Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/fe798b9c-61a6-3bfa-a8df-f42f7e89cd9d.roa
File:                     fe798b9c-61a6-3bfa-a8df-f42f7e89cd9d.roa (raw, json)
Hash identifier:          YwdBbfEr6+Ha4+hn8QpZp2P8fxLcipeY9K+feStG9Vg=
Subject key identifier:   EF:94:7C:3D:8A:8F:11:46:A0:89:CA:D3:7D:32:1F:EE:11:62:B2:0F
Certificate issuer:       /CN=1db84b45-be4f-4be4-8853-ec7e2099af75
Certificate serial:       010D0C9F43285847213B1D1D154AABC2C613C400
Authority key identifier: 71:58:C4:59:20:10:62:39:B3:19:0D:2F:4A:DD:A5:9C:CD:59:76:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/fe798b9c-61a6-3bfa-a8df-f42f7e89cd9d.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     47063
IP address blocks:        162.219.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:1d:1d:15:4a:ab:c2:c6:13:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db84b45-be4f-4be4-8853-ec7e2099af75
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=96f64ffd-1367-448b-9ccf-ddadaf577918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ed:6a:67:bc:bd:c8:86:ea:17:ce:1d:b3:68:
                    5d:52:f4:79:2d:c6:f5:bb:eb:22:ed:1e:fe:91:84:
                    e5:9d:81:02:c1:74:cb:2d:cb:6d:2f:96:ab:05:1c:
                    42:0f:92:e7:e4:82:4f:26:6e:0c:a2:4b:cc:6a:35:
                    b8:d3:6c:9e:e2:91:e2:dd:da:cc:df:d4:70:0f:34:
                    db:85:01:d2:6f:f3:8f:a2:f4:65:3f:c8:66:8b:65:
                    5f:ad:44:8c:ad:85:50:b8:96:b7:c3:59:4d:8f:da:
                    99:24:22:ad:71:17:95:12:86:46:9d:75:e8:73:b2:
                    33:fb:7f:89:8e:94:33:42:e1:bd:bc:47:d7:8d:de:
                    d4:80:db:04:52:a1:0a:bd:26:ef:ea:53:af:25:d9:
                    fb:f3:25:d6:30:ce:49:df:43:90:4e:cf:73:53:78:
                    59:8b:12:f1:56:c4:35:c2:03:00:ff:62:c2:0d:80:
                    cb:5f:93:24:98:e2:5d:8e:12:bb:3d:cf:32:12:c0:
                    76:f3:00:34:3d:96:e0:d2:6e:b9:ca:b8:b3:11:44:
                    d8:25:0d:f9:be:87:9b:b1:d2:cb:53:c3:21:ba:7b:
                    16:f5:4f:47:81:96:1b:6e:f8:21:2b:39:47:83:61:
                    bf:a6:80:71:72:46:58:03:2a:48:48:e6:9e:a7:07:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:7C:3D:8A:8F:11:46:A0:89:CA:D3:7D:32:1F:EE:11:62:B2:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/fe798b9c-61a6-3bfa-a8df-f42f7e89cd9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.crl

            X509v3 Authority Key Identifier:
                keyid:71:58:C4:59:20:10:62:39:B3:19:0D:2F:4A:DD:A5:9C:CD:59:76:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:90:7f:55:a5:da:f0:18:aa:5e:73:0f:8f:29:6a:aa:7f:
         69:dd:d3:b3:f5:85:1c:e9:e1:be:e7:8f:0b:b2:06:0e:19:8f:
         68:e6:aa:38:66:b1:a6:47:e7:14:a1:e5:8b:25:d1:53:dc:11:
         33:a5:1d:68:cf:62:aa:3c:2c:45:6d:e7:ae:84:90:37:9e:81:
         8b:f5:7c:b4:09:51:06:39:46:19:38:42:a3:28:4b:eb:d6:e3:
         9b:59:a1:41:f4:fa:06:b3:1d:d6:0a:4d:49:13:58:33:ba:60:
         cd:a4:60:07:4a:50:a8:5b:24:4b:31:76:34:64:9b:19:fb:9b:
         5b:52:e8:e2:cc:ba:af:aa:38:1a:5d:79:c3:e2:fb:95:67:c5:
         a6:2d:97:b8:dc:08:93:d3:89:ab:eb:16:2a:0d:c0:2f:82:7b:
         4a:e8:05:88:c3:1f:4f:7d:ce:fe:f7:77:cf:f1:90:db:f4:63:
         99:e5:83:ab:7b:d4:d1:9a:a2:71:79:d3:9f:98:c2:1d:26:b8:
         97:eb:7b:6b:ab:ab:9c:b9:5c:df:6e:f3:5d:58:ba:2b:fb:47:
         3b:bb:76:82:e9:c7:11:64:4d:cd:4d:1a:67:c5:2d:74:f0:3c:
         ed:ec:a9:a2:1d:ad:24:74:a2:43:69:1a:0e:c8:2a:c8:03:46:
         e8:ab:96:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:33 2024 by rpki-client on console-fra.rpki-client.org