Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa
File:                     8bc82c3e-b012-3867-928a-11ced293313f.roa (raw, json)
Hash identifier:          MEq7r78uY8mTnaQyGwe8iAxKpIFhrqTTf1gS2Fp/zmg=
Subject key identifier:   C9:47:1D:80:B6:7B:AE:E3:6E:82:CA:4D:F9:62:5B:37:60:0C:D4:D0
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285847E62A19AE032C7734A9486280
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     10753
IP address blocks:        172.98.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:19:ae:03:2c:77:34:a9:48:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2c2feeb9-1d9f-42e8-b3c7-5db493225327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:43:b6:25:9f:5f:87:b4:8d:7a:c4:98:51:
                    25:05:9e:0d:f2:b6:4e:99:ef:ee:53:ff:19:e2:77:
                    50:12:6d:24:da:ff:9d:b8:d1:4c:e0:3b:70:73:bd:
                    f2:ec:fa:b5:61:ec:6c:e6:96:8f:82:c5:3c:53:4c:
                    b0:e6:4a:c3:8a:95:8b:80:ba:ef:85:46:60:df:42:
                    9c:73:60:e9:68:94:50:ac:a6:bc:69:3d:0d:fc:00:
                    fd:69:69:55:a6:86:e1:06:1a:89:44:a6:da:48:8b:
                    9c:3b:d0:87:f6:3a:aa:3d:16:9b:91:47:9b:4c:75:
                    25:68:c7:d3:74:3d:bc:73:66:e7:3f:9f:04:bd:6b:
                    42:58:06:2c:73:69:e5:0e:6d:aa:fc:80:b5:f7:47:
                    4e:95:fc:df:17:81:56:86:a5:bd:31:49:46:5d:0b:
                    a7:35:31:42:99:2c:fb:0b:b7:64:5e:4b:9d:20:ac:
                    2b:d0:fa:fd:45:5c:d9:91:42:af:53:ab:33:fd:82:
                    83:01:29:00:47:d0:44:38:f1:7c:5e:5c:2f:64:d9:
                    71:b7:a8:1f:8b:c0:2d:0e:1a:6e:76:c7:86:d7:ad:
                    4d:2b:92:a1:74:72:96:e5:68:2d:53:2b:40:4d:cc:
                    70:12:54:64:84:1a:fa:ce:af:97:22:f5:9c:b7:3f:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:47:1D:80:B6:7B:AE:E3:6E:82:CA:4D:F9:62:5B:37:60:0C:D4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:eb:1b:09:51:e0:f3:f6:d8:f6:7d:39:5d:23:03:99:cc:3c:
         5b:b5:cf:0d:a4:9c:aa:3e:68:a6:33:20:37:bb:81:6e:f6:38:
         93:3d:db:40:fb:db:db:da:60:21:ad:65:f2:99:a5:c4:00:47:
         2a:16:e5:9d:ba:7d:26:6a:85:a7:2b:6e:8d:ac:b5:a7:3a:69:
         7f:f2:cc:24:bc:34:69:76:cb:f8:71:eb:f3:8c:df:c4:ec:00:
         ad:e6:3e:0c:2a:bd:87:43:09:44:a1:c8:85:63:b1:65:a5:95:
         6e:9a:d4:36:be:54:79:83:97:a2:be:95:76:99:e4:a9:15:59:
         79:76:5d:3e:8d:9a:5d:27:96:5a:18:13:62:b0:02:3d:ca:10:
         07:2a:2b:3f:ad:4c:42:9c:e1:05:38:da:23:1e:48:5f:94:3f:
         e0:90:20:94:4b:d4:53:cd:12:31:5e:6f:7e:e0:72:ad:98:89:
         21:d2:09:89:ac:a0:85:1e:2d:57:d7:6b:4f:4c:6e:9a:00:75:
         12:23:af:9a:47:bd:96:af:4e:c8:86:18:19:ef:9e:5c:79:5d:
         5f:12:72:37:91:16:6a:43:ef:6f:8e:5f:e4:a6:68:27:c7:77:
         8e:67:65:a7:09:3c:d4:fe:6d:1a:89:11:ad:f6:ac:d8:ec:82:
         24:c8:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org