Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
File:                     d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa (raw, json)
Hash identifier:          i+ROPNOOUPNmFI9jy3emUNKSHeSa61GWCoVL5bZYzwA=
Subject key identifier:   5F:B0:18:7F:E8:40:90:67:E4:69:2D:75:DB:12:73:F3:70:FA:F2:DE
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584797E13C39E6228F7B754AEB00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        172.98.162.0/24 maxlen: 24
                          172.98.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3c:39:e6:22:8f:7b:75:4a:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=cfed44f0-e6c6-4522-8353-fc2b6b302ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:73:86:5e:e6:d4:84:93:79:10:b3:b7:c6:
                    89:22:27:3c:76:f7:a0:cc:a6:92:8a:22:3b:c6:1c:
                    ba:cd:75:80:62:88:2e:25:29:e6:f9:3d:7e:fc:e8:
                    d7:7c:64:38:d1:da:09:a6:f7:6e:26:88:1d:a1:3a:
                    d4:34:ce:01:eb:26:65:cd:78:08:b1:91:30:df:19:
                    6f:c5:49:d1:43:95:94:e1:63:19:bb:e0:bd:46:b8:
                    c8:68:6a:80:23:4f:c0:e2:3d:95:fe:32:03:da:9b:
                    55:b4:ee:4e:be:ec:bc:a3:2c:5f:22:ed:38:04:d8:
                    a6:a1:87:e7:c9:59:e0:c6:c0:06:9d:c9:be:b4:89:
                    f1:07:4b:ec:4a:11:88:55:38:37:26:7b:9d:9f:6b:
                    ad:e3:d2:8b:32:b7:d8:4d:c4:6b:c2:af:6d:08:5a:
                    e6:a8:01:91:a8:a4:78:df:5c:bb:38:19:45:eb:22:
                    a2:58:f2:7a:7f:c8:8e:bd:9e:71:d2:be:35:d8:89:
                    bd:1f:ae:3b:c6:e4:e3:3d:74:1a:2b:c9:c6:74:d9:
                    73:1e:b2:c0:cd:5b:bf:f9:f9:4a:ff:49:21:e6:df:
                    01:8b:54:5f:38:18:d8:e9:17:21:5d:bd:5e:16:47:
                    a4:08:b2:71:83:b8:5a:fc:63:70:2a:8f:ca:d9:54:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:18:7F:E8:40:90:67:E4:69:2D:75:DB:12:73:F3:70:FA:F2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.162.0/24
                  172.98.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c5:da:1f:43:6b:ab:5f:1c:46:1b:f9:e8:83:0e:32:96:61:
         b4:fb:b1:02:ff:03:08:de:63:6f:b4:27:08:84:01:c5:34:d6:
         e0:91:40:44:7b:0e:cf:92:e1:12:5e:a7:81:ac:7d:23:c5:6e:
         c2:82:eb:e5:14:9d:c6:e1:29:a5:86:46:02:0c:2f:01:95:e0:
         a8:d8:8b:ec:ea:04:04:be:ff:58:b2:a9:ef:8e:d8:23:f7:c4:
         50:7f:e6:be:41:6e:af:8d:e1:4b:1e:6f:9b:4e:f5:51:7e:3d:
         e5:75:67:27:7c:d4:1b:06:08:df:83:51:3a:41:9e:da:fa:3d:
         de:bb:91:a2:f8:4c:9b:15:f7:4d:30:eb:09:81:b4:1f:d3:36:
         f7:b2:25:a5:44:9a:58:61:eb:11:f2:f5:41:b0:7e:83:d8:fc:
         4f:37:41:d8:a7:bc:65:75:2c:88:97:56:3f:0f:2b:b5:b3:36:
         3a:5e:03:63:3a:f2:2c:26:70:08:9a:f8:3f:79:85:d2:b0:8b:
         eb:e5:2d:04:cb:6a:dd:d3:26:83:b4:e7:7f:f2:b7:41:4c:4e:
         69:7a:50:8a:db:2d:bc:83:9e:e6:29:b7:e0:4a:e6:3f:8a:b2:
         3b:e6:29:07:4d:ac:c8:f0:33:3e:08:08:12:43:30:62:16:87:
         50:ce:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org