Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa
File:                     7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa (raw, json)
Hash identifier:          TfUftuar/Q2tyjx9L4U++uXmOIlupox+YZCEV0VLflU=
Subject key identifier:   58:75:C1:46:6A:E9:AC:32:35:6F:74:D6:21:23:26:4E:99:DA:9F:00
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858451F3122D5A0DE4C5C4FB8DA40
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa
Signing time:             Wed 06 Mar 2024 21:55:08 +0000
ROA not before:           Wed 06 Mar 2024 21:55:08 +0000
ROA not after:            Tue 04 Jun 2024 20:55:08 +0000
asID:                     264617
IP address blocks:        172.98.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:31:22:d5:a0:de:4c:5c:4f:b8:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar  6 21:55:08 2024 GMT
            Not After : Jun  4 20:55:08 2024 GMT
        Subject: CN=39beb43e-69a1-4ffb-9696-e7ee3de6e003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:8c:1b:c3:22:31:e9:9d:9d:6f:a1:52:51:
                    49:71:de:a1:da:f4:16:98:0f:3a:9a:94:ac:bd:79:
                    01:5e:5e:c0:cc:9b:4c:e1:77:2d:02:71:54:ea:aa:
                    98:68:0d:d5:08:77:c0:c4:77:b8:5f:60:45:76:e0:
                    b0:3a:bb:dd:f1:68:b7:0d:05:ec:4d:2d:84:4b:6b:
                    ae:a1:fb:7f:8e:23:45:64:be:4f:1c:fc:a9:86:38:
                    fd:b6:86:67:8c:37:b4:a2:9e:12:c0:e0:b6:7c:af:
                    bb:de:07:b7:48:91:7a:15:2a:a1:b0:f2:d8:5b:3b:
                    3c:42:2b:f3:a6:1b:89:d1:93:97:9b:f6:09:c5:d1:
                    28:a8:ca:21:33:0c:db:9b:a1:8c:2f:c2:38:01:e1:
                    5e:73:d4:ff:eb:8d:a6:c5:15:7a:c1:6e:26:32:43:
                    42:95:9e:54:a1:91:d2:9b:cd:d3:2b:e9:58:b0:79:
                    82:e7:80:bb:c7:3e:74:68:d6:bc:04:57:b9:3d:22:
                    27:1c:9e:f9:5c:55:37:e5:00:58:ff:89:4a:4d:14:
                    91:3f:74:34:4d:9b:57:b0:1c:e6:c8:8f:68:b0:07:
                    bd:b4:85:2e:fc:7c:16:be:a1:da:a6:08:51:68:2e:
                    88:25:a8:fe:a1:94:93:40:00:92:08:77:e1:1e:1d:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:75:C1:46:6A:E9:AC:32:35:6F:74:D6:21:23:26:4E:99:DA:9F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7c2ce0da-4e4b-34e8-b633-ded5bea07c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:7f:3b:f7:49:8d:c7:c8:66:22:96:28:81:a9:96:02:19:
         55:d4:ac:10:85:e6:a7:af:7c:ea:df:d2:8b:73:90:b9:27:d1:
         8e:6a:7a:4b:6d:fd:b2:14:08:51:5d:8b:44:94:99:59:0b:7e:
         d9:54:dc:ba:b4:74:cc:75:3f:3d:f4:32:ed:cd:65:4f:7d:23:
         5c:1b:67:27:90:39:dc:16:f0:b0:f3:61:c4:3c:be:d8:0e:be:
         a4:1a:58:11:4b:93:a4:b0:48:fe:ca:7f:29:f1:d1:79:13:dd:
         c3:8a:9d:5c:1b:12:78:d9:5f:af:e4:d4:73:54:0b:64:20:6a:
         0f:06:bf:d4:cf:55:ae:10:8f:0a:5f:eb:38:7c:17:c7:eb:37:
         f9:9c:e2:ff:ce:37:19:51:a5:2c:f3:65:cd:56:1f:2d:e3:0b:
         cf:dc:76:5f:a8:a0:fa:7e:4f:51:9d:79:85:44:33:a1:5d:97:
         ce:e1:29:92:98:b6:a3:8e:1b:19:71:7c:8c:30:8c:b1:92:f3:
         52:57:8f:e5:42:fe:ef:cb:04:1b:1b:95:b3:6c:4d:66:b7:81:
         89:45:44:8a:78:e9:5b:b3:0e:89:00:3a:0b:92:37:b0:6b:3c:
         03:fd:b4:1e:3a:1f:42:bf:95:7a:6c:9b:2e:5d:8c:4b:67:20:
         a7:7c:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:09 2024 by rpki-client on console-fra.rpki-client.org