33:11:b5:1c:c5:54:2c:1e:d7:
                    35:8b:ca:8e:21:a6:d4:f1:e6:51:9d:4b:11:ea:d1:
                    dd:0e:17:a5:65:07:dc:b7:cf:7c:ae:56:7e:13:2d:
                    44:c5:e7:16:2f:f1:6d:6c:33:0c:0d:50:61:63:80:
                    5c:ab:5e:f3:bb:cc:13:a6:8d:f2:1c:1f:59:73:a6:
                    3b:55:2d:3d:7f:e5:e1:47:39:15:db:2f:22:78:91:
                    58:44:13:3b:d2:91:60:af:25:a3:f8:68:9e:0a:25:
                    22:9f:26:33:87:96:27:a8:1b:18:fb:82:b0:65:c0:
                    94:b1:a9:5c:dd:b0:50:0e:1a:09:0a:48:3e:4c:29:
                    af:d4:35:bf:7f:31:ce:40:18:2a:a3:22:09:67:8d:
                    58:cf:57:4f:87:88:05:98:d6:e2:4a:2f:ec:e7:f4:
                    9d:ba:73:79:c8:d9:a3:6c:39:32:74:e3:70:47:fc:
                    45:de:6b:75:ba:c7:20:62:14:f1:a9:31:1b:fc:d4:
                    6f:2e:38:c2:bf:dd:6b:d4:29:1c:23:8e:7b:ce:4f:
                    51:4c:1f:8b:f4:61:c9:0c:ea:e6:27:d7:2f:bf:f2:
                    72:93:09:44:ee:03:a0:cb:5d:85:96:2b:f1:8f:fa:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:19:EF:3A:1A:90:39:55:82:6A:0E:50:40:87:2F:85:8C:51:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/a5ef74db-124a-3ae8-8045-e4e2495d03fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:a1:84:1a:d9:d5:d4:6b:16:09:d8:b0:e3:f6:fa:98:c3:
         4b:8f:66:be:ad:12:8f:de:00:15:3a:10:4a:6c:ad:de:da:d0:
         ea:5f:d7:3f:db:39:a8:2b:9d:bc:04:8d:43:b2:a4:1f:d7:e7:
         f1:4c:6e:a5:f6:ec:5f:c6:48:2a:26:6b:5f:e6:aa:0f:35:47:
         c0:a9:d7:8c:5c:88:7a:47:70:05:6a:ed:61:12:63:f8:c7:2e:
         21:63:df:dd:9d:cd:82:08:5a:f3:56:25:76:6e:ee:a7:e7:e9:
         5f:0e:c8:66:5a:f9:6b:e3:34:4b:2b:4e:14:a2:f0:b5:eb:ec:
         62:f9:04:4d:66:38:83:25:cc:78:5f:ac:6a:11:8f:56:6b:93:
         20:a0:61:0c:98:a4:a2:ff:7d:c2:47:07:1d:1c:10:dd:a6:db:
         d7:4e:22:09:f2:e6:cf:e0:ad:c5:f8:1c:63:00:57:3f:42:6e:
         72:c1:5f:dd:20:8e:4b:c6:19:66:98:56:6d:78:ad:21:6e:25:
         64:e1:ef:16:1e:ef:a0:f7:80:79:60:fa:88:c8:3f:95:73:c4:
         33:34:5d:ea:4f:44:a5:a5:d8:5e:7c:b2:a2:1b:db:ef:e5:2d:
         bc:d5:6b:e2:83:4a:14:a0:6e:f1:99:cc:9c:54:17:56:f3:fb:
         70:3a:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:16 2024 by rpki-client on console-ams.rpki-client.org