Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa
File:                     aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (raw, json)
Hash identifier:          ejhI11WYj4P5xLOzlzSK9nePPHAt3Hgdt3wZMBQdlzQ=
Subject key identifier:   DA:5C:F7:AA:F1:61:75:34:DA:C7:67:02:C2:D3:8B:B5:0D:7C:BF:26
Certificate issuer:       /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e
Certificate serial:       010D0C9F43285845CE090B1ED9D1CAB917692100
Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     62642
IP address blocks:        198.51.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0b:1e:d9:d1:ca:b9:17:69:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=8483c1a2-c3f6-4fb6-afe2-c981f48dac48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:17:d2:d8:cf:1c:ce:20:47:0e:61:f5:60:
                    05:6a:08:32:05:02:1c:b1:f2:9c:60:dc:d1:0e:ee:
                    f0:8b:0a:17:b4:e1:bf:ac:92:cc:39:57:1a:06:aa:
                    6e:5b:cd:4b:e6:5f:23:70:d4:40:8d:52:9d:83:62:
                    46:f6:be:14:62:87:0a:a1:95:dd:49:05:45:7c:7c:
                    ee:87:42:d7:0c:ed:fc:7c:16:a7:cd:bb:00:a6:41:
                    da:5b:87:bb:57:bf:a2:bb:94:07:c0:db:4e:90:51:
                    b3:ee:35:bc:15:26:a5:49:62:55:ca:73:14:33:f9:
                    50:22:38:43:6d:16:65:59:30:c6:cd:f5:b8:db:d1:
                    9d:2a:96:15:b2:35:65:ab:cd:77:84:e7:52:12:c2:
                    11:c3:dc:e6:ff:9b:f7:64:b3:50:96:39:8d:0b:95:
                    40:0e:47:16:91:e9:98:29:15:fd:10:36:57:3b:ad:
                    9f:2f:6c:fd:29:01:52:2a:e4:23:c0:7b:92:95:12:
                    68:cd:14:bf:1b:22:e1:5a:ea:07:05:8b:f1:ef:46:
                    e7:eb:e3:c5:b9:1f:a7:8d:66:3e:5e:36:33:ca:ef:
                    f5:22:c8:42:26:6a:59:c7:b7:7e:a7:a5:94:33:4a:
                    70:ef:74:80:2b:0c:0e:23:87:f1:0f:ee:c2:81:53:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:F7:AA:F1:61:75:34:DA:C7:67:02:C2:D3:8B:B5:0D:7C:BF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl

            X509v3 Authority Key Identifier:
                keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:c6:0d:d2:a7:3b:d2:2e:cc:7e:24:b6:e5:64:80:27:46:
         6e:30:e7:66:03:31:53:be:1b:fa:61:c4:66:46:09:b3:59:ac:
         20:e0:55:5d:d6:b3:a3:70:82:99:1b:59:3e:4d:34:9c:1a:74:
         22:2a:c0:d5:30:c7:07:f7:a1:ca:77:4c:eb:0b:31:0e:f9:67:
         2b:2c:c7:81:cf:59:26:a1:a9:8b:e3:da:04:c9:91:f6:40:d8:
         5c:13:07:0b:6e:83:1c:ba:77:ea:b3:65:a6:e2:bd:4f:88:86:
         1a:48:96:06:c3:86:88:d4:17:e5:1c:5d:93:dc:a9:5a:83:38:
         ad:1e:e8:43:98:bb:81:d6:72:09:08:40:c0:d0:1e:4c:ec:c9:
         35:85:01:97:c5:cf:dd:e2:ea:56:8b:3a:f3:c6:55:f6:68:ad:
         fe:b9:29:c0:56:92:b4:ce:76:ae:d7:c8:35:a8:1a:1a:fc:77:
         9f:37:e4:db:f9:ad:c0:50:48:a8:55:4e:02:76:49:3b:03:b4:
         5f:9f:3c:fa:88:99:02:2e:09:66:7f:ae:ad:ff:60:32:9e:24:
         a7:2f:39:15:ec:05:7a:51:10:87:ec:d5:9d:d8:ec:ef:6a:9b:
         aa:dc:0d:81:1f:8c:ad:83:ec:3b:83:e6:84:52:45:c6:a0:95:
         66:ac:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:57 2024 by rpki-client on console-fra.rpki-client.org