Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e4e49b0-cfab-376a-bd5b-0bfb01e00a2a.roa
File:                     9e4e49b0-cfab-376a-bd5b-0bfb01e00a2a.roa (raw, json)
Hash identifier:          AkBeycX3O8IP7fbtyj5ez3DKWyUu64NMn/kJ6+B+xbI=
Subject key identifier:   5C:C9:F0:54:C1:FE:FD:31:35:37:8B:C7:C0:D2:2D:BB:64:7D:3D:E7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847CE6F3984BA5DCB5C6B8C6C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e4e49b0-cfab-376a-bd5b-0bfb01e00a2a.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     8111
IP address blocks:        198.166.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:39:84:ba:5d:cb:5c:6b:8c:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=a397f442-f2ee-45be-a8ed-f3da93e60421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:dd:29:69:d1:08:d7:77:28:17:41:04:82:
                    09:7b:4e:ba:68:9c:c6:ec:c9:a3:65:6f:04:6e:58:
                    42:9b:25:f2:1e:76:95:14:e7:61:1c:c6:ae:12:11:
                    be:0e:b1:74:2d:c3:11:e5:dc:49:4f:33:a0:db:53:
                    49:61:55:69:ac:fc:d3:49:aa:fa:bb:0b:80:b3:10:
                    0a:5c:9f:74:8b:53:c5:fc:20:d7:8d:90:02:51:6a:
                    a6:09:34:6a:2b:8e:b6:73:59:15:b5:80:b3:de:28:
                    a7:6c:fc:0d:97:08:a5:41:c2:75:3b:21:cf:2c:96:
                    e5:6f:15:8e:a2:62:71:c4:35:88:f8:60:78:c1:4c:
                    37:48:0c:18:d3:34:2c:6e:d3:89:bf:d5:c9:41:d9:
                    47:6e:59:7c:ea:03:cf:c6:3f:86:9a:29:6a:61:7c:
                    83:bc:8e:d1:2a:2f:b1:a5:49:a0:f9:d2:6f:59:53:
                    08:f2:e4:90:21:ba:89:10:2e:1f:3f:8f:88:57:dd:
                    53:7d:1a:5d:ab:9b:d8:40:7b:41:09:33:d6:bc:2e:
                    6a:2f:8b:86:1d:ef:76:3b:33:ef:e1:e7:17:23:ea:
                    9f:84:f5:ba:49:bb:f7:3c:41:a5:86:22:df:13:40:
                    7f:a7:34:f6:8b:55:e4:f1:32:68:01:25:ed:5b:77:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C9:F0:54:C1:FE:FD:31:35:37:8B:C7:C0:D2:2D:BB:64:7D:3D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e4e49b0-cfab-376a-bd5b-0bfb01e00a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.166.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:c0:b9:46:af:8c:c1:35:08:e1:b9:05:eb:c6:54:d9:a4:
         d3:d4:76:2f:eb:85:a5:7b:41:cf:4b:a8:aa:dc:21:fe:33:62:
         18:46:4e:0e:01:51:d5:e9:2e:32:c5:e8:38:9c:1c:a7:ff:20:
         45:0b:31:d4:9b:47:d7:04:06:32:77:af:21:58:85:52:fb:6c:
         6f:02:84:f8:ce:3c:27:48:fc:4b:a9:66:79:98:e2:f9:9a:e2:
         0b:09:38:3a:c3:b9:1a:4c:3a:62:71:c6:73:d5:0b:35:56:ba:
         a5:44:bf:fa:18:d3:cd:3d:89:e4:48:d8:1c:c2:d2:78:26:0b:
         54:f3:56:b3:06:62:ea:1e:0c:62:c4:49:6e:70:8e:c7:56:8c:
         50:33:ba:40:26:b6:ed:78:b5:91:27:ff:ed:02:43:88:d5:28:
         fd:cc:65:70:5a:77:3a:42:d4:d9:a0:87:eb:4f:6d:72:9f:b2:
         6e:7e:56:85:93:c2:b8:6b:e1:ba:65:a9:56:e8:e5:7e:25:d5:
         d4:65:84:da:6f:78:1a:a1:fd:70:de:ed:15:f7:b4:7b:f3:18:
         61:82:1f:3d:c1:45:a1:83:8f:2e:9b:26:32:24:ff:de:2c:f4:
         38:70:1a:b3:86:01:6a:2d:3f:b9:41:5b:53:20:0d:dc:3d:4d:
         fb:ca:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org