Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/905969fd-c59a-3f23-b7bc-42364f144e84.roa
File:                     905969fd-c59a-3f23-b7bc-42364f144e84.roa (raw, json)
Hash identifier:          nId8hmiQy8YCgXOZTxesrkgyhAOaI1ay97Sq37CfGXs=
Subject key identifier:   12:FF:28:CB:74:9E:A6:E4:D6:40:A9:66:6B:B6:22:33:62:14:5A:75
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285847BEF6C8C92FF940F5BF394C40
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/905969fd-c59a-3f23-b7bc-42364f144e84.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     19691
IP address blocks:        198.37.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:c8:c9:2f:f9:40:f5:bf:39:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=40710232-03bf-4978-a821-fb197311d916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:39:95:4b:8f:e8:0b:17:84:f7:23:b6:bf:
                    fd:86:04:12:ae:88:d4:77:62:38:10:f0:41:6e:fa:
                    6e:e8:da:33:0a:ee:59:fe:29:2c:0b:f9:ae:54:54:
                    53:af:fb:1a:8f:d9:09:3d:4f:b0:75:a6:c1:ff:2c:
                    12:be:9a:0e:ce:24:4d:59:5e:3e:49:73:45:4b:38:
                    7f:ae:d3:e3:d4:2c:c4:d1:3e:20:f4:97:ef:ad:6b:
                    4e:dc:ed:62:e7:46:1e:51:42:61:27:fd:a8:63:5c:
                    5a:86:c1:26:b3:3b:f3:c1:33:21:6a:a0:bd:19:4f:
                    a5:41:e5:68:9b:ac:da:bd:9b:0f:9d:b3:fb:77:5a:
                    58:7a:ee:c1:85:d8:79:0f:b6:dd:43:a8:ca:2f:1c:
                    29:42:9e:cb:14:4d:16:fa:2c:51:fe:8d:68:a1:05:
                    89:c4:36:f3:fe:1b:36:f2:12:97:0f:ab:3a:e5:41:
                    62:10:7d:66:a4:2e:58:7d:ef:38:4e:67:67:5e:81:
                    23:a8:f2:83:ed:7a:7c:3f:5e:b6:01:c5:8f:4c:02:
                    7d:cd:96:68:35:a9:21:06:d2:dd:55:15:f9:b9:73:
                    92:c6:22:64:e1:60:83:49:17:76:46:71:1d:60:7e:
                    d4:55:e5:bc:f1:d4:2c:0e:e0:e7:e5:01:07:f4:2c:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FF:28:CB:74:9E:A6:E4:D6:40:A9:66:6B:B6:22:33:62:14:5A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/905969fd-c59a-3f23-b7bc-42364f144e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9b:6c:43:10:2e:d3:c3:fd:9f:59:86:6a:1b:66:9c:a7:c6:
         99:62:b5:00:d2:d6:ff:89:bb:cd:e0:6d:46:19:80:60:e6:ac:
         f9:e8:f6:a9:94:a2:e9:d9:6b:99:b5:1c:67:73:54:5f:ab:0e:
         90:f6:a9:03:36:b6:d7:3d:05:8a:91:ab:d8:19:ac:5d:92:cd:
         52:45:62:5e:a1:9d:ea:a0:e2:e3:ab:e1:ea:95:be:dd:19:38:
         fc:53:3b:c7:6f:91:cb:99:5f:a3:59:4a:ca:20:06:72:cc:33:
         ac:eb:81:4a:6b:18:98:cf:21:f1:b5:34:f6:0a:59:9a:73:9c:
         e2:3c:16:e8:a0:da:a0:be:14:13:60:c3:7f:af:aa:55:96:93:
         8b:43:07:ec:ff:e7:ea:54:ca:6b:ea:43:eb:df:2b:18:5e:28:
         0f:43:9b:b0:c8:39:6f:10:5d:7b:72:a8:50:76:2c:c0:24:e3:
         ce:76:f0:7f:1e:2f:c8:ca:c6:a9:f7:83:d5:be:89:9c:9c:30:
         34:7b:0b:d0:3b:92:05:dd:51:f1:f0:e5:9e:06:15:c3:32:50:
         58:39:91:f8:82:3d:97:8e:d5:b3:ba:a3:05:5d:30:3e:79:e6:
         8b:d1:90:43:ae:3c:e3:2e:2f:cf:2b:d5:fd:2f:73:1a:d2:39:
         69:1a:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:43 2024 by rpki-client on console-fra.rpki-client.org