Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
File:                     25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa (raw, json)
Hash identifier:          1Aqy82aFYCwBNvLH3Cj0xNQFeYpWago2Eh7rc0ek9Hg=
Subject key identifier:   6D:20:00:BD:A4:5C:BD:BA:07:29:10:CC:B0:70:83:B9:C3:75:4A:39
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285847924BD3AB6C5EF03B8B93BE90
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     701
IP address blocks:        198.37.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d3:ab:6c:5e:f0:3b:8b:93:be:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=c44ba41d-73a7-4e73-998f-432bea0ff130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:d3:67:8a:b5:23:de:5b:b6:7e:42:b2:54:
                    6a:ee:e2:5f:f6:a1:8d:1f:c7:9e:c2:a3:2b:5a:7e:
                    64:95:9f:91:1a:b6:8c:91:05:57:9d:8a:b1:b2:32:
                    ee:37:12:a8:4f:66:a8:a4:82:ed:d4:8c:61:2b:9c:
                    2c:89:5e:40:79:da:23:53:b8:74:b4:f6:84:9d:15:
                    9a:61:f2:fa:dc:86:75:64:43:45:e1:ee:6d:04:99:
                    59:9f:b1:c1:ae:69:65:cb:69:45:a7:c8:6d:67:34:
                    dc:9f:7d:53:ce:81:57:f2:4f:a0:f1:97:f8:a6:ce:
                    91:2f:6c:3f:32:9d:c5:a8:f5:77:09:e8:25:cd:3a:
                    7a:85:ca:d3:2d:b6:03:39:eb:37:c0:01:d5:a1:0c:
                    e5:c2:44:97:96:2e:c5:ce:e3:57:8f:e4:86:75:5c:
                    d6:54:4f:71:d7:50:c6:d0:7c:08:23:59:79:3a:34:
                    85:36:31:38:44:33:76:cc:dd:17:1e:60:c5:ea:f0:
                    3b:80:43:87:c9:0c:e5:a2:6e:0f:19:61:01:f5:10:
                    99:e4:cb:b9:c9:92:77:b9:10:e4:da:ac:41:d9:a4:
                    91:aa:95:06:8f:fb:69:79:ca:2a:d7:7f:90:90:6e:
                    7d:46:e0:fe:7c:01:0f:49:db:ba:a8:a9:fb:df:11:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:20:00:BD:A4:5C:BD:BA:07:29:10:CC:B0:70:83:B9:C3:75:4A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:39:65:7b:15:82:a9:80:62:38:1e:59:59:92:f1:53:b0:54:
         d3:22:d8:98:74:d8:f7:9d:cc:62:9a:d3:4a:58:5f:cd:3f:a7:
         d9:07:b0:af:5c:ac:98:ef:f6:03:18:77:62:d4:59:52:33:bf:
         97:0e:b7:1d:c4:e4:6b:1a:bb:ed:17:aa:45:60:6d:e0:84:ae:
         83:84:e0:f4:49:69:d1:b5:c7:d7:e8:26:96:9f:31:03:1e:da:
         c9:98:af:60:e6:60:ea:ac:b4:22:8b:a5:66:02:05:b3:39:6f:
         da:d0:ca:15:c1:2d:53:b0:b3:e4:2c:f8:91:48:01:2f:84:51:
         e4:46:aa:9d:15:73:f9:a6:54:08:a3:17:17:99:95:63:a9:1e:
         cd:89:5d:01:3a:ee:62:85:05:fc:67:48:90:6b:f9:d9:7a:0e:
         5f:72:0d:89:76:3b:16:81:f0:ee:24:0b:4d:48:c3:69:2d:f3:
         dc:19:e4:1f:33:d9:13:7c:0f:fa:70:7b:af:f7:9b:40:8c:92:
         a4:e7:ff:b0:d5:b9:72:c1:e8:6f:d4:60:fe:2d:ae:3f:c1:8d:
         bc:ce:a9:82:56:cd:ce:8f:a4:9c:01:d1:0b:74:e8:f6:87:a5:
         37:50:f8:a0:04:c3:91:f5:58:e1:a0:9d:0d:68:9b:62:37:97:
         2e:d5:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org