Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa
File:                     7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa (raw, json)
Hash identifier:          3jvEQ82cr0M6zyvvj5zJ/+XA5Oye8A9mIIvNVpbbWwU=
Subject key identifier:   BC:9F:AA:B5:F8:60:F2:38:96:DF:D3:27:D4:F5:CD:79:CE:EB:48:15
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F432858453A12A98048E0719E49994580
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     53813
IP address blocks:        165.225.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:a9:80:48:e0:71:9e:49:99:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=edc9af77-bc0d-40e9-9990-c2de1e3e8b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:44:71:e7:7d:28:0a:86:07:52:04:0f:b7:
                    fc:73:92:96:a0:dc:6e:34:64:64:a1:2b:9d:1d:5b:
                    fa:b5:52:0a:e2:a4:78:ca:bf:68:ae:53:af:5d:a7:
                    be:69:6e:fd:67:2b:bd:8a:0d:79:63:3d:a0:8e:f6:
                    26:c9:b4:60:b7:75:68:8d:9e:30:e6:45:de:bb:3a:
                    21:2d:d9:f5:66:a5:30:60:09:bf:72:47:41:cf:ae:
                    a8:58:7c:3e:18:17:4e:0e:cd:31:d8:f2:53:7a:95:
                    81:0c:51:bc:82:78:1a:a4:dd:37:3f:d1:70:95:6a:
                    68:34:cf:ee:4a:57:58:ad:aa:a2:99:c7:ff:93:eb:
                    a9:83:4f:be:ca:29:f1:5a:89:98:d6:45:b9:b3:1f:
                    47:14:0c:69:ce:84:8e:22:c1:37:01:18:0c:74:a6:
                    f6:ed:03:4d:ab:68:8f:95:58:5a:7f:ce:ad:21:eb:
                    fc:1f:38:d1:4e:c0:87:a7:58:4d:2c:cf:86:3c:9e:
                    1e:d4:27:6e:a1:88:03:8c:85:96:28:9b:fe:e1:8d:
                    03:2e:a2:0c:f6:d5:fa:7b:8f:e5:47:e1:72:bd:d7:
                    a5:a4:0c:25:f1:5d:27:17:df:3d:a3:2d:45:e4:36:
                    dc:15:18:51:65:97:e0:29:39:e3:47:e4:42:42:80:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:AA:B5:F8:60:F2:38:96:DF:D3:27:D4:F5:CD:79:CE:EB:48:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:61:09:f2:c2:79:25:b3:49:8f:13:d2:9d:df:e8:c8:d5:a1:
         6c:a7:b9:dd:b7:0f:46:e0:e0:66:2f:a9:fd:63:67:b0:1a:80:
         2e:9d:69:10:e0:c3:31:d4:f6:dc:b7:9e:4e:7a:af:73:b7:ca:
         4a:9f:d2:0c:8b:29:6a:c7:41:79:11:e0:f0:a6:5e:8a:05:e4:
         c2:73:20:ea:77:8d:e4:82:f8:fa:ff:01:3e:df:bb:d9:f9:40:
         f1:81:36:b1:47:77:a0:98:b5:5a:2f:8c:95:5f:28:0f:b2:e0:
         5c:8f:89:90:db:3b:ed:b6:ea:1a:b6:4d:1e:8d:9d:59:22:3b:
         dc:29:1d:61:34:95:99:a7:6f:ac:1c:b2:76:9b:9d:31:34:2f:
         02:fe:08:68:c2:65:79:5e:24:f5:2d:d5:ea:f2:41:ad:11:16:
         9e:32:f6:a1:eb:d0:86:ae:85:27:36:2f:fc:bf:c6:de:14:4e:
         b2:0a:e6:d8:7d:f6:cc:a4:65:74:1b:2d:b8:32:68:a0:47:89:
         9d:08:82:d0:f0:43:91:b9:b8:b1:f9:38:a4:e8:ab:0c:93:77:
         7b:e6:cc:f3:ea:29:88:d1:56:9f:42:d6:ed:fb:0e:12:06:af:
         1a:ba:3c:55:fb:de:9d:e5:9f:43:25:04:55:28:6b:74:62:59:
         dc:5e:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:20:15 2024 by rpki-client on console-fra.rpki-client.org