Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
File:                     afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa (raw, json)
Hash identifier:          HYaZgRwV+3lq3wYn0VCIKUvpPWOGxijFjDTzBAVGpGA=
Subject key identifier:   4B:A6:33:85:02:A8:92:BD:24:52:9B:E2:AB:3A:A5:0C:F0:AC:E9:32
Certificate issuer:       /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial:       010D0C9F4328584797E133B364FEB3D7C6681D80
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     14870
IP address blocks:        162.244.220.0/22 maxlen: 24
                          2620:122:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:33:b3:64:fe:b3:d7:c6:68:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=0257d9db-2ac7-4aed-ac18-ac313b1bd533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:59:96:13:67:b6:11:c0:15:40:46:2a:2b:
                    8c:94:6c:d9:33:b5:4b:54:6e:66:2d:59:3d:32:57:
                    05:13:76:15:f4:12:3c:42:a7:18:3f:2e:bb:d3:a5:
                    5f:60:7e:84:e3:ce:fb:c4:8a:0c:a9:59:0f:a6:17:
                    1f:4e:95:c3:c1:1d:2f:13:c2:b1:ba:77:3e:1c:8a:
                    41:ed:27:d1:bf:2c:49:39:d0:f7:7b:33:20:35:2b:
                    b2:a7:c6:a6:8b:7e:dc:0b:f7:a0:93:64:00:19:98:
                    db:14:b4:14:d5:f8:6a:e1:7a:0c:4c:a2:73:e9:ca:
                    b2:5e:75:0b:df:62:35:80:b9:92:11:e2:84:ec:fe:
                    c6:fe:b8:7a:ef:22:85:37:02:20:17:d8:60:91:2c:
                    d4:3f:26:18:9d:5e:23:f7:84:c4:4a:2f:87:56:30:
                    35:3c:bb:ff:c8:b2:e1:81:32:11:78:8d:7d:c8:e2:
                    55:d7:4c:0e:9d:fc:43:80:76:95:2c:ce:d5:aa:ec:
                    9d:09:d3:e6:fd:55:d5:ae:9f:12:9f:74:53:60:af:
                    6d:be:ff:14:e3:9f:0f:a1:4e:6a:97:cd:b5:b6:a1:
                    93:13:96:bd:0c:6d:ab:64:6f:84:62:c7:06:f5:b2:
                    cb:26:81:e1:e9:99:b1:26:02:26:f5:cb:63:af:0b:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A6:33:85:02:A8:92:BD:24:52:9B:E2:AB:3A:A5:0C:F0:AC:E9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.220.0/22
                IPv6:
                  2620:122:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:3c:80:1f:88:eb:07:26:de:08:83:d1:54:0f:d5:3b:29:
         1e:09:3c:b9:62:8b:b1:03:1e:8a:f8:08:d8:37:5a:5a:85:74:
         03:df:84:0e:84:02:a4:5f:2d:b7:04:4c:f5:cf:31:a1:a3:d7:
         4c:b9:90:e9:7f:eb:05:1c:2d:28:90:c1:ad:60:1c:0e:6a:96:
         3c:88:40:13:a7:29:3f:e0:95:20:30:9a:37:e7:69:1f:60:47:
         20:91:77:f7:69:05:35:ed:b8:2a:4e:f5:70:29:c2:f8:35:62:
         1a:69:aa:5d:2c:f7:3a:b4:b2:4e:f6:cd:5d:01:d5:92:50:74:
         ab:4f:1d:5c:c6:ef:bc:5e:75:af:99:13:61:cc:11:04:b7:95:
         c5:cf:b6:90:40:67:61:3d:ea:83:30:bc:11:a0:46:ca:d7:05:
         3e:45:d1:11:7f:62:72:0a:04:2e:11:04:7f:07:72:aa:49:6d:
         d2:3d:e7:1c:26:51:49:8d:7b:e4:30:21:4c:94:a2:2d:53:2f:
         ce:dd:74:f1:33:6d:4b:04:97:a6:24:a7:b2:59:1c:98:8d:e5:
         39:7d:c1:f9:81:56:05:9b:de:df:b5:b9:3d:d2:b7:5d:cd:20:
         bf:6f:ff:f2:55:b3:da:f0:45:ce:e2:85:73:56:d2:3c:b5:0e:
         65:4b:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:13 2024 by rpki-client on console-fra.rpki-client.org