Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa
File:                     d4db6e43-4486-319a-a77e-97a0a6fec458.roa (raw, json)
Hash identifier:          TBF9dtrhkVadnScy6zVA1GRoSzgMbiHWiDnkwCwTBAo=
Subject key identifier:   78:A7:AC:39:C2:85:5F:29:8F:FA:37:00:2F:EE:22:A7:4B:00:28:99
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F432858473A5B92968CE2AE41C645D900
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     22438
IP address blocks:        162.246.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:92:96:8c:e2:ae:41:c6:45:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=058275f8-c0be-4ada-a0ab-3c7030d969f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:10:6a:ea:b2:0a:79:a8:f6:e6:fd:74:19:56:
                    1a:64:ba:a9:7a:2f:c3:da:c2:53:7f:27:8b:38:35:
                    a4:1c:92:ac:eb:d2:90:ca:2e:f3:d4:a5:91:a9:80:
                    91:fd:bc:f5:b1:6f:31:57:d8:50:69:1d:09:50:ec:
                    15:b2:bd:6d:53:d3:1d:cb:0c:63:fb:08:b2:07:5b:
                    ac:dc:cb:44:7c:7b:85:8f:76:d6:65:23:64:f0:29:
                    95:18:6d:e7:7c:83:5c:e9:69:e0:32:e4:cb:4d:4c:
                    de:e0:19:d3:65:51:ec:c0:e6:0d:f8:96:a3:ec:de:
                    1a:f5:b2:78:bb:3e:92:31:49:21:46:a0:f1:1a:a7:
                    ec:04:10:95:a6:34:01:8a:66:e1:18:54:57:57:26:
                    55:cb:ef:b4:53:0b:31:44:e8:1a:af:0f:2e:ef:da:
                    f2:04:9e:b4:a1:80:3c:f7:24:69:b8:7e:21:9b:dd:
                    39:be:6f:76:59:a6:a6:7e:4f:75:4e:bb:7a:fd:12:
                    d1:73:76:59:15:9b:97:0a:36:cc:41:5a:0b:69:73:
                    dc:9e:f8:7a:3a:42:81:d6:e6:54:71:15:00:d4:cb:
                    a5:5d:c3:76:54:16:6d:c2:a8:5c:1d:58:3c:52:ca:
                    da:63:b4:6d:69:14:c6:c8:d5:3a:1a:45:68:1b:c6:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A7:AC:39:C2:85:5F:29:8F:FA:37:00:2F:EE:22:A7:4B:00:28:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:10:9b:fc:62:62:12:93:51:52:fb:aa:37:9d:4e:04:9a:4f:
         b2:32:c0:3f:45:ad:b8:49:8d:9f:c0:e1:5e:37:22:92:c3:62:
         02:2f:1d:87:d6:15:38:a3:0c:a1:00:22:19:0b:f2:91:40:c9:
         60:d1:09:13:d0:19:3d:10:36:a6:ed:65:22:16:d1:5d:73:7d:
         97:51:2c:76:97:6f:6a:c4:f7:82:de:86:77:d5:b1:90:7e:b5:
         2c:8c:91:8a:ff:f9:1b:dd:42:67:ff:ed:56:7a:68:50:23:32:
         56:c8:79:a2:b5:8c:d5:1e:24:80:36:1b:b7:24:d5:b5:b8:ab:
         11:f0:a5:ff:e3:f3:d7:54:40:43:27:73:30:86:40:ac:50:3a:
         67:5a:e3:44:25:71:c8:46:a5:b9:f8:90:a9:0b:19:3d:20:95:
         35:7b:5d:20:0b:b0:42:e1:ae:25:17:47:4c:82:d4:8d:2c:ea:
         39:5d:3d:39:89:23:95:7a:0b:57:70:a8:72:45:6a:4f:97:55:
         95:9f:83:1c:a5:93:0b:ad:8a:03:a3:65:20:25:94:e0:ca:aa:
         7a:77:f8:83:6f:ca:c1:d1:36:88:65:94:2e:b4:a8:f7:c2:a9:
         06:d6:1e:1e:f8:76:d1:34:08:74:3e:4b:b0:78:f2:11:f5:2c:
         52:84:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:01 2024 by rpki-client on console-ams.rpki-client.org