Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77b14c25-6f4b-3a4d-be7e-dde5c1ff918f.roa
File:                     77b14c25-6f4b-3a4d-be7e-dde5c1ff918f.roa (raw, json)
Hash identifier:          rTWn+uZtVgSYu6zCZoGGk2Yyzw2IEL//6eaIyvlFZn8=
Subject key identifier:   6A:2F:86:EA:E7:37:52:BF:7D:1F:C4:6C:54:90:B1:4C:87:B2:9C:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF98DFCD3619D26BC098500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77b14c25-6f4b-3a4d-be7e-dde5c1ff918f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22258
IP address blocks:        173.10.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:8d:fc:d3:61:9d:26:bc:09:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=29153ff3-1d60-4dbb-94db-3e30847d4a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:b1:77:41:7a:12:3c:df:6c:62:e1:5d:8c:
                    5f:de:cc:7b:46:af:0f:84:49:f1:af:8d:e0:42:05:
                    18:db:75:b6:36:c3:ee:24:fb:f6:e8:0a:bc:c2:d9:
                    c6:55:47:68:0c:7b:56:20:d3:00:30:3a:c6:32:3f:
                    69:16:f4:99:ea:a6:e7:70:6d:d2:29:a6:4b:48:48:
                    6c:47:da:ae:31:77:36:3b:fe:d4:f6:05:4e:50:a7:
                    c0:2f:3a:ae:b5:cd:81:4e:f3:f2:9a:38:ae:a8:22:
                    93:29:61:e7:ad:d7:73:e4:f7:1f:2c:25:c1:cf:5d:
                    68:21:14:b4:1a:f7:6d:05:8b:8c:54:08:7b:9b:a5:
                    c9:2f:ca:54:37:07:46:d0:a9:cc:a7:7d:26:d1:84:
                    df:5a:7e:1f:80:4c:6a:bd:d9:26:24:74:a8:1b:8c:
                    e5:92:24:94:26:b0:be:d1:44:f7:4b:f6:52:9a:58:
                    e9:e7:03:94:53:eb:80:00:bf:ac:5e:86:fb:87:82:
                    a5:80:fb:76:fb:3d:3a:ac:49:2d:c3:42:ec:36:89:
                    6e:56:d5:a9:ce:e3:c6:99:cd:bc:1d:c5:54:10:c9:
                    f2:ba:8d:fd:d9:cb:71:c4:ba:52:b8:f7:fe:83:05:
                    1c:cb:e8:76:a9:2e:61:2f:07:5b:90:b6:93:a3:86:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:86:EA:E7:37:52:BF:7D:1F:C4:6C:54:90:B1:4C:87:B2:9C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77b14c25-6f4b-3a4d-be7e-dde5c1ff918f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.10.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:db:e7:74:9f:26:80:9d:dc:c2:c7:0b:64:8c:55:2e:b5:f5:
         4d:0c:f7:59:4c:c8:52:51:17:06:f7:7f:d8:9d:05:78:07:fe:
         b8:ef:96:d2:ab:50:2f:6b:67:3a:3e:28:66:c2:1a:60:8f:3d:
         af:84:ac:a1:8f:e1:d3:1e:37:8e:04:94:45:bf:01:f8:08:86:
         97:bd:b1:15:b4:8b:49:75:e1:6f:97:60:b4:73:80:f2:de:be:
         2d:68:c1:e8:05:d3:59:68:66:bd:01:71:63:93:95:b3:41:b9:
         2f:ef:b7:02:6b:c2:bc:a2:cc:16:21:96:9d:c5:fe:21:61:a1:
         60:a9:60:3d:68:6f:a2:aa:a9:00:45:4f:3b:a4:e6:3d:cf:76:
         06:39:74:07:8e:36:eb:47:be:a1:1f:ea:5b:b0:36:4b:78:f0:
         47:8f:5b:f5:6e:ca:e7:b0:7f:42:f0:8b:be:0e:3f:83:ce:d9:
         65:56:a4:e6:53:d1:22:dd:08:91:0d:9c:8c:5b:58:78:a5:6e:
         5c:a9:8b:cd:07:04:30:41:fa:db:24:45:0a:8b:eb:4a:c7:da:
         07:ef:9b:35:8d:f4:dd:3c:a4:55:5c:08:2e:ff:12:75:b2:b0:
         f7:da:a4:a6:9e:24:13:50:cd:e9:20:cb:fc:f6:0d:71:e4:4c:
         8b:4a:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:29:06 2024 by rpki-client on console-ams.rpki-client.org