Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
File:                     599d3743-7271-3612-ac7e-b695738f62c4.roa (raw, json)
Hash identifier:          YDc1vcIqaifNgy2YNncR+jSXUieMroAGQWLrIPg9w8c=
Subject key identifier:   38:7C:AE:22:B2:7C:BB:4A:FA:8D:1D:25:1A:17:E6:FF:93:0E:E0:1C
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F43285847CE6F3F02EDD954194F66EA00
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     44486
IP address blocks:        23.227.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3f:02:ed:d9:54:19:4f:66:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=4a50a46e-fd62-40d0-a99c-60e81c2d5971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:53:af:59:a8:43:68:2d:33:b5:49:1f:70:
                    3f:2d:03:f6:9a:91:b8:ef:5b:ec:a4:4d:17:c6:b6:
                    fb:fe:08:d3:1c:b1:6b:6c:e8:94:fc:24:84:21:53:
                    f5:2a:27:d7:f9:41:ad:d0:9f:6e:58:b5:b3:19:49:
                    67:9b:95:d4:ba:23:96:80:5a:82:97:02:52:de:c1:
                    ec:70:a0:a3:ed:2f:62:4b:a0:9f:73:0d:6c:0a:68:
                    89:06:07:d7:49:15:c9:0c:74:c3:37:6c:75:04:0f:
                    db:59:c1:44:1d:67:51:e3:1a:6f:91:c8:e9:fc:6e:
                    70:e8:e5:65:8d:91:53:66:94:2a:2b:27:2d:65:d4:
                    22:37:00:42:c1:9b:9a:a2:cc:57:de:ca:64:ba:44:
                    12:bb:d5:ee:af:69:cd:73:95:66:76:ef:d2:52:80:
                    96:fb:1a:57:bc:b6:f7:b1:94:bf:50:58:6a:f7:2d:
                    ab:f4:cf:e2:93:91:57:e1:87:59:ff:48:b6:6e:3d:
                    f3:27:fd:e9:5d:84:3d:74:59:25:89:f9:14:27:c9:
                    3f:3f:dd:e8:0a:9a:a5:4b:55:1c:f2:fe:e3:e8:8e:
                    a9:10:3f:2c:a6:7c:84:f8:20:7e:1a:c9:5e:a2:be:
                    e0:9e:48:57:9e:14:7d:24:e8:94:94:08:cf:c5:da:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7C:AE:22:B2:7C:BB:4A:FA:8D:1D:25:1A:17:E6:FF:93:0E:E0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:9a:c8:23:2b:4e:a1:76:45:01:16:9c:9b:56:7c:ff:82:
         e3:fc:f6:4f:94:01:22:be:e0:85:49:34:6d:c7:be:95:e7:cd:
         2b:e0:ca:58:82:01:ab:bf:c5:56:c5:59:5d:af:2c:96:9d:60:
         a7:d1:5b:90:a8:46:51:6e:94:1e:bc:e9:93:4c:21:61:da:56:
         f7:9a:ea:c3:54:e0:a9:a0:e8:46:29:be:f5:ef:75:ad:ca:0d:
         36:af:03:47:d7:3f:41:67:7a:29:6b:77:0a:a3:26:2b:70:fa:
         f4:96:08:18:45:1b:10:52:3b:55:56:5e:36:c8:09:8e:7b:2f:
         8d:67:09:e7:4b:c4:7d:a2:ba:de:e9:5c:c8:8a:e4:41:eb:89:
         cb:74:da:13:a0:8a:a4:e5:3b:43:cb:ae:6f:dd:33:8c:b8:33:
         eb:5b:fe:7b:60:35:7f:4d:18:24:74:15:2a:1f:46:d4:45:c1:
         0f:5e:c9:f3:0a:19:4c:55:a6:2f:fe:84:c0:31:d9:c1:68:3d:
         12:28:d2:a7:05:a1:31:56:5e:76:27:99:7b:19:97:21:ba:08:
         b9:25:82:20:26:83:b3:6b:5e:fc:5d:d1:78:39:53:8c:a7:34:
         58:99:e8:de:25:ac:b4:c9:16:95:1e:d9:50:69:a9:f3:f0:7c:
         19:4e:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org