Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2792a309-34c1-310f-9fc5-c7181c58a235.roa
File:                     2792a309-34c1-310f-9fc5-c7181c58a235.roa (raw, json)
Hash identifier:          GqsbaFhgi2AOUnRcKUXXXRKLzwkn3iL+dI05zTQfMHY=
Subject key identifier:   18:53:18:79:80:37:1C:6D:CA:0C:30:0C:50:B5:7A:2D:1F:DD:01:9E
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F432858459368944C8A490C86A38E3000
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2792a309-34c1-310f-9fc5-c7181c58a235.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     19691
IP address blocks:        198.37.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:94:4c:8a:49:0c:86:a3:8e:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=3fcbcb15-8747-43e7-b146-1173ab1285ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:5d:fc:fb:c5:9d:b1:59:bf:83:b3:1e:85:
                    ca:24:a3:ec:2e:83:bd:1f:8c:d4:ac:38:6a:72:66:
                    1d:c9:ed:6f:1e:3c:2e:e2:70:f4:86:7c:62:09:18:
                    04:d5:16:64:e7:7b:05:e3:44:5f:b2:97:49:53:0c:
                    6f:a9:b2:52:ee:9b:62:93:ea:ea:3a:ac:89:d2:02:
                    a0:8e:7c:96:5b:d7:16:ad:b8:a1:6c:03:9e:77:d1:
                    08:ae:74:b5:b2:df:4d:ee:72:ab:f9:b0:09:8b:04:
                    0d:5c:b0:75:a2:f7:1a:55:91:a3:7e:1c:9c:5f:6d:
                    db:c7:b8:98:1c:32:69:3d:72:1d:e9:aa:1b:7d:b9:
                    1c:cd:93:6d:b5:f4:56:11:98:89:33:9f:9d:51:8e:
                    72:9e:0b:83:a6:86:12:73:28:40:ad:97:34:43:a0:
                    dc:98:0b:d6:88:2d:13:b6:1a:53:95:a1:d8:70:1b:
                    22:7a:32:82:05:fb:19:d2:51:54:08:59:9d:3b:8a:
                    a9:7e:33:ab:f4:33:07:7e:7c:34:ce:34:da:b5:17:
                    76:50:1a:a8:42:4a:d2:e6:dd:ea:cb:8e:36:c5:02:
                    b2:00:08:a4:4f:41:7f:d2:bb:30:0e:fa:43:bc:36:
                    ef:bc:7a:ed:71:f1:62:43:57:74:03:14:50:69:6f:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:53:18:79:80:37:1C:6D:CA:0C:30:0C:50:B5:7A:2D:1F:DD:01:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2792a309-34c1-310f-9fc5-c7181c58a235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3d:64:8a:8b:6f:16:45:de:75:aa:11:18:3d:87:5a:65:ba:
         45:e8:58:62:a7:01:17:78:db:93:24:98:c3:d3:ec:ef:e2:01:
         50:c8:65:33:91:2f:0f:27:3d:f3:fb:a3:ad:e8:77:9b:06:84:
         d7:87:00:37:8f:4a:28:74:4e:1a:e1:8a:6f:a5:c2:d7:23:e9:
         bb:d5:5b:58:1e:bf:9a:d4:7f:ed:2a:fc:5c:16:bb:d6:20:03:
         07:17:48:75:3c:c6:8a:b7:0b:3b:cc:87:81:b9:bf:33:80:2d:
         d3:d4:24:d4:2c:74:99:4d:92:61:b9:0b:51:7e:34:6d:38:82:
         7c:9a:72:16:a4:4b:fd:54:dc:50:6d:08:a2:fd:f7:3b:78:ba:
         7a:49:44:d7:3b:10:8e:cf:33:35:6d:65:26:6f:5b:55:4b:f7:
         25:d3:80:63:a8:0b:fa:5b:31:0f:40:38:52:09:dc:de:fe:ac:
         f6:4f:be:65:5e:fa:c9:e9:6e:2e:40:e3:77:05:e3:1c:33:8d:
         e2:5a:3e:ff:4a:44:51:af:e4:46:8b:30:fb:d3:ca:ea:6a:9e:
         02:f7:7e:3b:a2:38:20:6a:b2:9f:17:55:72:85:a9:0c:0a:8d:
         b7:c3:2b:75:9e:cc:f0:e0:d8:55:25:db:da:99:b2:95:58:11:
         de:81:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:50 2024 by rpki-client on console-ams.rpki-client.org