Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa
File:                     585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa (raw, json)
Hash identifier:          FLl9W0okdf57kKQNtzpcYu2BA7kB5OvmKFgwWULpZoI=
Subject key identifier:   0E:04:56:C1:69:CF:A8:3A:A2:F0:1B:05:1A:3E:F4:3B:CF:A8:F7:F0
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F432858457A488F34E29617B3E0EAD300
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     22438
IP address blocks:        162.211.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8f:34:e2:96:17:b3:e0:ea:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=30e402ca-98ff-4ce1-8f8f-1f882089493a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0d:00:c4:69:df:0c:79:fc:be:4a:49:40:60:
                    ae:b9:d9:a1:a1:ea:b2:df:31:02:1d:1e:66:9e:31:
                    e2:a7:8a:5e:3a:33:11:6b:6d:36:8d:f4:60:3f:a3:
                    a4:fe:52:48:ab:c1:4c:1a:bc:dd:98:f0:92:d6:25:
                    e0:b2:64:dc:7a:aa:33:64:e7:6b:04:f5:82:20:22:
                    28:21:cb:af:81:02:11:ce:e6:a5:ac:52:05:bc:1b:
                    15:87:87:ef:09:50:03:db:56:ce:2b:3d:04:c9:2e:
                    32:8a:27:55:48:51:8e:ed:98:25:88:d8:30:c1:82:
                    71:6b:09:50:60:b1:aa:db:89:eb:33:0a:7c:08:4f:
                    71:f1:e2:e8:ad:e2:94:4c:e9:48:de:c9:b6:ed:86:
                    62:45:2f:58:41:7a:ff:6b:40:85:8e:d3:8a:ef:d8:
                    67:cb:24:65:78:04:78:45:fb:c2:0e:c2:82:58:e7:
                    46:4f:12:21:ea:a9:cd:08:ee:22:a1:91:c0:b1:48:
                    10:ab:a6:33:76:ec:15:32:65:db:aa:2b:93:4e:bf:
                    45:11:2b:b7:a9:02:74:4d:cc:c9:6d:66:3e:9a:49:
                    ff:41:37:c2:6c:e6:19:3e:48:ba:62:73:e1:ed:6e:
                    3e:79:d0:3f:04:95:40:5f:1c:d2:3f:bb:3e:42:b9:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:56:C1:69:CF:A8:3A:A2:F0:1B:05:1A:3E:F4:3B:CF:A8:F7:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:9c:66:73:86:62:09:1a:39:0a:5d:a6:8e:05:a3:29:b5:
         b6:bf:0d:3f:fc:b1:d5:92:2a:db:0d:74:c9:3b:be:f3:9e:e2:
         b3:b2:c2:e6:c1:15:1a:f5:44:4f:68:29:95:56:ef:db:5e:80:
         14:af:5e:9a:cf:08:b6:08:68:27:29:8e:c4:b0:e1:c6:5c:68:
         44:a3:3a:92:83:f9:0d:56:88:c9:7c:fb:ba:1c:ca:73:75:07:
         ff:9a:ed:2f:5a:88:af:42:58:b3:05:7b:f1:33:18:22:d0:a9:
         25:68:1d:40:8f:04:62:df:83:a0:6e:9f:da:96:da:4b:e3:33:
         73:02:ba:e6:4b:cb:10:e7:61:f7:e8:6f:01:d9:af:ee:99:92:
         14:4d:6f:f5:c9:e2:eb:5f:c8:7e:0d:43:7b:50:12:bf:7c:29:
         7f:e6:2a:74:75:a9:d3:9a:0f:91:8a:0f:0c:22:88:60:5b:1b:
         94:65:17:75:af:8b:21:15:bd:ae:fe:2e:ef:86:00:9f:d5:4a:
         0d:30:36:97:24:e2:c9:17:78:6c:cc:f1:69:1d:81:b8:45:f7:
         f1:e4:06:ff:09:f9:94:e4:85:82:00:80:41:a6:e9:3f:9c:b8:
         3d:eb:18:61:15:38:61:46:0d:10:62:fa:d2:ff:62:d0:8a:e0:
         c6:49:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:40:40 2024 by rpki-client on console-ams.rpki-client.org