Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa
File:                     a37594dd-4a90-3345-9735-36199e690a84.roa (raw, json)
Hash identifier:          U/xwHaB49U8s/dsBoPgk1mFkZ/mkxaszdpl3xjRlCF0=
Subject key identifier:   3C:58:D2:3C:3A:FC:33:EB:C1:9D:3C:6D:5D:0E:41:5B:E1:04:89:B4
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F432858473FF0A4831953B7DC6A4D4518
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     14513
IP address blocks:        205.221.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a4:83:19:53:b7:dc:6a:4d:45:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=1952f6b3-36f1-4f81-abbc-4447b3760027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:80:51:c5:26:44:d0:06:37:49:8b:8f:37:
                    64:11:f3:e2:f5:44:eb:3b:40:6d:1f:62:cd:fa:e7:
                    12:a6:2c:b6:43:09:09:af:4c:9b:7b:9d:77:ca:2e:
                    d6:e0:26:b2:81:88:5b:40:d4:27:1c:25:dc:40:14:
                    b7:fd:f6:0b:28:10:b8:e3:eb:67:d4:af:82:2d:0e:
                    7f:00:58:74:68:9e:13:ff:dc:b7:8e:a7:36:33:f9:
                    f2:2e:fe:5c:30:47:43:b1:c2:e6:24:b8:87:81:99:
                    0f:c7:90:69:ee:27:e7:91:bd:86:91:1a:23:3a:65:
                    72:9e:57:37:1e:f5:e5:6a:7b:ed:3f:04:24:81:bd:
                    bc:62:8f:19:43:3b:82:3d:7c:af:6a:02:1d:a1:80:
                    83:af:7a:8c:3f:99:6c:fc:ed:a1:92:62:c1:46:c9:
                    29:d6:cf:e6:5a:46:30:9e:b8:c9:19:36:49:85:80:
                    8b:cd:92:53:6c:a2:cb:e5:01:ec:05:cb:30:87:c8:
                    03:1d:40:33:f6:c0:53:ef:4d:a6:1a:bb:3e:6e:dc:
                    9d:d1:6c:0d:b6:1d:de:db:32:3a:ab:42:bc:e2:c1:
                    77:d9:44:5e:44:1a:25:b6:0e:b1:18:c7:b8:b2:11:
                    3a:84:a1:da:4d:3f:4b:dd:dc:4c:c6:91:67:1f:ec:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:58:D2:3C:3A:FC:33:EB:C1:9D:3C:6D:5D:0E:41:5B:E1:04:89:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.221.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1a:9c:1f:eb:01:b0:d2:99:1e:ca:02:c4:fc:48:db:84:1d:
         31:c8:af:8a:04:de:44:bd:b6:55:bf:80:62:a1:25:f1:4e:d6:
         7a:2c:ef:cc:08:86:1d:76:66:ca:95:59:f8:89:07:19:4d:86:
         c6:b5:93:f8:71:51:9d:59:4a:d3:20:7f:5d:6b:cf:0f:99:df:
         11:c3:38:d5:9c:49:41:07:85:26:c8:4a:68:14:96:5d:e8:e8:
         ae:d2:91:28:09:ff:47:28:ea:0a:d3:8a:1b:c3:f7:22:2e:33:
         24:c6:eb:ba:3a:57:13:a3:89:73:e4:b4:79:6a:67:f6:70:40:
         39:c7:8d:4f:65:f2:4b:e2:25:56:d8:64:27:f2:91:9c:a8:ed:
         d3:ca:74:67:c9:c4:5c:b6:21:39:a4:4d:07:4b:2f:fa:b7:6b:
         04:77:04:36:c4:b0:51:70:0c:3a:86:3f:b0:bf:d3:d2:2d:f6:
         a6:98:e8:27:bc:ad:37:64:07:7a:d3:b1:a0:98:cb:6e:fe:61:
         46:cc:a9:e6:a2:fe:51:8f:3a:9d:97:df:13:38:57:b1:4b:cb:
         ec:8c:46:14:4f:4e:ab:03:b8:6e:12:70:29:98:ef:5f:0f:d4:
         7b:54:b4:dc:74:3e:7f:1d:9b:31:02:5d:fa:81:02:36:7d:1b:
         b1:c3:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:40 2024 by rpki-client on console-fra.rpki-client.org