Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa
File:                     8bc82c3e-b012-3867-928a-11ced293313f.roa (raw, json)
Hash identifier:          NAgw9VDkQJfOrFDMxihaInMA/Zg56sHr4dIgDNAIg/U=
Subject key identifier:   E2:5D:B7:C2:E0:FC:11:8C:88:22:9D:A3:D1:2A:73:15:41:BD:13:C8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845453D67E72F37C93C95A3BF80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     10753
IP address blocks:        172.98.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:67:e7:2f:37:c9:3c:95:a3:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=bd0f8df0-9e71-45c3-ad72-cd3e80a5e69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:a5:71:05:d3:4a:41:d5:22:ba:38:da:86:
                    49:f5:a9:d6:e8:ef:94:8a:35:84:af:48:87:d4:1e:
                    22:ee:47:07:a8:3c:ed:3e:f0:68:33:90:ac:f7:b8:
                    58:68:04:68:0c:ef:e9:c6:d0:04:2c:36:45:99:2b:
                    1e:c2:df:ba:0f:64:cb:02:98:30:58:01:66:c5:b3:
                    e5:ff:06:b1:51:4f:e8:cd:95:04:17:70:d1:f7:2f:
                    0d:4d:1f:3e:68:8f:da:1e:09:d5:25:61:04:60:97:
                    6e:18:ef:d4:b1:7a:84:bf:81:b6:ec:23:cf:8e:fb:
                    e6:a7:01:a9:0d:99:4e:39:8d:30:68:ec:b5:b7:8c:
                    3b:bd:8b:cc:5b:51:9a:f4:74:53:9d:95:4a:d0:aa:
                    a4:57:1a:d5:81:11:f6:42:bb:7d:7e:d1:fb:92:52:
                    02:1f:f2:c0:42:28:13:47:ed:3f:6d:3c:5f:97:c7:
                    87:c5:5d:1b:a2:4f:4f:e9:77:56:75:64:af:23:31:
                    e3:3b:d0:8d:2f:72:bb:73:6f:c3:31:39:e9:aa:59:
                    a7:07:22:ec:78:9f:c7:c3:f0:6a:1f:8f:10:b8:23:
                    87:5a:29:6a:6b:43:9e:2e:fa:6a:1d:a3:47:ef:30:
                    cc:f0:7c:76:02:96:fc:8e:d7:06:aa:8a:79:ea:00:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5D:B7:C2:E0:FC:11:8C:88:22:9D:A3:D1:2A:73:15:41:BD:13:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8bc82c3e-b012-3867-928a-11ced293313f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:58:3e:11:f4:3d:a9:47:5a:1d:b2:7f:65:f7:4a:f6:49:
         22:cf:f9:66:d6:68:bb:d0:a7:6d:5f:42:26:96:78:99:3e:b6:
         68:bb:bd:06:5c:4c:17:f0:32:bc:eb:a3:c3:97:0d:df:24:93:
         e5:74:32:06:dc:a1:4b:ef:96:5c:9c:4b:93:c4:f2:cf:67:4e:
         4e:28:9a:3f:9e:3a:93:80:4b:89:e1:ff:c7:0f:aa:6d:71:4a:
         29:a8:0e:5c:26:5a:a6:b8:6d:ef:e6:ff:d8:9e:89:61:f0:39:
         7f:27:40:1d:24:b3:d3:d5:fb:1f:fa:9d:dc:e9:1e:29:83:de:
         d3:a4:c6:42:e2:9e:04:58:85:c1:89:c7:91:4f:b6:77:e7:de:
         a0:db:8f:96:e8:1e:44:2c:5a:aa:1f:7b:67:be:93:3e:83:4a:
         b0:c6:11:45:d4:ce:7b:0a:08:eb:66:c6:1e:df:af:9d:e5:16:
         05:df:46:6c:0f:66:03:73:76:7d:a7:9b:7d:a5:d5:6b:25:17:
         a1:5c:ac:23:ff:59:44:87:da:15:a2:0d:d2:80:71:41:8e:47:
         c9:f9:b4:d7:01:56:48:d5:80:d2:a5:10:3f:f1:f2:d5:ac:cc:
         b9:71:87:cc:15:58:4c:b8:4e:ae:01:25:03:9b:5d:4b:d2:0e:
         79:55:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:09 2024 by rpki-client on console-fra.rpki-client.org