Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/8e5f3057-57fe-3398-a7a0-ade567ef8def.roa
File:                     8e5f3057-57fe-3398-a7a0-ade567ef8def.roa (raw, json)
Hash identifier:          mvhS+XosutJo4nN6IyXFCthFWU++MfHI5R0Bob4yIKc=
Subject key identifier:   17:95:35:02:C2:3A:85:28:2F:DF:26:CB:15:5E:AE:8C:83:4A:34:0D
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285847C8D9EB37D026256B1EC4C880
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/8e5f3057-57fe-3398-a7a0-ade567ef8def.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     19691
IP address blocks:        198.37.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:eb:37:d0:26:25:6b:1e:c4:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=a082fa96-bbf0-4ff3-97a8-29b3ecdb85df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:90:a0:f4:a9:a6:57:31:f2:82:c2:ef:40:ee:
                    b8:dd:8b:3f:d2:96:1f:ce:e9:95:fd:6a:d8:6d:2e:
                    ab:09:68:24:bc:7a:53:67:5e:c7:db:81:ea:a0:a8:
                    38:82:5b:65:6c:d6:89:09:bb:ed:e8:b6:c8:ed:1c:
                    8a:bb:5d:c9:42:18:d8:84:86:20:43:57:2c:a0:7b:
                    11:28:65:11:6f:48:9f:26:12:f8:bc:fd:a6:07:90:
                    d6:55:58:e6:3b:94:6a:fe:64:d7:fa:e2:e1:55:87:
                    87:36:c7:76:8d:2d:f6:d0:58:0a:4e:79:c8:7b:db:
                    5a:21:2d:23:29:58:23:1e:0e:23:6e:92:47:e1:76:
                    4f:e7:ab:ee:49:d9:76:34:dc:b6:29:e4:e1:b6:33:
                    91:ae:b9:57:7b:f5:15:c0:61:a3:b7:77:f0:ed:5b:
                    f9:dc:20:f6:02:58:4e:89:16:3f:bb:9d:d9:a7:bf:
                    60:51:66:66:3a:9f:a4:62:cc:39:5b:aa:e1:47:92:
                    fd:0f:6d:10:94:3c:19:ed:17:74:66:f3:99:a0:a4:
                    0a:9c:89:f3:2f:0e:71:1c:10:d0:9c:cc:3f:24:1a:
                    58:23:5a:10:eb:ce:fb:69:a2:a0:1d:8a:8f:57:3d:
                    29:34:fc:ca:5e:39:b6:71:97:eb:b3:38:98:67:7f:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:95:35:02:C2:3A:85:28:2F:DF:26:CB:15:5E:AE:8C:83:4A:34:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/8e5f3057-57fe-3398-a7a0-ade567ef8def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9f:67:7d:30:bb:d0:27:cc:7e:d4:e6:51:23:20:ed:38:cf:
         33:26:74:ac:75:ef:d2:c3:aa:b2:d1:65:75:82:56:35:a8:8a:
         90:06:e5:cd:1f:0a:2e:46:3c:25:3a:44:3e:7b:df:54:41:d6:
         9c:96:eb:ce:55:7f:11:c8:e1:63:c1:a5:9e:ab:57:65:8c:79:
         51:c3:2d:5f:a9:ce:9f:d1:48:02:44:69:4e:fb:e6:24:bb:75:
         4a:25:c4:dc:86:26:d0:23:a5:e3:03:3b:38:06:c9:3b:2e:3d:
         2e:35:e9:77:54:90:a6:13:ad:36:62:9f:ba:d6:5d:23:35:30:
         b7:2a:52:2d:ef:76:8b:7c:24:96:74:f7:b4:5c:fd:ac:7f:af:
         f9:7b:b9:50:ab:4d:e1:45:70:c6:65:44:2c:d2:da:95:ed:88:
         aa:aa:75:9e:ac:76:9b:27:a4:d9:0b:75:83:5b:b8:32:9e:ac:
         7d:a9:c6:64:66:73:34:a9:46:ab:fc:48:f2:17:26:09:9b:c6:
         a6:e8:fe:09:91:9f:7a:2d:46:65:96:46:e6:20:52:ac:f3:e7:
         2d:59:1e:2e:11:a6:72:25:e2:0d:e2:57:cb:92:e9:00:87:f6:
         84:d0:d3:86:83:3a:14:ba:3b:7b:54:32:63:1c:1e:2e:95:70:
         72:39:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:40 2024 by rpki-client on console-fra.rpki-client.org