Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
File:                     5e3423c5-72cc-39a6-839a-0790366aef24.roa (raw, json)
Hash identifier:          O/b5P7l9pht6g0YFYXHlUKDnS+pKof1TRr29kYhcLmU=
Subject key identifier:   07:30:E7:2A:B4:22:AB:A2:8A:42:16:B8:BA:04:E5:95:C6:36:DE:CF
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F432858479C111F842CAA5A0FCB59CB80
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     53620
IP address blocks:        198.187.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:1f:84:2c:aa:5a:0f:cb:59:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=b40c81bb-1de2-46d9-9475-0d9ceb37e5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:53:a9:18:cc:da:64:30:3d:86:3d:c3:b4:
                    21:5e:fc:a7:68:4e:f6:da:aa:41:64:cc:81:14:f2:
                    24:31:a7:c1:7f:a3:51:7c:9b:e9:2c:a4:b9:8b:c7:
                    2d:84:e0:85:2e:64:86:9d:17:04:ba:9f:bb:89:fa:
                    25:16:d6:f0:9e:52:39:9e:03:9c:55:76:4c:d7:97:
                    f2:69:df:e4:5e:63:88:ef:e5:4a:5d:9d:c6:cc:e1:
                    7d:c9:6b:27:cd:58:9c:a2:cc:00:ef:5a:9b:54:0f:
                    00:5a:55:dd:f3:e1:22:9e:cb:5c:f6:16:b3:d8:a2:
                    15:fe:5d:19:e2:90:bb:de:c7:ff:8e:a8:d4:ba:7a:
                    48:a5:79:ae:01:93:ec:c6:e0:5b:27:4d:aa:1c:05:
                    61:21:62:0a:6b:0f:bd:93:77:10:c1:d5:56:4d:43:
                    bf:62:8a:fd:8a:55:15:f3:35:36:64:85:ae:56:d6:
                    f6:c3:73:09:07:4a:be:43:94:8d:b9:dc:e1:32:4a:
                    eb:1c:b2:e0:09:74:78:b5:4a:56:96:6f:61:a8:06:
                    c6:5f:27:b7:9c:a7:7c:38:ad:81:08:e8:25:4e:bd:
                    87:0d:ab:ed:93:0b:41:31:81:7f:78:79:49:6e:12:
                    58:89:fb:f5:68:e6:05:55:7a:8f:be:93:87:7e:e7:
                    b1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:30:E7:2A:B4:22:AB:A2:8A:42:16:B8:BA:04:E5:95:C6:36:DE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:7c:bb:5e:fa:5b:d4:7e:ac:c0:fe:2d:44:f9:a2:f1:fc:
         7f:39:cd:d9:4e:d7:c1:3c:e3:05:36:4d:e5:f2:1a:73:a0:3c:
         31:61:c6:b9:c9:5a:95:a7:b0:3b:8d:2a:64:56:51:2e:72:fe:
         e7:78:b9:24:46:dd:00:00:fb:a6:77:34:66:81:b9:1a:41:d5:
         08:0f:fb:4a:e7:28:f5:e2:13:51:06:3b:39:61:18:dd:b8:d5:
         9f:6d:89:5c:8d:39:c8:9a:be:9d:2f:a7:6f:92:f2:e6:ec:b6:
         ee:e2:78:cb:c9:ff:c6:ed:f0:f8:ed:de:4c:4c:60:f5:d5:eb:
         72:7f:3b:b8:37:b0:61:bf:64:95:53:04:2f:a8:ac:9b:97:19:
         f7:a3:04:2b:1c:c1:b3:0f:46:87:50:a3:fd:d2:e0:20:2c:95:
         fb:4d:35:2f:76:61:9e:a7:42:c7:ca:cd:40:de:39:ca:f3:58:
         54:df:38:59:ef:34:70:62:81:8b:2c:99:10:dd:a9:2e:2b:13:
         0b:6f:98:66:25:aa:aa:db:f4:56:1d:82:77:28:c9:11:7e:d6:
         87:91:6f:a5:32:7b:9d:04:40:da:06:3c:2c:fb:97:db:86:ea:
         50:bf:67:c9:63:66:9f:ee:4d:fe:52:ba:8b:42:4a:9d:c3:7c:
         5c:51:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:21:01 2024 by rpki-client on console-fra.rpki-client.org