Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa
File:                     d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa (raw, json)
Hash identifier:          yjqF4hIojmeaiCrER/hpFPlGkNuCT5tDgVQn3zU9cRE=
Subject key identifier:   B9:EE:9D:E5:8A:2B:60:A2:08:C0:52:3E:B2:9A:AB:1E:88:1E:2B:03
Certificate issuer:       /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial:       010D0C9F43285847CFD4A5E24FA451EBE155B1F0
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18943
IP address blocks:        198.168.122.0/23 maxlen: 23
                          198.168.122.0/24 maxlen: 24
                          198.168.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a5:e2:4f:a4:51:eb:e1:55:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=4a4394d0-e3d1-41e0-9327-6e206c459564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:7d:26:c5:de:89:d1:02:28:5a:41:2a:79:
                    55:11:d5:3f:8f:48:ed:19:2c:10:a6:8e:8e:27:23:
                    92:b5:5b:51:9e:25:a7:d4:81:bf:a0:f4:60:e5:0f:
                    66:ea:bc:73:02:d4:ee:1e:6c:bf:20:02:2d:a4:85:
                    e6:97:38:30:ad:73:15:e5:69:42:6d:69:af:f8:be:
                    03:da:b8:99:f2:a1:85:a0:38:df:0e:5e:a5:28:de:
                    37:49:a6:23:20:b4:b0:fc:1a:4d:6a:7e:1d:fe:4a:
                    51:f9:8a:16:90:f6:07:cc:48:08:4d:6f:6d:86:5c:
                    14:2a:b7:4a:46:9a:ed:fe:c0:e2:c7:d7:8f:a2:bb:
                    8a:2c:b0:27:08:f6:9e:45:43:e7:19:f5:11:bc:8e:
                    64:2d:ab:df:4e:c0:04:85:b5:44:af:62:8c:2e:57:
                    98:f8:74:ab:ef:71:b8:ce:39:0c:6b:17:fc:7d:0b:
                    92:4b:f2:8e:75:35:1a:58:ca:32:b7:f7:af:bb:23:
                    9a:16:0a:cb:f1:55:ab:ec:ba:85:5f:40:66:d6:e0:
                    91:0c:d2:c2:18:1a:8b:04:6f:1f:9d:d0:b1:e3:a2:
                    45:c8:a5:af:8a:2c:d7:84:43:3a:34:cc:30:89:ce:
                    1f:96:7c:e0:d3:19:cc:3b:ce:cd:79:56:ba:8c:5f:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EE:9D:E5:8A:2B:60:A2:08:C0:52:3E:B2:9A:AB:1E:88:1E:2B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:21:24:69:ab:28:41:67:ba:86:87:0d:17:b3:c2:97:6b:48:
         9a:ea:d3:51:03:a1:1a:14:79:3f:df:05:b8:55:d3:84:6d:ec:
         24:e7:97:e9:df:7d:80:ad:45:cc:b1:c2:3c:aa:b3:6c:c7:dd:
         64:cf:4f:f2:87:a4:fd:3a:01:33:26:5d:2c:b0:03:aa:97:4f:
         5f:d5:d5:5a:23:24:1f:7c:92:b5:62:d4:6f:c5:63:c8:11:3b:
         88:9a:c6:38:5d:6a:c0:be:72:a1:0c:9b:5d:40:ef:50:ea:59:
         d5:11:ce:37:dd:91:5e:f1:f5:33:9a:b5:43:d0:b6:2c:2b:7e:
         7d:1b:84:dd:94:90:27:65:98:ec:ba:f0:75:86:41:fe:2c:a0:
         a7:b5:cb:a5:d5:50:e4:4e:8d:a8:5f:f0:e8:af:70:cf:f8:3e:
         85:77:83:98:fb:42:6f:b8:9a:19:f2:53:58:f2:2f:03:70:bb:
         5e:5f:4e:cc:57:47:96:04:49:12:6a:bd:0b:20:aa:06:c8:7e:
         27:12:17:49:ea:d8:65:dc:55:76:ab:20:a5:f9:43:7c:36:ee:
         0e:f9:15:98:bc:0c:7f:1d:8f:57:15:d7:a8:d8:44:b7:69:36:
         97:e3:7f:33:0a:5b:b5:02:28:fe:d6:d1:c8:56:5b:64:97:d4:
         6c:70:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org