Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/44ed0453-6336-3500-9d30-9fe74a5024ab.roa
File:                     44ed0453-6336-3500-9d30-9fe74a5024ab.roa (raw, json)
Hash identifier:          +A4Xe8xFJdDYXE/mxJwDONRiD8UPZSmKyN24HQ6bh+U=
Subject key identifier:   44:95:E5:EB:31:C5:31:3B:E2:8E:D2:F8:31:53:16:CC:1C:AC:6E:19
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F301F63281BCD093B67656
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/44ed0453-6336-3500-9d30-9fe74a5024ab.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11537
IP address blocks:        198.71.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:01:f6:32:81:bc:d0:93:b6:76:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=b0acf162-3250-4009-bc7f-7bc7fec9fda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:fd:de:0e:4e:f5:4b:bb:c6:73:5b:35:60:
                    3f:ae:01:7f:81:a3:a8:2e:c2:ca:ca:18:f0:1b:ee:
                    ab:38:00:cd:39:51:1c:bc:83:bd:38:97:f5:7d:ec:
                    ed:73:6a:23:6a:65:b7:a7:bd:3a:60:0d:d3:a7:e2:
                    66:39:04:77:18:34:98:c5:0e:39:19:86:04:19:99:
                    f7:f9:d9:fd:e9:5c:9c:18:08:a8:38:6e:aa:ed:c7:
                    16:a2:0c:03:c1:7d:57:f7:31:30:33:e8:48:55:ed:
                    91:70:e7:fa:36:0e:9d:ab:57:d8:fa:32:fe:ab:f6:
                    c0:ca:7c:11:19:b0:72:b4:f0:30:cb:2c:43:70:f3:
                    c3:cc:f9:94:3a:62:c8:24:f5:40:7d:58:31:6b:c9:
                    8b:17:4c:05:0e:98:09:3c:f0:06:d1:5b:1c:78:b1:
                    af:f8:69:52:d4:91:bb:29:c2:be:95:2d:e4:e2:53:
                    90:c8:d4:8e:8d:38:dd:21:5c:e9:34:ca:8a:9b:51:
                    0e:76:39:f1:f8:bc:19:fe:ec:a6:bd:96:b2:45:01:
                    00:3b:18:83:7c:3b:65:19:d5:9f:7f:39:a9:60:04:
                    d0:d5:53:6d:45:e3:e8:33:bf:cb:4b:14:c1:3e:2c:
                    7d:2c:f1:f7:62:00:3d:eb:e5:07:99:ab:a3:cf:04:
                    e5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:E5:EB:31:C5:31:3B:E2:8E:D2:F8:31:53:16:CC:1C:AC:6E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/44ed0453-6336-3500-9d30-9fe74a5024ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:25:eb:bc:d9:73:63:12:2e:90:0f:1c:53:e9:8c:05:77:a9:
         19:00:e2:b3:6b:8b:a4:24:f9:09:f7:c0:44:c0:88:0b:95:eb:
         41:f4:8b:97:9c:ff:df:32:58:6a:62:6a:af:25:c9:b8:da:69:
         f3:97:8f:4b:d8:dc:88:c5:79:72:37:5d:e2:32:da:81:11:15:
         e9:20:0c:29:2d:79:8f:f0:d7:38:46:10:2b:7a:70:ec:f0:35:
         90:12:2b:93:bc:57:dc:53:f7:10:ca:ca:13:5f:f6:6c:7c:5f:
         1f:77:3b:b5:e6:b4:ff:22:ae:55:98:fc:d2:69:8b:fb:20:8b:
         34:93:88:ac:54:c3:9f:70:5d:9c:82:c9:d2:51:ef:66:ac:a6:
         b4:0b:e3:ed:d2:46:d0:91:67:62:06:db:84:40:18:21:be:9e:
         f0:5b:76:c5:04:e9:e8:b7:10:51:91:6c:00:88:ed:8a:6b:66:
         5e:18:95:31:f6:e2:aa:9b:c0:36:58:f3:0d:cd:c6:78:fa:b4:
         2d:50:03:1d:d5:38:67:96:bb:c5:16:57:d2:91:4a:f8:b4:bb:
         e8:60:77:d2:e6:82:21:ad:17:7f:c1:b0:1c:07:89:34:66:8e:
         9b:c4:10:64:12:91:d9:f2:fe:8c:43:b3:6a:cd:ea:e1:4c:52:
         5d:1c:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:09 2024 by rpki-client on console-ams.rpki-client.org