Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa
File:                     a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa (raw, json)
Hash identifier:          5S5QQ2wac0F9JEa548d6pR4cj3O+QBWw8sMNRDMOhfE=
Subject key identifier:   E4:3D:B1:B8:CD:63:0B:C4:A6:72:B1:6D:DA:0F:1C:73:09:2E:68:B5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553333F1CB5BB50C3866EFFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     30155
IP address blocks:        162.245.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:3f:1c:b5:bb:50:c3:86:6e:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=58ff6a01-ac2e-43ac-a1f9-46c923d29869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:96:68:24:df:84:5b:7d:8a:6e:93:04:af:
                    96:17:86:d3:b2:c1:4c:d8:d3:f6:9d:bd:3f:1d:02:
                    f2:35:4e:16:2e:93:bf:48:c4:82:8a:13:12:f5:da:
                    8e:2d:fb:96:ed:c5:b2:ed:9c:70:b7:1e:ed:9e:95:
                    bc:aa:7c:62:86:10:f1:ba:fa:23:a2:8b:1c:13:c9:
                    57:c9:da:ab:75:8a:f3:90:62:f9:63:1f:1e:14:2e:
                    09:e8:a3:d2:f9:84:64:06:a7:07:12:2f:eb:1a:54:
                    f6:71:8e:c7:83:11:7f:ba:6a:ac:b5:f5:1d:8c:8b:
                    10:f8:ba:bf:10:23:10:1e:24:97:dd:4d:ee:89:b2:
                    54:b1:86:ab:10:67:08:65:01:d7:fd:a2:54:e9:c9:
                    7d:c1:a2:d9:1a:f0:9d:c6:f9:48:1a:c6:f5:16:ad:
                    a7:a4:62:5c:1f:52:2b:49:43:49:2b:24:e1:81:a4:
                    7c:ce:39:e8:4f:cf:65:1e:3f:07:aa:b7:58:42:0a:
                    b8:ac:24:c7:bf:9c:20:3f:0b:73:90:94:6e:ff:fe:
                    92:3f:dc:6a:14:15:f0:f6:3d:ad:e0:d6:23:e1:44:
                    c5:1d:30:90:81:ad:33:8d:02:b8:b4:2f:70:8e:8c:
                    08:60:e4:8a:5d:b8:d0:2d:e9:7f:49:8f:97:bf:15:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3D:B1:B8:CD:63:0B:C4:A6:72:B1:6D:DA:0F:1C:73:09:2E:68:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:06:ed:bc:93:47:33:9a:f6:06:54:e4:f8:e5:ad:f3:b1:bb:
         d1:55:72:28:0a:6f:2c:f1:c7:d2:a8:ca:d7:97:14:00:b9:00:
         bc:06:ca:bb:74:c4:ab:15:37:ea:3f:f3:ec:e9:e1:2e:e6:58:
         de:c3:f5:ef:60:67:6b:da:b0:1f:0b:9c:5d:b2:2f:bf:52:00:
         31:58:1e:3e:48:11:fb:6f:85:bb:79:6f:84:14:90:cd:64:4b:
         95:ac:4c:c2:75:d2:d7:1b:52:30:ae:18:ec:a7:d4:9e:c1:3e:
         c5:04:16:61:01:63:11:99:78:f4:e7:53:b5:3b:44:7f:2d:c5:
         e8:b5:55:5d:46:91:b3:c2:d1:d7:bc:5f:9e:85:15:21:a2:8e:
         e1:a2:4a:28:16:bb:04:ae:0f:72:ff:1c:61:2d:15:6f:68:03:
         c6:dd:a8:40:e7:b5:7d:46:83:c4:ec:39:c3:1d:19:ba:d1:06:
         1a:f5:5b:92:f5:20:00:d5:ad:3a:78:2f:fd:9f:57:e0:53:4d:
         ce:48:bd:59:99:dc:31:cc:25:e3:ee:78:58:ea:59:51:2f:38:
         18:02:09:e4:eb:ad:39:d0:ac:7c:4d:88:3a:bb:55:f0:9d:f5:
         ff:96:5b:da:f9:a4:bc:bf:e6:d4:49:23:89:b2:ef:81:13:88:
         e0:ce:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:57:40 2024 by rpki-client on console-fra.rpki-client.org