Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa
File:                     fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa (raw, json)
Hash identifier:          1rC/+RBQgXcnVNQFUpI7+LyxfiIZu2jgguyfrNVC1tc=
Subject key identifier:   2E:47:8D:D8:B2:68:D2:72:44:0D:CF:F0:EB:A4:B7:FE:B1:E5:D5:F3
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844E0DA8C67CBA211C37E1AB0BC
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     9009
IP address blocks:        172.98.186.0/24 maxlen: 24
                          172.98.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:8c:67:cb:a2:11:c3:7e:1a:b0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=3b65029c-7281-4009-8e1c-5b72557abb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:12:3e:9a:08:da:cb:d9:6d:27:25:17:84:
                    62:06:85:f3:fc:12:cd:f1:68:b0:54:85:6d:4b:d4:
                    5d:d4:ed:f4:1a:66:35:ff:98:ab:f0:e5:ff:24:8b:
                    b4:ef:ca:ed:82:9e:9d:fe:6c:7c:59:43:9d:3c:01:
                    98:e1:19:8f:31:4c:ba:a3:5c:80:90:18:a1:ae:4b:
                    1e:ad:8b:82:7f:79:8d:7e:d3:56:ad:e5:a4:cc:69:
                    84:7e:f9:f7:cf:8b:f9:f8:28:14:4c:d6:76:ec:92:
                    be:e7:a5:8a:de:8c:13:b2:c5:78:b1:f0:58:7e:73:
                    22:98:b1:87:70:6f:bb:84:ce:d4:21:b7:71:1f:8e:
                    db:09:7a:ea:7a:c9:22:19:ca:ff:54:66:d5:82:a2:
                    e2:03:36:80:84:b7:be:a4:b4:00:ec:fe:75:a5:1b:
                    03:3c:b4:21:71:be:e9:f0:8b:ea:0c:70:6a:8b:f9:
                    53:93:08:e2:76:42:77:f2:9e:30:f1:bd:10:18:7e:
                    0b:8c:52:2e:79:d0:b6:4a:27:6c:7f:9f:f4:27:de:
                    bd:8d:9b:e4:46:b3:4b:e1:45:55:60:6e:03:b5:eb:
                    6f:e4:f2:dc:6c:a0:c5:66:40:e9:a8:09:c5:a5:5d:
                    0f:0d:97:0c:d9:cd:d4:d6:7e:2e:cb:e1:85:35:8c:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:47:8D:D8:B2:68:D2:72:44:0D:CF:F0:EB:A4:B7:FE:B1:E5:D5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.164.0/24
                  172.98.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:51:d1:d2:ac:30:e5:40:c6:2a:72:57:5d:30:27:6c:69:04:
         1c:89:c3:3a:91:a2:cc:cb:97:02:f0:89:b1:74:8b:1f:f3:0f:
         55:0b:21:46:45:40:d2:81:26:00:3a:4a:c3:49:62:38:0e:45:
         f6:68:01:2b:e2:d0:57:f6:5c:a2:1f:db:3d:93:b1:3d:01:a2:
         06:3b:1e:08:5d:a8:d0:4b:ee:6a:46:02:fe:d0:aa:f1:96:14:
         ae:e7:4b:b6:8e:2d:36:7d:6a:d1:df:21:3f:86:75:f6:bb:29:
         44:f8:22:56:f9:35:50:69:29:e6:6c:aa:02:cb:ee:c0:00:67:
         da:25:1e:92:12:a7:c8:7f:6a:e9:d4:77:cf:99:1f:bc:97:2c:
         b5:7c:cb:3a:2b:94:fd:4b:83:72:8f:d0:bd:07:38:90:d5:88:
         7c:26:ff:c1:b9:e1:e6:5b:9d:5c:4e:38:bb:9b:51:80:92:bf:
         a7:52:35:96:93:e3:75:9d:4b:f8:56:79:73:ba:d9:a1:5c:7c:
         f5:a9:49:da:87:a5:7f:1c:f6:eb:51:cc:82:d5:72:c5:ef:76:
         7e:92:cc:12:f4:f6:40:46:92:7c:9f:e2:76:7e:24:2c:a4:f2:
         33:cf:6b:6b:c5:e5:fb:8f:f6:13:bb:bb:49:fd:5d:b3:d3:10:
         b1:86:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:57:22 2024 by rpki-client on console-ams.rpki-client.org