Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13d6443d-a92a-3906-ab26-6557ebc6664b.roa
File:                     13d6443d-a92a-3906-ab26-6557ebc6664b.roa (raw, json)
Hash identifier:          NYxiREFwS5gNhBCVaajoM1XpkcnTfuLfnefbBKZd5pM=
Subject key identifier:   0E:A6:4B:68:58:D6:DD:08:7A:86:5B:0C:A5:DF:65:38:7E:A4:BE:BD
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584754E0EAA5E09A4D6D10408580
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13d6443d-a92a-3906-ab26-6557ebc6664b.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     33182
IP address blocks:        198.136.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ea:a5:e0:9a:4d:6d:10:40:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=f5ba0484-211a-4816-ba77-d17ba9c952f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e8:3b:76:b8:f8:4a:e7:8e:28:ce:4a:8e:93:
                    dc:5c:55:98:0e:0c:1c:35:ba:53:ba:73:30:fb:49:
                    ad:11:70:32:92:e1:43:4c:ff:8d:ca:66:20:bc:cc:
                    33:88:5a:11:b7:d7:ce:aa:7d:71:82:06:bf:76:de:
                    e0:e6:70:66:56:0e:2d:2c:59:17:d9:0e:93:bc:34:
                    6e:4a:0a:38:91:c4:89:6d:ae:03:fb:68:90:8d:d0:
                    ec:db:43:00:64:52:23:78:9b:7c:be:04:23:42:19:
                    1b:18:7e:ca:11:00:57:87:0a:fb:d5:ca:00:60:78:
                    11:a4:b0:08:04:3c:30:f5:59:d3:86:d7:9f:0b:e9:
                    11:c9:bf:9d:f4:dd:29:85:5b:99:21:82:aa:b2:74:
                    bf:41:ef:0b:78:dd:83:62:75:90:52:e7:fd:41:b3:
                    c1:22:76:7f:95:20:b9:30:9e:de:0b:96:1c:8b:53:
                    ae:3b:f8:e5:bb:de:1e:de:f4:5b:92:43:ee:50:08:
                    4a:26:06:be:a1:f2:f2:f7:7c:1a:05:32:b3:ac:98:
                    d4:00:89:d0:d1:d5:44:a1:ab:b2:9f:59:a2:da:47:
                    bf:bb:45:28:3e:3f:67:92:63:24:df:14:07:46:65:
                    8d:bd:10:1d:03:56:ec:24:c4:58:76:3c:1f:22:c7:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A6:4B:68:58:D6:DD:08:7A:86:5B:0C:A5:DF:65:38:7E:A4:BE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13d6443d-a92a-3906-ab26-6557ebc6664b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.136.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:74:c5:bc:64:3b:dd:6b:a4:85:77:3b:ce:73:16:43:6d:
         0e:96:ea:c7:c8:08:72:f8:8e:4f:37:3c:c5:b0:75:11:d4:56:
         f9:b3:79:4e:c4:fb:d7:02:a7:e9:ba:dd:b3:08:98:f0:d9:cc:
         3b:c9:8c:91:22:5f:3d:76:d5:70:0b:43:50:72:e1:5b:12:c0:
         3f:96:67:5a:15:96:ea:a9:e1:57:65:57:e2:4d:74:87:07:98:
         9b:dd:ed:3c:b2:fa:97:cb:8f:78:34:3b:04:70:1c:6a:bc:fb:
         75:9b:5b:03:db:b1:03:3f:5e:d1:2f:66:67:2a:07:70:d0:dc:
         c4:f0:ae:b1:bd:af:25:f3:33:7c:78:f9:65:e2:d2:f2:0d:24:
         b0:65:d2:19:92:a3:cb:86:51:6a:61:f1:93:80:0a:10:ab:15:
         92:50:bf:57:64:87:a3:25:b2:ae:a9:0c:b7:6a:75:05:a8:4d:
         95:f5:fd:b4:50:c4:47:58:38:f4:aa:99:0a:4f:f1:1a:eb:02:
         08:6a:3c:f6:1e:94:f6:17:37:ac:ca:0f:26:84:f6:1e:f7:e3:
         90:4f:80:90:12:1e:7d:a9:74:ef:0b:a7:fd:2c:93:90:2b:53:
         76:fc:85:b4:36:02:94:f9:6d:55:a4:d4:ff:42:08:a0:39:65:
         89:29:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org