Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa
File:                     a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa (raw, json)
Hash identifier:          6KwoWEMzoCEMjxO7fIPb/NWdp+nfQb6H6nIDMzRqFO8=
Subject key identifier:   CE:7F:5C:98:06:7D:EC:5A:B6:0B:15:21:2D:0A:D9:79:AB:4C:5C:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D768B53C0C2A8CCB7398180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     0
IP address blocks:        198.133.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:8b:53:c0:c2:a8:cc:b7:39:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=05c13f53-b12d-47f3-832b-142da70462d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:39:52:73:ad:2d:97:32:76:f0:14:30:e5:
                    2f:1f:c1:5f:b1:aa:fd:62:86:94:19:5a:d7:5b:87:
                    9a:57:b8:5e:1f:3e:4f:24:08:e9:f0:25:d7:b1:07:
                    86:04:1d:bb:55:df:29:2e:11:a7:2c:b9:e2:0e:6e:
                    05:36:84:23:9e:2f:e4:4a:a4:28:a1:84:0c:cd:40:
                    76:7a:80:98:8b:92:67:03:91:07:62:6d:dc:8c:46:
                    cf:52:14:fd:dd:34:75:c2:88:7d:0d:20:64:13:a4:
                    2c:d6:c6:ea:bd:a0:d5:c4:45:32:7a:8e:f2:7b:83:
                    6a:12:18:c1:c5:a6:0f:80:22:12:b1:3f:a7:8e:ad:
                    4e:e9:3f:21:54:dd:bb:ee:c9:ce:ae:cb:99:18:a6:
                    64:cf:47:0e:e5:39:ba:ad:2e:7f:f3:e8:0e:54:5c:
                    57:48:fb:6c:8d:c9:d9:ef:d6:82:e2:e3:fd:08:24:
                    51:cf:f3:7c:fb:ff:91:97:18:ce:39:10:2c:bb:ff:
                    b4:4b:02:db:5a:3f:c9:e1:eb:28:7d:72:c4:f6:7d:
                    97:2f:0a:d7:68:64:d6:32:6b:7e:eb:9f:80:e6:e0:
                    bc:f4:cd:d7:37:3c:a2:7a:20:db:3a:d2:8c:6b:7e:
                    ba:8d:33:ec:d9:bb:a4:10:97:e8:c1:d4:f8:c1:22:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7F:5C:98:06:7D:EC:5A:B6:0B:15:21:2D:0A:D9:79:AB:4C:5C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b9:4f:c0:72:3f:df:e0:06:6d:d1:d6:9d:22:79:32:a0:bb:
         1f:f2:e7:7c:4a:eb:3f:95:86:8b:d1:26:75:f3:5f:77:ad:01:
         22:bf:5d:3a:dd:af:57:49:77:b6:f9:d6:d6:09:f4:c1:a1:66:
         7d:08:c4:3f:13:dd:22:44:88:55:3b:0f:70:eb:80:ca:c2:44:
         48:5a:ef:da:2f:f8:d7:cd:03:12:13:e4:39:7b:0d:22:c8:13:
         ad:22:45:49:ff:ea:13:59:23:d8:1a:24:e2:c2:36:0d:01:3b:
         05:05:aa:4c:70:e2:90:61:96:d7:33:fe:00:e7:a3:eb:57:f5:
         39:3d:ed:80:10:9e:7d:34:a6:73:50:5d:0b:83:0a:2c:7c:24:
         b4:da:9a:89:f3:55:c0:1d:2e:ff:98:6b:82:ef:ac:54:6f:7d:
         cf:81:64:cd:7e:e5:5a:42:2b:e1:88:71:87:de:31:9d:8b:de:
         90:13:33:d4:8a:53:74:2b:ef:12:0b:79:7b:ba:be:43:70:dc:
         d8:2d:6a:c4:95:74:aa:fc:69:83:ba:07:a3:9e:ce:d4:76:c8:
         65:cb:f9:15:24:80:ac:2a:8e:fe:e5:43:4f:86:ab:8b:0c:43:
         4e:46:a6:3e:d8:61:0f:a3:33:84:26:e3:57:f5:1b:89:6b:bd:
         93:50:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:42 2024 by rpki-client on console-ams.rpki-client.org