Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa
File:                     d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa (raw, json)
Hash identifier:          5tcMNvhu2DTaNzbONxg2o17QytFMK6u3McgsCZv08SE=
Subject key identifier:   DE:05:95:C5:63:B8:E3:91:7B:6F:81:AC:5F:91:5E:98:29:48:2E:DF
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285847ED24B89B95383F32F5046E00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     19691
IP address blocks:        198.37.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:b8:9b:95:38:3f:32:f5:04:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=02258016-793d-4002-b502-ebd6e00ec5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:68:56:af:36:65:f4:df:cd:c1:71:a4:d2:
                    e3:68:05:86:4c:16:0d:de:05:5e:c9:1a:4e:98:0a:
                    c1:b3:c1:77:f0:b2:0d:06:aa:d6:69:d4:85:e7:2e:
                    82:1e:ed:1d:44:ef:99:1c:f6:02:51:06:1b:d0:a5:
                    be:05:f5:8c:93:ad:45:f1:54:8a:42:5e:a4:cb:08:
                    c8:70:9a:7c:82:47:2b:d3:1a:43:40:8b:86:b2:e0:
                    98:ca:6a:a6:17:fc:59:aa:3f:36:4a:10:1b:01:5b:
                    52:f1:5d:82:a5:df:a0:58:8d:0d:d5:ac:78:13:75:
                    38:65:37:90:8a:3b:17:c1:2d:f8:d6:61:bc:fa:dc:
                    a7:d5:40:1f:eb:4e:84:5c:16:2e:b9:8b:56:0a:24:
                    3a:fa:86:bc:d3:cf:0e:22:c0:dd:54:6f:03:12:26:
                    60:90:b6:2a:29:af:a4:58:26:ed:a8:4a:0a:19:77:
                    45:ae:39:1d:34:e6:3b:58:58:b5:0f:6b:f9:4e:3f:
                    ae:06:fd:5b:6c:1f:89:dd:57:5a:5f:2f:57:1c:52:
                    82:1c:4b:8e:fc:c1:75:d8:f9:46:c7:f8:57:c6:45:
                    86:37:55:38:78:d0:3b:7e:6f:85:6e:27:f1:00:c3:
                    4e:5a:49:61:0d:ff:fc:82:79:e4:47:f0:fc:a8:c7:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:95:C5:63:B8:E3:91:7B:6F:81:AC:5F:91:5E:98:29:48:2E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d5e622f2-fb64-3a7e-b26f-c7bc5df411f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:53:43:4e:d4:9c:69:b3:bf:cb:03:61:bf:7f:0a:96:0e:4b:
         16:25:76:0f:d2:01:60:ae:42:80:11:8b:8e:6f:e5:90:71:80:
         d7:d7:c8:7e:a6:07:4e:9a:26:5d:88:d5:51:f4:64:2b:fd:9d:
         35:48:2a:03:85:d0:1e:a6:4b:f8:0c:22:14:de:4a:4b:d9:eb:
         1d:55:76:91:82:95:00:cb:a9:a5:2d:1e:3b:ae:52:05:8d:85:
         ce:d3:90:8d:67:cc:9d:db:b9:c6:3e:a1:b3:59:91:8a:c0:0f:
         9e:ea:cf:71:0f:86:9a:ec:92:f1:b8:0f:0c:57:ab:b1:d1:9d:
         78:e6:bc:d7:2d:79:fd:4c:77:89:ff:67:23:11:60:01:87:0d:
         3f:12:24:9b:f3:9e:fb:41:6e:cf:cd:f3:bf:4d:e2:d1:21:ba:
         f0:cd:8a:70:2e:1d:c3:ba:9c:3a:4c:b2:b8:ee:57:07:f9:e3:
         11:7b:5e:6f:3b:4d:b7:b0:65:aa:68:9c:7f:24:30:07:01:c2:
         de:55:06:af:6c:34:80:4d:90:d1:f7:57:71:81:5f:83:f0:04:
         94:eb:ea:c9:2c:56:99:53:e5:35:48:d9:0c:0f:7c:19:4c:9f:
         5d:da:91:db:6b:47:5d:32:4c:95:47:72:ca:78:3b:e0:c5:9f:
         91:73:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org