Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa
File:                     56723a4c-1de9-3acd-814f-f735ade0459c.roa (raw, json)
Hash identifier:          qH0jai5Fh1NdD2YRVEESxm3RZtuYx5KI9lVezyOfkuM=
Subject key identifier:   C9:55:A9:CC:CF:B7:48:26:5F:C2:93:E3:19:72:52:80:D8:19:D0:30
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285847E78F683CFBAF86AE922A73A0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     28753
IP address blocks:        172.98.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:68:3c:fb:af:86:ae:92:2a:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=9d2ae49a-db90-4bef-8fbb-d7ceb59b710d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:8b:fa:a7:ef:73:b4:7b:98:e2:f4:fb:fd:
                    bc:14:43:d0:8d:7f:bb:7d:19:07:f7:46:dd:61:d7:
                    95:db:e2:62:cc:14:d2:a9:6c:9b:61:58:14:14:33:
                    aa:69:37:20:d9:10:f6:f5:75:ab:00:71:b5:c9:45:
                    5c:e5:b8:22:2e:ae:08:0c:d3:1b:0f:f7:40:ad:b1:
                    ad:2c:ab:a0:55:2b:4a:bc:e5:26:b6:87:01:4c:0a:
                    d6:8c:a5:77:9b:64:b7:ac:3b:2a:cc:d1:50:2d:f3:
                    0b:ca:0c:0e:e3:23:95:d7:98:44:f3:48:20:63:75:
                    26:f2:54:36:27:75:ce:3e:c1:9f:d4:ce:c0:0b:02:
                    b7:76:51:17:9c:72:7b:4e:62:62:e5:cd:17:2a:7d:
                    e9:cc:dc:1a:43:c4:ff:96:72:12:0e:52:5a:38:02:
                    c2:57:5d:b7:2a:6d:6a:73:ef:61:78:8d:0e:d5:e0:
                    e1:7b:f3:4e:fa:cc:57:29:c4:1b:f4:c3:88:d0:21:
                    47:56:88:09:b2:51:f4:b2:a4:e1:6b:87:f9:54:59:
                    5d:7e:89:ac:e0:7e:16:80:c5:45:72:46:21:84:51:
                    9d:d9:5c:04:ae:4e:3d:6d:41:11:a1:e6:5d:8e:69:
                    7d:26:ea:ff:ec:8a:f1:98:72:21:61:de:8e:50:a9:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:55:A9:CC:CF:B7:48:26:5F:C2:93:E3:19:72:52:80:D8:19:D0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:ef:cf:93:5d:50:cd:5f:15:b8:c4:64:66:3a:3c:49:ea:
         8e:d5:fd:f3:49:4c:05:6a:76:dd:a9:ea:e3:13:e5:4d:76:15:
         27:3c:76:ec:ff:01:9a:5c:27:19:c0:ee:2e:1c:ee:6f:da:f4:
         9d:f3:fd:eb:b6:3f:28:9c:66:cf:db:19:ed:91:99:5d:57:07:
         2f:cb:a0:e7:ec:17:12:66:a1:93:4e:61:9d:a4:f1:c7:b6:e6:
         f2:8a:76:d9:93:31:44:42:9f:3c:f8:4f:20:e9:1d:68:59:96:
         b1:31:32:4e:bd:f8:8a:65:4a:e8:c3:d1:46:2a:bf:ab:f3:54:
         1a:0f:d8:04:02:5f:7a:fb:f2:8c:47:cf:a4:0d:f5:6a:a9:90:
         42:eb:1d:01:dc:55:94:d1:59:4f:a6:0d:9c:26:58:06:44:29:
         f7:9c:26:a0:00:bc:8a:b8:44:ed:91:8e:f0:0b:dc:62:d6:34:
         77:74:3b:5c:ce:37:5e:6c:d5:3f:66:5f:3c:ed:4a:49:5a:c2:
         53:d8:60:24:67:b0:34:4e:ba:f9:f8:62:8e:62:73:10:af:ab:
         d2:69:fb:16:27:ba:9d:a0:6f:ae:cb:85:cc:dc:6e:00:33:9d:
         6d:35:51:90:0f:d0:70:8b:ed:5c:c5:f0:ad:6b:e3:ff:4b:5a:
         6d:59:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:46 2024 by rpki-client on console-fra.rpki-client.org