Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/d1238eab-4c93-304f-ac40-d0c5743782de.roa
File:                     d1238eab-4c93-304f-ac40-d0c5743782de.roa (raw, json)
Hash identifier:          kHJ0LxWmJA+2mWyAcxDlBA3Ma1emi2Qh8mFJP/usbNg=
Subject key identifier:   3C:18:9C:D5:68:B9:A3:FE:B2:BC:18:47:48:84:5D:CB:25:6B:50:1D
Certificate issuer:       /CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Certificate serial:       010D0C9F432858467BAF3410A3A088A42B5866C0
Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/d1238eab-4c93-304f-ac40-d0c5743782de.roa
Signing time:             Tue 09 Jul 2024 17:50:27 +0000
ROA not before:           Tue 09 Jul 2024 17:50:27 +0000
ROA not after:            Mon 07 Oct 2024 17:50:27 +0000
asID:                     17207
IP address blocks:        198.59.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:af:34:10:a3:a0:88:a4:2b:58:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd
        Validity
            Not Before: Jul  9 17:50:27 2024 GMT
            Not After : Oct  7 17:50:27 2024 GMT
        Subject: CN=054bac34-46f3-42c9-b871-0fd2e67433fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:01:0f:5f:b5:ca:ad:3c:d6:57:96:d5:8e:
                    c4:a0:7f:ad:26:9e:17:8a:97:1e:69:78:4d:ce:6b:
                    2b:de:e9:19:a0:93:ff:83:35:cb:45:8e:6b:9e:0c:
                    8e:ae:94:6d:e0:35:0b:d3:9a:66:f3:f7:13:02:05:
                    89:ce:f4:d5:3a:8a:5d:b1:95:c5:b2:93:1e:34:b3:
                    7f:6a:03:2c:20:f8:c3:7f:66:33:18:2d:f1:b7:36:
                    7c:69:2b:e4:8a:b2:2e:39:ac:f5:08:83:08:aa:29:
                    d7:0a:63:5a:f1:1c:65:13:d1:54:81:c8:ed:f8:29:
                    c7:8f:74:0d:6b:a1:35:47:52:96:3a:33:a5:e6:34:
                    64:e2:33:1b:ef:21:52:ca:24:3f:76:cf:c5:31:a4:
                    b2:8f:8d:88:d6:08:18:89:b4:26:81:45:e8:2a:14:
                    d8:d8:a7:f8:f2:fd:4a:ce:1c:90:f5:c4:40:86:04:
                    5f:f9:67:3f:59:92:af:9e:ee:f8:61:bf:24:81:ae:
                    34:c3:05:8a:cb:e7:24:18:8b:d0:fb:a0:56:d1:a7:
                    f6:ce:d0:32:d1:7b:f1:1b:96:ed:ae:76:56:de:8f:
                    f3:51:17:b2:f9:97:a9:00:44:28:6a:58:98:a8:d1:
                    77:e3:62:50:42:28:70:42:29:63:c9:9b:cf:bb:50:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:18:9C:D5:68:B9:A3:FE:B2:BC:18:47:48:84:5D:CB:25:6B:50:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/d1238eab-4c93-304f-ac40-d0c5743782de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl

            X509v3 Authority Key Identifier:
                keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:75:3f:ec:c1:61:ed:22:26:8d:a3:1a:0f:f6:29:63:d1:09:
         a4:af:15:6b:ab:c5:d2:5c:4f:98:a9:c0:e7:06:4a:33:63:b1:
         f0:ed:37:d3:54:66:6f:5c:c8:e9:f5:8c:04:1b:67:40:10:41:
         ec:a8:50:ca:ad:06:b5:2a:0e:d4:83:17:7c:33:a3:65:45:8c:
         92:29:24:46:16:0f:32:2c:a7:7d:f0:ed:8d:93:17:5d:df:57:
         3c:8d:fe:8d:9a:be:4d:65:b8:87:da:9c:12:f6:5e:ea:83:98:
         17:09:4e:3d:79:99:fd:27:d1:bc:6d:f9:06:38:fe:41:07:5a:
         1b:d1:63:75:4e:ce:42:72:23:f9:b0:a0:53:53:9b:fc:81:88:
         2f:5f:7e:76:41:27:92:13:23:fe:19:ad:ac:ff:04:6e:00:43:
         bd:c2:66:14:45:f7:4f:d0:53:fa:b2:54:d8:93:c1:3a:0a:93:
         4d:f1:21:96:39:51:d4:0a:53:9f:4e:a7:24:c7:5b:a6:c5:7a:
         14:ee:61:b8:be:92:e2:bb:5f:d6:05:63:55:84:f2:09:76:ce:
         90:1d:55:68:0f:ec:2f:e7:8e:0c:ce:bc:61:7c:f3:0e:d7:17:
         4a:f0:94:77:1a:a5:a5:26:39:50:29:87:91:1d:4b:2b:eb:6a:
         f0:d1:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:02:18 2024 by rpki-client on console-fra.rpki-client.org