Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa
File:                     c8823d7b-5ece-3489-b72b-ced743ec137b.roa (raw, json)
Hash identifier:          smzXGqxzdmwsDkZvO4Qs0yYI83hpgI9+RI513Wk34Ek=
Subject key identifier:   E3:C5:17:90:2F:A9:F0:66:6E:DF:E1:79:91:EF:60:61:E4:EB:2A:F1
Certificate issuer:       /CN=1cf30977-73f6-4522-b061-66f0061f58dd
Certificate serial:       010D0C9F43285845FC19318370C76395F2E27780
Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa
Signing time:             Sat 25 May 2024 01:00:27 +0000
ROA not before:           Sat 25 May 2024 01:00:27 +0000
ROA not after:            Fri 23 Aug 2024 01:00:27 +0000
asID:                     395660
IP address blocks:        162.106.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fc:19:31:83:70:c7:63:95:f2:e2:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd
        Validity
            Not Before: May 25 01:00:27 2024 GMT
            Not After : Aug 23 01:00:27 2024 GMT
        Subject: CN=053ec22e-8df8-4629-ba91-5853f36d9e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:a8:95:db:0c:88:97:d8:16:8c:5f:b3:3f:
                    d1:1b:cc:2b:d6:61:0b:a5:4c:a4:8c:4a:1b:bc:4b:
                    0e:45:ab:9b:a0:34:80:5e:a8:25:8a:19:20:73:28:
                    2e:5a:bb:06:b9:1c:d2:3d:8a:c9:b3:1f:76:54:f4:
                    cb:ec:14:c2:8e:0d:75:48:84:4a:b9:c5:93:64:e3:
                    fa:24:88:d1:55:d7:35:d5:f9:5a:2d:52:2c:65:d1:
                    b7:fe:79:e0:b7:36:37:e1:34:9a:fe:bd:bf:9e:76:
                    3c:9c:ba:4c:a1:9a:64:6a:f6:91:22:c4:d9:b7:df:
                    3f:df:0a:78:a2:74:1a:bb:2c:7b:d1:13:51:18:cf:
                    79:37:a3:c1:fd:d4:f5:89:13:60:5d:07:88:4c:8b:
                    b9:b8:3e:d7:c7:35:b9:10:b0:4f:f4:37:f3:e1:56:
                    12:9d:c7:1c:5a:c4:21:13:d9:89:35:6d:f0:68:41:
                    35:63:39:83:ae:c8:b6:af:2f:18:24:c6:7e:a3:0a:
                    f1:49:d6:e8:a5:6f:ae:62:78:6e:ee:bc:bf:98:33:
                    18:54:a1:15:4e:36:10:f9:ad:22:6d:a0:33:51:09:
                    c1:3b:9e:4c:7f:7c:23:31:d7:65:a0:b1:db:94:d4:
                    60:16:8e:f8:ff:94:1a:8d:c2:e9:0b:a0:d5:82:56:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:17:90:2F:A9:F0:66:6E:DF:E1:79:91:EF:60:61:E4:EB:2A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl

            X509v3 Authority Key Identifier:
                keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:60:d1:0e:17:c6:7b:19:73:be:28:fc:7a:5d:57:ce:4c:3c:
         0c:c5:b8:d7:47:7d:81:a4:07:a2:fe:1c:34:5e:ec:c8:0d:eb:
         9e:c8:bd:db:ef:23:8c:24:80:57:4c:c9:18:0a:70:46:8b:b3:
         72:44:12:25:9a:42:c6:41:ac:c3:fa:b3:1f:6c:b1:01:6c:62:
         38:74:ad:13:b6:6b:27:8f:22:d8:f8:8f:ed:76:fc:24:7a:8f:
         bf:ad:1b:d6:4f:fd:d7:b7:d4:52:b8:6b:62:a0:90:88:93:5f:
         c2:17:5b:02:e8:82:49:b0:14:87:bd:4f:ac:47:2b:74:fb:75:
         02:eb:0c:95:11:cf:1c:41:df:61:f9:ca:30:2a:38:fa:2e:fd:
         f9:df:f8:37:a8:95:18:cd:71:53:a8:2c:e7:2f:96:37:88:5c:
         b9:09:1c:b0:9e:14:07:01:7a:4e:e7:77:6d:d7:bd:51:58:94:
         28:7b:9d:a9:c7:83:9a:f9:95:be:de:f6:1c:4c:63:c1:a0:c8:
         d7:10:82:7a:bc:40:67:a9:5c:54:bd:b8:5d:11:e9:ff:f7:a8:
         c0:71:81:2e:a6:17:84:8e:7e:81:72:64:81:ff:d4:62:67:8f:
         7a:53:b4:62:a1:9a:e0:92:7b:e7:4c:3f:6b:22:76:a2:82:16:
         e0:e0:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:15 2024 by rpki-client on console-fra.rpki-client.org