Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/50c74bb3-d4ea-355d-813d-e86559fc98de.roa
File:                     50c74bb3-d4ea-355d-813d-e86559fc98de.roa (raw, json)
Hash identifier:          WNIlnwf+8P2YJdTFdIZqQ6f+cHS+ImgCF0Fl9CLbIOY=
Subject key identifier:   20:5F:CD:62:BD:93:0B:51:A9:FE:7B:9E:74:84:66:94:95:22:4F:1D
Certificate issuer:       /CN=c48344cd-71dd-4852-8081-dbc4e9c4e5d4
Certificate serial:       010D0C9F4328584787212BDBB0F71238A3B8B080
Authority key identifier: 11:91:33:93:D4:45:82:EB:73:60:76:CC:4B:EB:02:E0:43:2B:1F:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/50c74bb3-d4ea-355d-813d-e86559fc98de.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     964
IP address blocks:        198.73.190.0/24 maxlen: 24
                          2606:ddc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:2b:db:b0:f7:12:38:a3:b8:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48344cd-71dd-4852-8081-dbc4e9c4e5d4
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=352361c5-1f1b-4bd6-b787-b144e8faaca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:ec:6f:74:35:19:03:7f:42:e7:fc:84:de:
                    76:15:a5:a3:71:8b:0c:59:35:df:06:94:33:b5:a7:
                    41:bf:b7:f1:2f:5a:28:e7:62:6c:53:36:6e:82:09:
                    a0:97:6e:4b:b7:29:cc:1b:cc:e8:ee:6f:03:9b:1e:
                    87:6b:7b:15:7a:21:ed:2c:1d:85:e2:9b:65:26:6f:
                    cc:f6:36:d4:2a:3b:c1:63:32:e2:5f:b9:e4:c1:1e:
                    fc:7a:8a:40:6b:50:e7:68:14:47:af:cd:81:fc:76:
                    e6:4c:c2:fb:b8:53:69:58:e5:3d:8b:0b:72:01:f4:
                    db:31:d5:f1:39:70:fb:b7:6d:83:46:c0:b8:a4:51:
                    4a:fb:f3:cd:04:de:4b:ea:aa:3f:85:ca:57:11:ee:
                    4c:26:87:78:64:02:0c:f0:2e:c9:4f:c7:6d:de:91:
                    75:7d:d0:49:e0:55:35:fa:d7:da:f4:b1:ef:78:a6:
                    2d:63:25:ec:94:d1:51:2a:40:9e:5b:ac:69:47:29:
                    a1:39:59:7a:e1:1c:27:e4:e1:3c:3a:0b:4f:fc:e3:
                    ec:21:29:cf:b4:49:91:e4:bf:3b:78:8c:c8:83:f0:
                    e1:54:e2:08:9a:b1:a8:35:26:6f:0f:78:f9:f7:a3:
                    ca:45:a0:7e:78:4b:5c:d7:b1:07:d7:9b:04:74:d9:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:CD:62:BD:93:0B:51:A9:FE:7B:9E:74:84:66:94:95:22:4F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/50c74bb3-d4ea-355d-813d-e86559fc98de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.crl

            X509v3 Authority Key Identifier:
                keyid:11:91:33:93:D4:45:82:EB:73:60:76:CC:4B:EB:02:E0:43:2B:1F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.190.0/24
                IPv6:
                  2606:ddc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:7f:29:68:61:5c:ec:89:4b:9b:74:f0:54:10:95:f5:d9:
         11:8a:60:6a:17:bb:71:e3:6a:08:39:f6:ec:07:3f:5b:52:9c:
         e1:d2:d3:a8:be:2e:3b:45:0f:33:86:78:06:05:74:0c:d4:7c:
         f8:a3:bb:5e:4f:92:78:89:4e:40:eb:56:68:54:f8:2d:5c:97:
         2f:29:9f:21:fb:11:a7:a3:68:6b:45:c6:67:9f:26:b0:f7:03:
         52:dd:2e:86:8d:5d:ee:54:e3:5e:0f:37:66:79:bb:a8:50:a3:
         78:5d:d5:ac:81:14:e9:c1:3b:6c:62:9e:22:58:6f:52:d4:11:
         2f:9d:f3:c6:5e:ff:57:48:63:4c:b7:41:18:dc:94:9d:09:9d:
         e2:ba:39:3d:3c:ff:fc:1b:32:89:80:25:e8:36:17:c1:78:33:
         b0:a4:ea:ff:31:c6:b5:19:30:1d:34:4f:3c:67:2a:0a:98:06:
         22:db:f6:52:ff:20:db:1c:e7:1d:9b:55:eb:0b:2b:1b:98:65:
         76:bd:6c:3b:b1:6b:c8:52:c5:1d:9a:03:60:c8:80:e3:94:02:
         90:05:7f:6e:f9:cb:74:1d:4e:f7:c4:cf:93:7a:16:97:bb:d9:
         79:de:77:32:96:fe:d3:7d:47:24:50:fe:0c:6b:9f:dc:26:09:
         c6:2b:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org