Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3106007-18d9-3e43-a71b-37335b42b9ad.roa
File:                     d3106007-18d9-3e43-a71b-37335b42b9ad.roa (raw, json)
Hash identifier:          etQphUZiQFTzUOQSsy5aO9oUWWRE4rYH6wRnaGLQC68=
Subject key identifier:   E8:33:40:3D:38:4A:FD:75:AE:A7:03:85:53:BA:51:34:3A:3F:50:E9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DF37F4C5E
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3106007-18d9-3e43-a71b-37335b42b9ad.roa
Signing time:             Tue 22 Oct 2019 12:44:29 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     14375
IP address blocks:        198.63.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f3:7f:4c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=0d409be5-4548-44c1-97ea-6d065591bc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:b6:9e:bf:40:e9:f5:a1:bd:b3:bd:20:9d:
                    93:f3:ee:b2:64:50:19:7b:5c:f2:ae:3c:d9:67:7a:
                    a8:50:7a:08:3f:03:67:d8:c2:92:1f:8a:fd:08:35:
                    b3:b0:b2:e8:9d:92:66:b4:9a:0a:16:65:ea:89:f3:
                    9b:fe:e2:70:8f:0d:b3:66:03:d0:11:68:31:36:c2:
                    44:75:d1:53:23:89:44:31:98:ac:07:ad:8a:8b:86:
                    29:6f:7b:4f:1c:a8:e6:ec:af:1f:b5:eb:8b:f1:33:
                    0a:00:18:d8:b5:94:94:0e:7c:a2:c8:e2:af:a0:ee:
                    c4:39:0b:e6:1b:3c:2b:68:e1:5c:74:8e:aa:03:d2:
                    6c:26:5b:35:13:07:ed:53:ea:26:16:65:67:ae:04:
                    bf:c4:8b:a4:b0:5a:b2:a1:25:46:ad:3c:62:cb:c5:
                    b4:54:f3:75:8e:89:ec:28:5a:ae:0b:10:1a:43:99:
                    97:0b:3d:84:1c:6a:48:8e:17:92:22:30:4c:16:ec:
                    69:92:85:e8:82:f2:39:ff:11:7e:41:ac:bf:e6:37:
                    d1:f5:69:30:6a:1f:96:e7:a6:61:13:cb:b8:b9:ce:
                    35:58:8c:8d:65:11:c0:9b:71:ef:10:65:e1:90:33:
                    a6:d3:f3:bc:2e:71:fc:83:b6:25:c5:1e:62:c1:87:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:33:40:3D:38:4A:FD:75:AE:A7:03:85:53:BA:51:34:3A:3F:50:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3106007-18d9-3e43-a71b-37335b42b9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.63.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:93:c3:d3:a9:e1:06:d7:3a:17:99:b7:36:c7:41:4c:c2:
         30:1e:d6:57:b9:18:f7:15:cb:00:0e:41:14:8a:b9:1a:1a:45:
         46:cd:f3:ca:b3:a9:83:10:d7:ff:43:07:24:65:75:6e:58:60:
         a6:ec:02:e6:85:95:61:7d:25:c1:02:61:96:6a:4e:61:86:80:
         b8:1e:88:78:ff:19:e6:08:3e:c3:c4:6c:de:fb:03:29:c6:bd:
         3e:1a:92:24:8e:0a:52:c6:e7:55:8c:38:4a:36:62:50:3f:89:
         4a:c6:3f:a0:b8:c5:b2:68:0e:d4:d6:43:5d:f5:99:ee:b3:1a:
         1d:34:6e:6f:3e:35:d1:ee:e7:be:e1:7b:97:cf:02:6e:f9:0d:
         a3:6b:de:9d:c1:89:a7:ea:e4:26:fc:0e:06:96:cb:e0:18:8a:
         19:6b:21:47:a7:93:05:57:91:3d:1d:54:34:68:a9:21:8a:2e:
         1d:f7:ac:75:2c:cc:79:c5:ac:c9:89:23:32:b2:7a:12:b2:e4:
         42:83:99:f7:16:65:30:a6:c7:c3:14:a5:5a:32:c4:83:c8:74:
         7e:90:61:9d:9a:7b:ea:65:86:6b:d3:07:cc:de:ee:61:c1:b4:
         9c:91:ff:ed:14:ac:f6:e6:ea:8a:28:8e:25:22:9f:b2:e6:a8:
         59:1d:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:08 2024 by rpki-client on console-fra.rpki-client.org