Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
File:                     0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa (raw, json)
Hash identifier:          J5BLsoZpBquwfAYK/YB5ksYa2D8bjxZdZJiKnqtu4Ws=
Subject key identifier:   CD:70:CE:D7:6C:7F:91:67:31:8A:7E:00:09:86:F9:63:18:A6:70:8B
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F43285847CA3F87811FA73F81E909B110
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     26356
IP address blocks:        91.106.220.0/22 maxlen: 24
                          204.52.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:87:81:1f:a7:3f:81:e9:09:b1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=9f663763-9310-4b28-b9b7-bdbe814d6be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:10:b6:fe:fd:f2:32:f8:d1:65:72:0a:07:
                    b7:61:38:bf:97:41:ab:f2:cc:9d:a4:37:49:5f:d0:
                    a2:1e:60:02:91:39:c8:8d:dc:d2:12:44:5f:14:d8:
                    47:4c:79:45:79:81:32:50:5a:76:d6:5e:55:6d:be:
                    5b:d9:41:35:2b:c7:30:6d:bf:24:7e:3c:49:12:9a:
                    38:1c:3c:fc:8d:c8:1c:df:40:da:18:d3:f5:fc:54:
                    df:a7:9e:14:d1:81:f0:23:a4:09:37:21:55:82:e0:
                    05:7a:1a:6b:bf:44:6b:f5:1c:ed:3f:d1:26:f4:f6:
                    17:2e:69:ed:34:76:31:44:ac:0a:c6:f3:c6:65:72:
                    8e:49:13:74:b7:c7:54:c1:82:71:05:0d:fe:4c:4c:
                    a7:9f:f1:b5:f6:e5:09:ed:62:35:59:e8:ee:35:85:
                    35:ce:b6:d9:56:49:04:5d:b6:31:b1:b1:49:00:64:
                    e0:45:3e:02:0c:f5:af:db:d7:47:a5:0b:81:d7:26:
                    41:93:6b:87:61:97:3d:bf:39:8d:de:63:6d:2a:a7:
                    f3:1e:fa:75:6e:ff:a5:be:64:31:94:e2:bb:0d:57:
                    da:6d:3e:d7:06:8b:59:d7:dd:3d:4c:c7:64:6b:6a:
                    1f:98:91:83:4d:2f:ee:87:ce:92:a3:42:8a:47:ac:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:CE:D7:6C:7F:91:67:31:8A:7E:00:09:86:F9:63:18:A6:70:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.106.220.0/22
                  204.52.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:6c:26:40:79:f4:4d:ce:97:25:74:5c:31:d5:1c:0b:b4:
         f2:78:21:ec:b0:20:00:ab:69:6c:22:a4:8a:1c:b4:26:b5:55:
         86:01:c3:2a:47:a3:4c:81:66:9c:1e:b5:a0:97:93:b8:c3:90:
         e3:d0:b7:69:0c:ec:91:0a:62:b4:fe:a1:13:7f:fd:2b:49:5e:
         50:fe:7d:91:a9:97:12:2c:57:ca:23:f8:b2:c2:c8:60:3d:4d:
         e5:e0:81:cd:6e:c9:2f:eb:b5:76:5d:b1:a7:22:2d:65:bc:a5:
         85:71:6d:99:88:39:f4:96:5a:e7:ce:ce:e7:01:bd:4a:e1:d4:
         c9:2d:0e:82:a5:e7:da:f8:01:6f:e4:be:b1:ad:42:4a:3a:7d:
         4c:a2:f4:d1:56:ef:f0:2d:00:f7:db:8e:0c:0c:6f:4d:77:bc:
         99:bf:ab:c1:8a:88:b0:de:14:58:c6:ee:5c:ec:bc:f1:89:1a:
         9c:d0:3d:09:67:1e:47:63:40:30:18:4b:6b:c7:c5:cd:fa:8c:
         7a:ca:1a:38:4e:2e:b2:76:e9:1e:5c:c8:17:e5:02:4e:61:7d:
         0f:6a:0b:86:bd:99:f3:30:31:f7:49:0d:2f:f9:b2:69:a9:42:
         61:9b:59:eb:81:36:df:09:4f:89:fe:ae:7b:4d:93:04:f2:5f:
         b4:7b:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:38:18 2024 by rpki-client on console-fra.rpki-client.org