Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
File:                     25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa (raw, json)
Hash identifier:          eUydYdUkl0fhMvCPwPbKEFBhJ0pZ17isJ7V1l4KPEGw=
Subject key identifier:   17:86:0A:72:78:20:33:B8:7E:26:E5:8A:18:4A:BA:E2:86:ED:DF:88
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285844F465554A4411C757A7733C00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     701
IP address blocks:        198.37.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:55:4a:44:11:c7:57:a7:73:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=2332d03a-e35a-4b29-9b64-473752c90318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:3e:32:1b:31:7b:03:40:9d:67:52:1b:91:
                    56:88:db:07:ce:23:f7:e7:45:6b:a3:e5:1b:b6:11:
                    b5:d2:e9:a4:15:9b:f3:f3:a9:ea:d0:87:3e:88:59:
                    19:a0:d0:f1:07:51:6e:28:2e:fa:90:e3:39:7e:de:
                    47:5a:ad:35:75:89:fc:1a:50:aa:d4:f0:87:c7:58:
                    77:e3:58:73:d3:7c:f9:78:7d:a1:7b:90:9f:b3:f8:
                    19:00:66:08:fe:71:ab:3e:ed:20:1b:25:d9:52:24:
                    42:56:57:4b:d0:bc:63:39:b4:c3:40:44:3b:f7:ee:
                    2a:74:d0:b7:97:bc:8b:f7:30:4e:4c:3a:ee:cc:68:
                    66:9b:11:52:80:86:44:00:3b:10:da:65:fa:92:76:
                    6b:ee:36:32:fb:82:6a:75:17:7c:3d:f2:ac:d0:6c:
                    a8:e2:23:eb:82:97:dd:81:ba:c5:24:d8:8f:44:45:
                    49:f8:5e:e7:3d:c0:07:27:1c:a1:85:cc:e7:b0:e4:
                    2c:46:da:40:47:46:24:4c:b9:ce:5f:06:56:b4:c8:
                    46:8f:01:c9:43:18:62:dc:24:c5:d0:f0:1d:28:87:
                    46:98:75:bd:4b:00:48:94:74:98:18:99:e9:d1:ec:
                    b4:a4:80:60:2e:b9:50:a2:b7:29:02:a8:03:85:04:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:0A:72:78:20:33:B8:7E:26:E5:8A:18:4A:BA:E2:86:ED:DF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:48:de:d7:32:da:c5:f2:af:a2:95:37:c6:10:8b:b9:c1:
         16:91:80:58:00:94:84:f6:7b:a5:8e:6a:fa:1c:5d:5e:5a:f6:
         32:69:b9:c1:8b:f9:48:33:c2:39:a8:b6:2f:0c:58:90:8c:f6:
         07:41:da:1a:3b:ad:ce:02:fa:25:c5:3b:ad:88:b7:ba:4b:3e:
         80:8a:ce:60:68:c8:ec:ac:00:31:25:9c:19:07:a3:a8:7f:ff:
         ae:8d:ec:17:08:37:31:fd:a6:f3:45:e6:2e:fb:7f:bb:a7:13:
         96:11:d2:e3:a3:a6:b6:d0:50:04:57:f4:8a:3e:0f:f9:2a:bd:
         88:94:fc:a7:88:30:7b:93:7b:18:aa:c9:c7:d7:2b:f9:2c:eb:
         b2:ec:84:18:1f:46:dc:8b:8d:17:f5:2a:32:8f:a4:ea:66:94:
         62:12:50:d6:6a:74:21:69:28:51:da:e6:f9:16:69:e1:c3:f8:
         43:64:db:21:f4:fc:06:ae:d4:fc:97:e9:09:da:f7:09:16:5f:
         99:86:ad:00:96:d3:a6:9a:f4:af:66:ce:61:82:a1:64:1a:7d:
         88:70:e2:4b:3c:67:06:c5:af:84:58:cb:a2:66:ce:f9:2c:14:
         d1:f8:85:18:f2:86:ba:6c:60:db:f1:60:8e:9c:7e:e5:c8:cb:
         6d:72:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:44:09 2024 by rpki-client on console-ams.rpki-client.org