Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8d0358e8-8212-3ba2-a507-52160f2afaf0.roa
File:                     8d0358e8-8212-3ba2-a507-52160f2afaf0.roa (raw, json)
Hash identifier:          E5qj0tdxcIuiFv9BhdsDAk8DtXT60G0seEJfuZNFwLg=
Subject key identifier:   CC:C3:41:57:D2:9C:7E:3D:79:AE:F9:DE:DA:79:15:E8:59:E5:F9:55
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F432858471775C37BD7DC9A1CB2CF7000
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8d0358e8-8212-3ba2-a507-52160f2afaf0.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     9009
IP address blocks:        172.98.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c3:7b:d7:dc:9a:1c:b2:cf:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=28a42f88-77b4-4b64-9c1b-0d34bbf2f500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:20:8d:5a:60:04:f3:fd:51:9e:6a:cf:93:
                    48:ca:d0:cf:ee:88:b5:b3:b7:ef:18:1f:ed:b4:b0:
                    d6:3f:ef:a6:ac:c0:bb:bb:29:71:0d:6d:1b:c4:94:
                    b6:c0:6f:1b:a0:64:d3:b2:9f:b5:6c:55:5a:c5:a1:
                    e8:2a:81:11:60:5b:ac:7d:ab:8e:93:15:55:de:5e:
                    42:b0:0e:8b:9f:99:25:9b:b0:09:b0:1e:83:3e:0c:
                    44:74:69:58:b9:07:4d:10:3e:52:cc:b7:eb:70:d2:
                    86:68:e0:fd:3b:d5:83:cb:d6:fb:ee:ec:c2:c4:51:
                    d6:1d:a0:85:09:5e:8a:6b:6d:aa:73:ea:5d:b4:c3:
                    db:6c:d9:dd:f1:83:40:4b:e1:45:60:e8:f9:a7:38:
                    ea:72:52:0b:4c:92:96:82:e6:78:4e:98:8f:73:15:
                    fb:f3:e7:fd:92:0a:1d:b0:4d:92:1e:e1:38:91:73:
                    1f:cc:c2:08:a2:a9:ce:e1:9e:85:ed:c5:b4:81:e0:
                    68:5e:dc:59:6d:90:a9:ad:ce:98:5c:19:d9:43:33:
                    bf:bd:a3:36:e8:67:06:08:40:68:e9:e8:88:aa:c6:
                    f4:f3:3f:03:1c:44:a0:1c:9c:37:2a:63:c5:ad:d4:
                    a6:50:0e:c0:7c:c0:dc:dd:15:82:15:f2:b3:46:e4:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:41:57:D2:9C:7E:3D:79:AE:F9:DE:DA:79:15:E8:59:E5:F9:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8d0358e8-8212-3ba2-a507-52160f2afaf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:23:6a:b8:35:45:b9:3d:f2:df:88:4e:f6:f4:92:0d:95:d3:
         b3:02:7d:56:82:36:7f:42:06:7f:82:ce:41:1c:a3:13:1e:60:
         94:06:cc:e7:75:07:b2:4d:ed:d3:0e:28:d9:4d:d1:56:62:10:
         c4:14:4b:77:27:6a:e8:86:24:20:12:b9:8e:19:f5:a2:0d:ca:
         df:3a:12:d5:6b:27:f3:3c:60:61:2f:ff:13:2b:e4:d9:64:09:
         b9:db:a4:b2:da:ea:32:98:42:2d:44:2c:54:fd:15:cb:ae:40:
         1a:e2:b3:c1:c3:28:49:b3:21:39:6e:66:9b:cd:ec:ac:df:6f:
         73:3f:08:8b:f0:02:cc:3d:e7:e8:d5:a4:6e:ea:68:ba:6b:92:
         c5:6e:15:05:43:e6:06:ff:b7:2f:18:a6:c8:60:0e:96:29:da:
         1a:60:eb:4b:55:5a:81:e5:0d:68:98:c6:e0:2a:d8:44:a0:23:
         5a:08:77:17:d0:6d:bb:c2:df:f2:62:bc:ba:20:56:13:cb:93:
         a1:1a:4f:8e:ff:46:e3:80:0c:64:68:ec:9f:e8:8e:74:09:ec:
         ad:57:17:69:1c:a1:88:ac:54:b8:42:06:51:95:5b:ae:b3:c5:
         45:da:ac:f2:ac:7c:bf:2f:a2:11:ec:a9:a2:d3:ca:69:ef:87:
         19:56:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:58 2024 by rpki-client on console-ams.rpki-client.org