Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa
File:                     5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa (raw, json)
Hash identifier:          jupf1bD18wTDaPDqc76BtAuiDGXzopMN2mRCcS887CY=
Subject key identifier:   58:F1:11:B3:F5:72:DA:A2:27:29:D8:A9:12:AA:1D:3A:2B:B0:D1:8D
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F43285847F584EFC2350E1609E9838F00
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     54054
IP address blocks:        192.48.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ef:c2:35:0e:16:09:e9:83:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=f1555820-669e-4795-b474-838b04b7d3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:cf:0f:e9:8f:77:2e:4c:fa:28:44:78:36:
                    1d:f7:48:74:e0:5c:3d:71:26:06:92:d4:11:a9:e6:
                    3d:82:f3:4e:bd:05:24:5a:e6:17:93:4d:99:3f:f1:
                    e1:d9:55:5f:b8:6d:76:cc:7b:16:76:05:a6:19:c1:
                    6d:49:1b:61:7d:3a:8c:20:28:96:45:e9:e1:4a:9f:
                    bd:9d:7e:59:ec:88:34:aa:b3:1b:4e:82:4b:8e:96:
                    aa:30:0a:82:4e:1c:88:b5:91:63:ed:1b:5b:40:b7:
                    02:2f:ef:62:b1:aa:6e:61:84:be:5f:31:63:97:d9:
                    5a:8a:55:5b:5a:ad:ea:0d:f0:21:31:04:3e:af:c9:
                    23:a5:55:81:df:c5:6c:2e:6d:8e:b9:ff:19:d1:ef:
                    4d:94:10:5b:59:ce:e1:a5:bb:54:da:5e:05:35:0e:
                    1c:5d:50:98:e4:c2:66:aa:3d:e0:af:61:91:85:b4:
                    6d:1a:9e:24:34:6d:d5:dd:fe:8b:3d:12:db:b6:20:
                    f2:03:53:2a:d9:32:dd:ed:94:98:5b:98:33:fb:81:
                    2b:ee:0d:78:46:c9:b2:10:f8:30:96:18:2c:a4:8c:
                    02:a2:da:7f:f8:18:e6:83:a2:f1:cf:ad:2b:04:41:
                    84:0c:ae:77:b2:07:c3:eb:44:3b:70:1c:fd:36:94:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:11:B3:F5:72:DA:A2:27:29:D8:A9:12:AA:1D:3A:2B:B0:D1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:55:8d:a3:02:9b:b2:e5:f1:e8:41:f8:b4:3b:af:ee:fd:12:
         5c:48:a6:81:c9:67:3d:ee:49:61:89:cf:f4:e5:90:b3:9c:1f:
         f4:2d:3f:39:12:1a:6e:99:f0:0c:23:0c:b5:62:e6:65:9d:ec:
         9c:ff:0b:3f:67:af:25:30:14:92:77:8d:a3:7b:a0:3d:7b:0f:
         4d:c5:6e:c0:a9:70:b9:1c:00:e0:11:99:06:20:7a:af:02:fc:
         36:aa:cf:69:08:7f:b8:72:24:e9:65:01:07:b8:74:cf:2f:b8:
         23:98:0f:a9:4a:90:b9:88:34:89:6c:40:34:4c:af:a4:e4:27:
         04:7b:bb:50:da:18:76:a6:fb:7a:54:de:ce:a2:9e:5b:89:da:
         20:91:22:7f:f6:90:9c:bf:5e:82:db:64:c4:23:5c:f0:75:f1:
         26:19:6f:21:de:2b:c7:4e:fc:01:53:d4:91:4d:a3:13:27:94:
         80:fb:27:fa:1b:3e:c3:30:d3:98:7d:22:25:70:a8:93:5c:a0:
         a3:0b:3f:c0:f5:bf:2c:6c:39:7c:d4:b8:78:b5:bd:2a:9d:5e:
         56:61:66:e5:7a:23:8f:46:48:51:ca:83:62:56:d3:3d:1a:49:
         bd:5d:2c:3a:7e:8f:45:3a:d1:ac:3c:84:11:e2:ea:db:96:62:
         f5:61:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:09 2024 by rpki-client on console-fra.rpki-client.org