Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa
File:                     66c24ca4-75ad-3583-bab3-0d338b0cb433.roa (raw, json)
Hash identifier:          L/ZGcCrmL2Au5Pq8Vu5Ew94PGEs9xtqKga87o/4m7Ys=
Subject key identifier:   AB:30:DC:D1:95:B9:1A:93:75:82:41:F1:7C:A9:49:8E:2B:5C:89:67
Certificate issuer:       /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Certificate serial:       010D0C9F43285845CB3E4D7CE49A2CFBAEF7CD00
Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     271
IP address blocks:        198.162.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4d:7c:e4:9a:2c:fb:ae:f7:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=83c6b472-e11b-45fa-916a-4bda7e881265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:95:bf:ad:70:bd:42:1e:44:39:18:da:7d:
                    a6:c5:2e:fc:9d:47:ae:56:93:24:25:f2:55:6c:98:
                    8c:60:30:27:42:a2:69:bf:cc:bf:fc:7d:04:87:1e:
                    9e:dd:4d:1e:d2:1a:aa:61:87:3d:b0:4b:db:83:17:
                    56:38:17:50:68:e1:50:58:12:93:15:b5:c1:78:05:
                    07:b2:ed:8f:6d:16:82:ba:4a:93:da:26:fe:15:a5:
                    39:59:89:93:74:1a:a2:82:ee:aa:88:a7:6a:d0:d7:
                    23:73:3b:6a:99:4e:79:87:c1:ac:74:cc:da:f9:22:
                    5b:74:c3:a0:92:21:47:7e:63:6b:40:f5:bd:9d:9f:
                    fa:b8:2c:f8:f3:ad:4b:ce:ac:e6:bd:75:5f:2a:27:
                    bc:6b:77:44:34:6b:b0:16:a7:1c:3d:b7:c9:75:7a:
                    a6:65:04:09:d2:1d:4a:bc:3a:d3:39:e9:7a:9f:eb:
                    c3:07:9d:6a:6f:a9:23:57:d8:ba:4f:d3:cf:c4:76:
                    3f:01:a0:1b:72:5d:0c:24:9d:84:e8:77:be:b6:c0:
                    3b:97:c6:28:82:06:34:18:9b:7e:9c:a2:73:50:9f:
                    33:05:4d:b8:a6:26:26:9c:0d:20:eb:30:9b:3f:40:
                    15:9d:8d:16:d7:5c:20:d6:0b:bc:4c:d7:98:31:5f:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:DC:D1:95:B9:1A:93:75:82:41:F1:7C:A9:49:8E:2B:5C:89:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl

            X509v3 Authority Key Identifier:
                keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:09:39:b5:ab:f3:1f:f1:25:89:d2:a8:8e:47:da:d6:8e:
         f4:46:eb:f1:5a:3f:f4:3a:77:0e:60:89:28:94:7e:a6:b6:c4:
         17:fe:05:74:76:11:e0:18:1c:3e:f3:65:24:8a:c8:ce:83:7f:
         89:e7:a6:e4:f9:4f:97:65:c9:a2:6e:cb:18:a9:e2:70:2e:e4:
         95:a0:de:a7:ae:24:08:ad:48:12:60:6a:e5:3f:05:ad:67:a7:
         07:fe:4d:7c:91:a9:e0:90:c6:c3:ae:f1:34:2e:b5:43:61:3a:
         6e:f6:3a:12:19:a0:1b:3d:60:4e:66:d7:cc:c3:e0:50:d1:43:
         77:65:b9:02:2d:8e:70:3a:32:9d:57:b0:d9:13:f9:36:c3:82:
         22:20:ad:76:b7:a8:2a:15:0a:4a:c9:68:c4:7d:b0:ff:eb:17:
         9e:28:b0:56:87:4a:30:10:30:b9:42:63:23:55:f4:0e:9a:2a:
         2a:2a:f9:ff:a0:22:61:11:c8:a5:8b:bb:2d:db:d2:3f:92:ee:
         54:00:e5:6c:18:ad:ff:06:07:02:06:5e:d0:dd:f4:99:c1:e4:
         c4:60:ce:03:a8:81:39:2f:36:74:f5:9f:79:95:f9:d4:bc:75:
         b4:6b:29:b2:a1:10:31:06:85:cd:87:9f:6b:65:08:d3:6e:e9:
         85:ae:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:50:28 2024 by rpki-client on console-ams.rpki-client.org