Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa
File:                     733f4b75-21a2-3402-a1ba-b2033671249c.roa (raw, json)
Hash identifier:          +ZSnK46NvIyGDrjVCjR27b9B2pjrRI0ZAt2lIKGllIA=
Subject key identifier:   1C:72:23:0C:89:A4:53:3F:22:02:CD:39:62:8D:1B:A4:05:4E:12:97
Certificate issuer:       /CN=b4251da6-e12c-464e-918b-9c9e6f10c032
Certificate serial:       010D0C9F43285845453D6EB465C25D8792078C80
Authority key identifier: 28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     62965
IP address blocks:        198.97.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6e:b4:65:c2:5d:87:92:07:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4251da6-e12c-464e-918b-9c9e6f10c032
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c505bd6a-1bcd-443d-a6d2-d793cb70732f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:c4:ab:11:53:b8:cf:ec:54:c0:ef:6e:95:
                    c9:31:7e:e9:d1:60:9b:ee:ed:15:d1:11:af:07:3e:
                    35:1d:85:6a:0c:7d:23:d2:a8:66:06:0d:c4:c3:50:
                    93:96:3a:40:cb:55:0e:31:bb:a5:d2:db:de:6d:80:
                    23:19:d1:c5:d7:ef:34:1e:0d:b6:14:33:0d:62:4e:
                    43:65:c1:3a:b6:88:3f:97:55:ad:fb:be:9a:83:49:
                    15:2b:eb:76:1c:cc:59:e9:3a:c6:af:47:ca:d2:b7:
                    49:7e:80:73:d9:d5:00:a3:e7:03:74:cc:e4:19:32:
                    68:ba:6b:f4:34:e3:3a:eb:c5:34:2a:d9:e8:f8:e6:
                    60:e6:00:44:e0:98:42:fd:44:75:34:e2:d6:ec:1e:
                    f4:ef:25:f3:a4:7f:bf:60:4d:c0:fe:65:53:c1:30:
                    29:e2:10:8e:83:2c:93:2a:1b:64:31:9b:9c:42:d5:
                    fc:e3:09:f1:2d:21:8c:95:26:c9:b0:03:81:21:f5:
                    45:a1:ac:ea:66:25:12:02:99:88:6a:61:62:f7:76:
                    1e:ce:ac:85:d1:bb:fd:1e:1d:6d:59:75:69:e0:6f:
                    97:05:04:ca:eb:f7:ba:41:c8:d2:41:f3:63:63:7e:
                    e0:0b:de:4e:02:1f:d5:09:b4:65:b3:fc:80:a2:7e:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:72:23:0C:89:A4:53:3F:22:02:CD:39:62:8D:1B:A4:05:4E:12:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.crl

            X509v3 Authority Key Identifier:
                keyid:28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7f:c5:7c:4a:c8:4a:d5:02:5b:a1:0d:54:63:fb:06:42:32:
         62:01:6e:ee:af:af:4d:d4:44:ae:1d:44:33:7f:e4:84:a1:57:
         db:11:0a:d5:85:2a:97:a3:e3:af:b6:e1:f3:9e:c8:f7:95:fd:
         67:04:dc:7f:c2:5f:e0:9e:97:b3:f5:7f:a4:70:43:3f:e4:82:
         c2:8d:40:5e:a2:f5:cf:60:d2:f8:8e:f2:3e:7c:84:ce:34:d3:
         23:fa:cb:8e:42:5e:23:12:1b:b0:db:dc:5b:02:77:e6:9e:0f:
         82:6d:c9:c7:58:a2:bb:18:da:12:1c:a2:c3:21:a2:13:cb:52:
         d9:9d:d5:5d:ae:ed:01:d8:0a:7b:9a:75:b5:fb:ab:45:57:1d:
         f8:ef:e2:0f:aa:0b:31:ed:c6:40:2e:07:37:b7:67:94:f6:46:
         1d:4a:15:71:71:fe:bc:91:31:04:34:2d:6d:a9:58:fc:2e:97:
         64:a9:fb:59:74:26:e3:b6:75:6b:17:b1:13:ba:b3:43:51:38:
         d7:03:8f:a9:3c:65:d5:c9:e8:9b:10:28:8b:7c:56:d1:a6:7c:
         a8:db:2f:55:9d:d2:19:70:05:8e:99:67:09:24:08:22:e6:52:
         87:de:b2:14:11:c3:0e:f8:c9:ea:10:78:a2:77:24:70:10:31:
         01:27:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:14 2024 by rpki-client on console-ams.rpki-client.org