Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
File:                     ade61511-8398-3e2e-b0df-4582caf49fa7.roa (raw, json)
Hash identifier:          Kbz3QsT8Kg8XqEO6XMOcHEvgvTPpoaFFmIkHOqZYgz8=
Subject key identifier:   58:7E:8E:F2:76:9A:2E:2D:9A:07:A5:45:F4:67:5C:98:34:9E:56:51
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F43285847C906E22FA08D2F25A3DEC1C0
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
Signing time:             Wed 06 Nov 2024 03:31:18 +0000
ROA not before:           Wed 06 Nov 2024 03:31:18 +0000
ROA not after:            Tue 04 Feb 2025 03:31:18 +0000
asID:                     395567
IP address blocks:        198.73.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c9:06:e2:2f:a0:8d:2f:25:a3:de:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Nov  6 03:31:18 2024 GMT
            Not After : Feb  4 03:31:18 2025 GMT
        Subject: CN=e2b88ecd-ebf8-4ae1-bd9c-8b00307ec5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:69:3f:d3:6e:c8:1e:06:26:64:75:d8:34:
                    e4:3c:6a:3b:c2:b6:ce:e3:77:ad:f6:96:b8:d2:0c:
                    ae:8f:26:e7:40:c1:a9:42:b7:67:33:d3:4c:da:05:
                    eb:74:74:4d:87:68:31:c6:28:81:10:60:20:6e:82:
                    80:92:7b:9e:d6:48:56:62:4a:df:42:b0:fb:b5:ac:
                    9c:d7:19:94:fe:82:c9:c7:34:3d:42:46:8c:16:aa:
                    bb:ce:dd:10:1a:23:1e:ca:f6:f2:3a:44:e1:9f:c5:
                    4d:af:0d:69:87:3a:58:49:49:95:f6:2d:7d:d3:f4:
                    3c:f2:ee:81:44:8b:17:ab:25:b3:24:d3:9a:6d:94:
                    4f:70:d3:92:dd:05:fc:f1:9f:77:5b:c5:f7:44:0c:
                    57:28:64:f7:31:0d:f1:d1:43:69:0f:6f:b5:f9:75:
                    45:22:d4:25:98:82:cf:3d:59:e3:14:ae:6c:4c:09:
                    17:6c:6c:1b:31:17:29:02:12:31:5d:93:30:46:32:
                    16:d9:4d:56:1b:1e:6c:f0:64:bd:1c:68:f8:dd:42:
                    08:1f:59:1b:84:8c:87:d8:d0:e5:b8:a4:95:45:da:
                    69:6e:72:9b:ce:bc:e8:73:19:cd:a5:50:b0:06:cb:
                    44:a7:2c:b7:84:b3:c2:d1:7a:01:57:92:da:8a:9c:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:8E:F2:76:9A:2E:2D:9A:07:A5:45:F4:67:5C:98:34:9E:56:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:1f:bc:ee:2b:b8:88:eb:b8:b3:2f:4f:d3:f3:4f:96:cc:
         2d:c4:32:25:16:50:75:32:12:17:1e:6f:19:db:50:4e:21:07:
         ee:14:90:e6:0b:52:36:a4:84:1e:22:c4:9c:64:4a:1f:7e:ce:
         02:99:aa:91:b0:a0:95:e7:db:cf:63:6c:1f:bf:5f:a6:96:94:
         22:9c:f9:34:5b:ee:ab:d1:fa:a6:18:0f:f5:11:a8:a7:6e:1d:
         0b:0e:58:2b:7a:a8:d3:15:1a:4e:05:72:a8:1f:e0:57:e9:b2:
         03:8e:b7:41:dc:a4:c6:db:25:30:4a:c7:23:a6:d2:9f:c7:a0:
         75:94:11:f2:b8:65:72:27:a3:a0:4e:37:94:69:0b:b6:8c:bc:
         23:60:87:89:8c:b2:84:42:9f:91:13:28:86:f9:58:38:27:51:
         e1:ef:a1:f9:74:8a:56:54:ab:3d:af:f1:c8:26:48:d8:bf:c5:
         0d:de:ee:4a:b4:de:d5:47:68:52:dd:9c:c6:26:f8:34:ef:5b:
         c1:28:16:b9:91:df:72:97:ec:56:41:8c:2f:76:59:68:f4:1b:
         ea:88:ba:eb:11:f3:72:61:26:77:cf:12:75:87:c5:94:f5:0a:
         59:ae:e8:6d:48:bd:ac:5a:48:12:22:2c:4f:09:f0:1b:fd:39:
         17:49:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:31 2024 by rpki-client on console-fra.rpki-client.org