Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/54813767-450c-37e1-a177-d48990edfe96.roa
File:                     54813767-450c-37e1-a177-d48990edfe96.roa (raw, json)
Hash identifier:          hvRQ1Ar7c1JZt8VMecLlcfJZzc1hSSlpYgCydM/bNjA=
Subject key identifier:   1B:46:F0:CC:A5:3A:AF:92:A6:2C:28:F8:25:38:7B:CD:5F:E3:A2:7C
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845A15DFB1196324AEF53063F80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/54813767-450c-37e1-a177-d48990edfe96.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     36351
IP address blocks:        198.105.221.0/24 maxlen: 24
                          198.105.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fb:11:96:32:4a:ef:53:06:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=a650994f-ee2b-461c-b385-35342238b2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:b3:d6:18:46:c8:04:f4:fd:5d:08:97:20:
                    93:e0:ae:2e:40:1e:2d:bf:8b:9a:d7:10:e7:6a:2b:
                    ad:25:2e:d7:eb:19:81:0f:1d:b7:1b:6e:8b:cd:fe:
                    d5:8c:3f:9a:3e:f7:a4:56:18:3e:90:5a:f5:20:d8:
                    ae:cb:3f:40:b0:bf:1b:86:7d:f5:b4:a1:cd:b9:0d:
                    53:e2:28:1f:c8:18:5b:f6:a9:29:af:69:8f:f6:e0:
                    ac:c0:f4:a4:8b:10:13:05:78:63:cc:d4:43:34:01:
                    a8:c2:e3:34:9f:6f:6f:9b:3c:c7:d1:ca:c2:ed:1e:
                    90:54:84:d6:b6:ce:8e:bd:4e:c9:33:67:1c:ac:9f:
                    00:3e:f5:56:60:4e:fb:8a:52:08:ff:89:c6:0d:36:
                    99:2e:6b:3d:a2:56:43:09:4a:ce:70:ae:25:17:c1:
                    cf:d5:04:cc:c7:68:ec:8b:73:d7:e6:83:51:7e:2a:
                    81:1c:3a:c9:73:da:43:43:62:7a:78:9c:0b:62:16:
                    9c:fc:e7:3a:7e:83:07:37:67:e0:20:03:0f:1e:aa:
                    ba:c6:c9:47:07:3a:7b:04:30:da:60:d1:c0:32:f4:
                    c9:bd:aa:f4:66:d9:d8:6c:e8:3a:23:c7:c1:d0:71:
                    1f:5f:c4:3d:b6:fa:0e:ea:6f:2a:58:16:91:56:39:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:46:F0:CC:A5:3A:AF:92:A6:2C:28:F8:25:38:7B:CD:5F:E3:A2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/54813767-450c-37e1-a177-d48990edfe96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.221.0-198.105.222.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:22:4b:11:78:f7:6b:4d:65:88:76:e1:32:8f:c2:10:58:91:
         46:9e:dc:8a:e2:9d:2c:90:1d:80:2e:b4:44:b3:ab:98:67:7b:
         61:5a:e3:d7:e2:b0:78:2c:8e:f1:c9:cb:b7:ef:34:df:24:d8:
         f2:4d:c1:63:4a:0f:4c:68:4b:af:c4:63:e6:86:d7:b7:6d:b1:
         7c:4b:c5:78:35:ac:bc:2e:44:0e:16:ab:db:f3:77:0d:2d:62:
         8f:ef:48:b9:59:2d:7b:23:70:86:e5:51:3c:4f:00:3d:ef:6d:
         00:70:9a:f8:7a:c1:d2:14:19:ba:c6:c8:80:6f:a1:5f:25:43:
         ac:0e:5e:60:b2:38:3a:bf:26:c6:b9:2c:4d:e1:7e:54:f6:bb:
         2b:97:05:67:53:fe:ca:bb:03:5e:3c:27:0a:04:92:60:75:9f:
         79:be:08:82:21:29:05:be:31:b8:2e:55:e8:87:1a:8e:a8:93:
         8c:a8:05:20:53:23:4f:6c:c9:cc:4e:57:b4:25:20:79:c5:ea:
         8e:9e:61:e3:85:fe:f4:da:c8:3b:68:24:3b:f2:73:69:4d:7b:
         0e:e6:49:f8:d6:ca:ae:90:2e:07:4f:20:38:76:2f:3e:00:63:
         39:42:7b:42:1f:4f:9c:e4:a2:61:36:75:19:9e:a3:d7:ac:d4:
         28:2a:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:32:46 2024 by rpki-client on console-ams.rpki-client.org