Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa
File:                     2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa (raw, json)
Hash identifier:          121w8zw4jH1M8ESSGQhiehBq2szXvb9/t8xytNBzRoc=
Subject key identifier:   13:06:A6:8D:C7:BF:20:57:40:47:72:1B:50:3C:0F:2B:4F:1A:F0:1E
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285847537B5E5E3E3191394FEA18A0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     14537
IP address blocks:        198.37.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:5e:5e:3e:31:91:39:4f:ea:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=d9564b1b-590c-45a2-94f7-c07ad7188049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:c3:b4:db:e5:21:98:06:ba:ef:03:ad:78:
                    55:61:85:87:eb:c6:c5:38:38:a0:93:bc:11:28:20:
                    64:6b:4f:a6:59:9f:da:cf:40:22:9e:0d:28:24:0b:
                    1f:1f:19:2a:bc:bd:95:8a:0d:d7:78:d0:d7:75:df:
                    65:19:c3:d3:7c:4d:90:f1:06:70:84:14:6a:b4:d4:
                    95:2f:32:45:87:1b:21:79:f8:44:7f:fe:10:5e:27:
                    47:cd:21:21:7f:89:0e:c1:d7:3e:df:88:a3:55:4f:
                    77:2d:06:43:5e:bd:fa:14:c4:c7:ad:26:5e:38:18:
                    7e:e7:4b:be:67:68:82:ac:0f:49:f1:41:00:79:6e:
                    5c:11:56:73:a3:a6:35:54:1c:3a:ba:a1:5b:59:37:
                    b2:d0:55:35:46:66:da:8f:17:92:d1:46:e3:3e:3d:
                    67:7a:dc:a6:7a:45:08:e3:eb:37:05:64:b7:a9:d1:
                    9e:dc:c4:fc:94:05:81:8d:c9:72:b8:22:b1:8d:6c:
                    c0:12:92:b3:73:10:2b:7c:55:0d:ed:10:28:68:a7:
                    b1:b6:c1:7b:d6:26:bb:f2:c8:b6:7e:14:9f:61:1e:
                    67:86:61:aa:e0:81:1b:8b:de:0b:5f:43:1c:2d:ba:
                    f5:cf:65:db:5d:9e:51:34:57:62:17:3c:da:b1:22:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:06:A6:8D:C7:BF:20:57:40:47:72:1B:50:3C:0F:2B:4F:1A:F0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:73:a1:9b:5b:25:90:be:9c:ca:dd:99:4f:55:88:b6:bf:cb:
         22:eb:ac:89:f9:b2:81:63:c9:7d:fe:af:5c:c7:42:97:80:59:
         3f:0e:73:59:cd:ca:a1:37:4f:6a:18:6b:9b:44:f5:ba:f9:ae:
         90:a0:59:6b:4c:61:fa:8c:16:2b:9c:c1:3d:34:b6:ee:e7:28:
         a7:fc:74:99:40:68:64:a4:39:76:fe:71:20:e8:9b:5a:03:fb:
         40:67:c5:c3:4d:b9:d1:60:1b:61:57:c5:be:11:d6:2f:e6:6f:
         dd:94:07:e7:97:20:f2:10:e9:72:09:3b:3b:a1:29:8b:63:6c:
         a9:61:35:c4:75:9e:8b:f1:27:70:05:f0:02:06:1e:19:85:3a:
         a9:a6:c7:da:2e:72:05:4c:f1:c8:39:ed:ba:1e:46:32:24:5d:
         73:12:58:d5:90:00:d0:5f:12:a4:06:5b:3e:81:3f:86:ac:1d:
         75:5e:81:f4:a0:49:a7:d8:b9:e8:b3:5c:19:73:f2:33:1b:da:
         f6:d6:c3:42:ee:79:7e:33:bc:f8:04:88:0c:9c:c3:c8:97:0d:
         8a:cc:1c:ff:71:29:60:5e:69:aa:7a:45:c2:2e:24:b4:4c:92:
         20:ca:40:fb:32:6e:92:26:a9:20:8a:ff:c0:35:50:15:35:53:
         08:88:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org