Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d8e0110-8cc8-3d11-9c68-514462603f4b.roa
File:                     2d8e0110-8cc8-3d11-9c68-514462603f4b.roa (raw, json)
Hash identifier:          BnlDMos28EtWYMcuussvWYieSMDDds6eDLb48wKf38w=
Subject key identifier:   A1:C8:DE:06:76:1D:CB:A9:58:74:C3:08:6E:68:3C:3A:24:08:FC:DE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285845D461A28E0E91101C71E391A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d8e0110-8cc8-3d11-9c68-514462603f4b.roa
Signing time:             Fri 10 May 2024 19:34:10 +0000
ROA not before:           Fri 10 May 2024 19:34:10 +0000
ROA not after:            Thu 08 Aug 2024 19:34:10 +0000
asID:                     399989
IP address blocks:        170.62.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d4:61:a2:8e:0e:91:10:1c:71:e3:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 10 19:34:10 2024 GMT
            Not After : Aug  8 19:34:10 2024 GMT
        Subject: CN=6aea5387-4eaf-4a34-8b06-9f7464102dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:e6:be:3c:e3:5c:06:98:77:3f:2f:59:0d:
                    f3:12:52:39:fb:ce:1d:93:f2:2b:a8:73:a9:db:a2:
                    37:73:42:72:b6:37:2b:01:c5:43:79:c7:5b:09:55:
                    df:fa:b8:b2:66:a6:c3:4e:b4:9a:03:ed:17:58:67:
                    79:fc:ed:44:dc:aa:39:81:55:cf:b5:38:3d:01:a5:
                    24:53:d3:75:53:f7:9b:4f:71:73:97:d1:9e:17:6a:
                    93:9d:19:af:e7:03:24:a1:1c:a6:9d:ce:19:db:f9:
                    62:0a:ea:f4:94:03:e9:01:d7:f3:01:12:e7:f2:d7:
                    9e:4d:71:be:37:84:85:0e:06:ba:ce:1f:fc:7a:92:
                    fc:20:ab:1c:01:8b:8e:33:0e:e6:b1:34:00:10:c3:
                    e4:13:19:c1:da:26:af:91:95:71:24:5e:1f:e9:39:
                    75:e3:fd:2c:7c:15:af:8d:f9:16:bc:34:84:2c:83:
                    62:49:0e:7e:f5:91:14:df:63:63:dc:dc:68:76:0c:
                    a9:6f:23:6e:83:f8:8e:11:7a:57:0e:18:01:88:52:
                    6a:19:66:d6:8e:c4:f3:51:8d:20:9a:39:ca:fc:cb:
                    ac:f9:b3:b5:de:c8:f0:91:67:01:28:a9:f9:21:d4:
                    38:ce:14:51:c2:73:12:5a:60:96:85:09:79:8e:39:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:DE:06:76:1D:CB:A9:58:74:C3:08:6E:68:3C:3A:24:08:FC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d8e0110-8cc8-3d11-9c68-514462603f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:83:d6:7c:6f:8a:5d:75:0b:1a:5c:e7:e6:42:99:88:83:2a:
         98:e7:64:64:5c:a3:9e:66:04:51:cf:68:7c:58:73:de:ee:47:
         b3:96:61:a0:2d:e3:af:71:b1:a9:4d:10:8f:f6:e3:b9:1b:0a:
         ae:c2:94:c8:2b:ff:4a:e2:5d:8e:69:85:43:07:cd:e1:02:b0:
         74:09:45:00:12:ea:34:88:3c:69:18:7f:33:e8:48:f0:93:3c:
         d2:46:0d:14:95:00:ec:fb:fd:ac:d5:7c:c7:91:74:70:e3:f1:
         ec:b0:32:f7:87:ee:80:0c:2f:6a:b6:af:63:2e:4c:4f:bd:20:
         75:0f:9a:71:6f:b5:fe:ed:e3:87:90:6f:f9:5f:ea:d4:ff:74:
         17:48:ec:ba:80:c1:da:6e:21:ce:c1:fd:db:12:20:0d:0d:08:
         ae:2d:28:8a:b3:d0:5d:1f:f4:fa:de:1d:3e:a0:3c:db:b8:b9:
         37:0d:aa:63:90:20:13:81:89:1e:62:6c:06:e6:a0:c1:3a:4a:
         dd:03:4d:d8:10:f8:20:3b:59:c7:e4:77:a2:8b:a6:06:1b:88:
         3d:58:b8:4f:33:14:97:b6:f6:6c:56:0d:26:4f:13:53:32:7b:
         b0:79:59:3a:2f:16:36:99:f9:27:e1:46:a9:aa:70:2e:dc:4b:
         eb:9d:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:00:53 2024 by rpki-client on console-fra.rpki-client.org