Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa
File:                     d5cf8319-403b-387c-a79b-84a59277e3f3.roa (raw, json)
Hash identifier:          ELTd5h1g015v/iPR1jJWXqGq3bkrDI8ao6TIZqhCYrA=
Subject key identifier:   1D:14:FF:9D:E5:B4:DE:2B:67:C7:57:52:A5:FD:24:76:36:6F:5D:62
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285848394C8EF140E4554411A5B080
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa
Signing time:             Mon 16 Dec 2024 08:42:13 +0000
ROA not before:           Mon 16 Dec 2024 08:42:13 +0000
ROA not after:            Sun 16 Mar 2025 07:42:13 +0000
asID:                     54535
IP address blocks:        156.37.196.0/24 maxlen: 24
                          156.37.197.0/24 maxlen: 24
                          156.37.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:4c:8e:f1:40:e4:55:44:11:a5:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Dec 16 08:42:13 2024 GMT
            Not After : Mar 16 07:42:13 2025 GMT
        Subject: CN=d4087cd4-f36d-448f-b361-b68c9f9dffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:17:b1:6d:1d:44:3a:d0:03:d7:e8:59:69:
                    d9:89:9a:03:54:be:1c:d8:d9:82:69:e3:11:e5:12:
                    ab:d4:bd:90:ad:c8:6a:ca:bf:51:3e:e3:4e:f3:9c:
                    5e:b6:03:14:1d:ba:20:17:d5:2c:63:bd:11:48:9d:
                    29:3d:a2:56:54:6a:47:92:e7:64:89:09:19:65:2e:
                    eb:52:94:9e:4d:29:ca:33:f6:6e:14:ff:da:68:40:
                    6b:a9:18:57:0f:99:e9:56:63:da:16:c1:43:d3:15:
                    00:b3:46:60:ce:94:46:cb:d2:47:06:df:26:7d:1d:
                    f0:36:5f:db:b3:8a:07:0d:3f:19:ec:36:18:5c:1a:
                    6b:4c:bb:d1:be:1f:44:6f:ad:6d:37:ae:32:49:42:
                    7c:b4:c8:e7:85:35:dc:f6:26:8a:af:28:23:9a:bf:
                    33:b3:c6:31:09:d3:7d:3c:81:29:8a:82:22:e2:6e:
                    6a:e3:7b:1f:5c:cc:9e:3a:6a:9d:3d:89:32:41:7d:
                    7a:ca:ad:03:37:77:6b:ae:6b:04:fc:81:37:74:f0:
                    9e:9a:c3:41:a7:3e:23:30:61:14:e4:58:67:31:fe:
                    8f:dc:fb:74:bd:ff:68:db:5f:33:ef:e1:b0:56:dc:
                    9a:d0:c8:b8:a4:01:20:ae:44:1d:9d:aa:8d:be:f3:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:14:FF:9D:E5:B4:DE:2B:67:C7:57:52:A5:FD:24:76:36:6F:5D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.196.0-156.37.198.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:1f:46:2d:93:5a:13:90:7b:ce:1d:f9:5f:96:c9:8e:a8:
         4c:36:42:21:ef:60:fd:62:45:dc:16:03:3e:be:9f:35:3d:7a:
         69:8a:2f:62:a7:3e:bb:ae:87:a4:eb:b4:ff:04:e1:80:05:8d:
         9c:de:c9:a4:54:0f:b1:7a:05:c4:9b:c5:06:56:5c:5c:48:44:
         3a:ab:ed:3d:36:33:49:19:17:f2:4a:ea:12:49:e2:50:ab:b1:
         85:33:b0:1b:42:a7:50:e2:6d:74:62:c0:4c:71:b2:db:b5:40:
         8d:1e:90:3f:32:4d:df:b1:a9:bf:84:4d:7c:2f:a9:8a:e9:30:
         f5:f4:be:fb:e2:9e:4a:b5:a8:23:53:ad:7d:17:3e:49:b6:2b:
         c3:12:ed:f1:38:07:8c:f1:ad:ea:2b:ab:56:23:97:6c:fc:15:
         c2:d4:eb:fc:fa:1d:dd:81:5b:89:55:b4:17:de:26:97:19:b6:
         a8:ff:3d:8b:50:bb:bd:f7:a0:76:3d:0e:7a:e0:c7:bb:d7:84:
         b2:a1:25:1f:8e:79:b7:ec:3b:96:fd:f1:df:19:de:de:a8:6e:
         5c:17:7f:f4:57:cb:bd:89:7b:57:8e:8c:34:c0:f0:e3:c5:f3:
         e9:55:b8:c0:96:8b:ca:44:41:fa:ad:27:00:44:32:10:8a:1c:
         b6:5c:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 17:54:48 2024 by rpki-client on console-fra.rpki-client.org