Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/9a544499-9703-3882-a683-8926c34e8454.roa
File:                     9a544499-9703-3882-a683-8926c34e8454.roa (raw, json)
Hash identifier:          wU2yX5najJ2X3o8X7iUhGWI54RDcjAoTJZwVgGfk/zs=
Subject key identifier:   88:F3:1A:D0:5E:5F:53:95:55:17:B8:41:64:3B:91:20:66:73:32:3C
Certificate issuer:       /CN=cabb38bf-bd0f-4374-97d5-2b622fafd0af
Certificate serial:       010D0C9F432858477EC10A960E535234C54FA1C0
Authority key identifier: A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/9a544499-9703-3882-a683-8926c34e8454.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     62948
IP address blocks:        65.110.32.0/21 maxlen: 32
                          74.119.4.0/22 maxlen: 32
                          162.254.128.0/22 maxlen: 32
                          209.131.232.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0a:96:0e:53:52:34:c5:4f:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabb38bf-bd0f-4374-97d5-2b622fafd0af
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=a972f8ff-426e-48df-837e-8e666d42d88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:d2:c9:03:23:50:a0:90:9a:f6:0d:f2:0f:
                    14:0c:8e:cb:2a:14:29:dc:33:05:83:e5:c3:9a:63:
                    bd:e6:4e:0d:26:9a:8c:43:34:0b:f6:c2:1f:47:25:
                    f9:5b:d2:68:1f:9c:b3:a5:87:a0:fd:55:36:46:d9:
                    a4:cf:bc:db:f1:79:a4:9e:d3:ce:8c:08:87:3a:8f:
                    a8:75:15:65:fd:1b:09:f1:11:e7:8f:be:60:9f:ae:
                    5b:c3:98:06:cf:d4:03:9d:35:f3:a9:aa:54:14:13:
                    d5:5f:aa:a6:97:56:d6:2f:3e:da:4e:c9:7d:93:1a:
                    87:1b:98:75:21:ee:45:cc:ed:9c:98:e8:84:fb:fc:
                    1c:9e:d0:c1:9c:e8:f2:e5:52:fb:24:ad:ce:e1:22:
                    35:c3:f5:ac:8a:93:ec:fe:c3:d7:50:a9:7f:e1:a4:
                    32:c0:47:80:41:9d:38:c1:4a:b6:0e:af:9b:48:f3:
                    4c:0f:c5:b6:03:4d:88:9b:86:18:42:91:b5:e6:64:
                    2e:6f:53:d4:7b:61:f0:1f:f3:b2:69:7c:64:42:33:
                    8f:28:a0:e5:7d:67:be:5c:0f:d9:fb:18:5c:e5:82:
                    b6:99:d8:ac:75:56:fc:b3:d3:8e:8a:08:80:f8:c8:
                    99:fd:f6:34:f1:29:80:16:f7:fc:b6:6f:99:d5:88:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:1A:D0:5E:5F:53:95:55:17:B8:41:64:3B:91:20:66:73:32:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/9a544499-9703-3882-a683-8926c34e8454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af/cabb38bf-bd0f-4374-97d5-2b622fafd0af.crl

            X509v3 Authority Key Identifier:
                keyid:A6:F3:C7:F1:2B:B8:67:DD:6E:C2:AA:D0:8D:CD:3E:83:73:89:79:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cabb38bf-bd0f-4374-97d5-2b622fafd0af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.32.0/21
                  74.119.4.0/22
                  162.254.128.0/22
                  209.131.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:72:4e:3c:66:a0:3c:0a:7b:ee:9e:d1:7c:46:09:ec:b8:
         dc:f5:0c:f7:13:bd:0a:8a:5e:61:1f:29:8a:c2:65:69:32:26:
         fe:4d:7c:01:5f:c9:57:bd:ba:d5:9b:13:91:ba:ef:bf:55:f7:
         d8:87:38:d5:4f:ae:3b:48:8b:d5:66:11:70:af:a8:4f:1e:b0:
         0d:cb:e4:f2:56:25:94:72:cc:0d:35:b5:1a:c8:22:39:8b:20:
         08:53:56:54:d4:66:43:61:a7:87:52:60:fb:e4:71:d5:7d:41:
         48:d9:c9:da:b8:98:d0:97:4b:9e:76:d9:7a:22:3e:83:ee:23:
         e6:bf:bf:04:41:de:95:c7:ff:bf:90:e1:47:f9:32:8b:d6:f1:
         02:32:77:73:5e:ff:a1:14:81:29:ae:fe:af:a9:52:ef:6b:0c:
         94:d5:04:25:01:12:ad:e2:c2:03:7a:25:d7:18:91:5d:3e:74:
         f4:51:f8:88:92:3c:65:08:67:c7:f0:a8:83:19:d9:17:65:ad:
         40:63:68:77:0a:f5:e4:16:b6:5f:79:f4:58:8a:64:f9:c2:bc:
         f6:9b:6f:ca:2c:91:be:63:82:ac:b1:1b:bd:c4:b3:d5:c8:52:
         f4:35:a6:68:f0:f5:8a:f5:7f:79:2d:fc:70:30:eb:a8:5e:da:
         f3:06:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org