Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa
File:                     570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa (raw, json)
Hash identifier:          UVoIndiOoKMcMxdAqDnZOvLg3EBGvWK0QOQizW33B2Q=
Subject key identifier:   2C:0C:D2:3F:AD:6A:DC:55:20:7B:A3:B1:05:8B:46:D8:B6:7D:BB:B7
Certificate issuer:       /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
Certificate serial:       010D0C9F43285847A04141B1C213F9C0B24E5800
Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     16715
IP address blocks:        67.220.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:41:b1:c2:13:f9:c0:b2:4e:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=e16df03b-6c8f-4deb-b1e0-4c7fcd518f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:f5:cb:e8:9f:ce:f9:49:9b:95:6b:38:81:
                    39:c7:1a:00:5c:3a:2c:38:08:0e:8b:d9:11:cf:e1:
                    51:78:6f:7a:0a:7d:d1:0b:c0:79:30:a3:06:1b:03:
                    89:96:85:6c:17:7b:09:64:a6:11:dd:a7:89:ba:11:
                    2a:82:e3:68:fc:56:76:ad:90:e3:18:64:c7:7e:58:
                    16:fb:a4:c3:fd:eb:49:57:72:71:7a:30:bd:0a:44:
                    be:61:68:d9:51:a5:cf:1e:5f:cb:bc:bd:a1:4e:14:
                    0a:c6:67:48:52:07:2e:65:8f:58:c0:94:da:8b:8a:
                    b7:9c:5e:fd:80:09:8f:01:17:15:7c:c2:a3:95:88:
                    6d:1b:ae:2b:88:b4:cc:bf:51:a8:51:31:f3:b9:b5:
                    ec:a1:b7:fb:e8:6d:ec:dc:ff:82:a9:59:6e:44:6d:
                    df:35:e6:f1:07:27:c2:3f:60:73:44:fc:1e:be:a6:
                    c0:4e:38:89:62:ff:81:c3:8b:42:9b:bf:72:21:cd:
                    34:58:9e:09:a4:28:4b:95:c5:8e:cb:a0:70:60:99:
                    07:1c:a2:5a:87:69:22:8f:ca:56:6b:93:b5:1c:ed:
                    f0:9d:72:df:a4:e5:cf:c8:04:66:93:93:9e:64:3c:
                    07:3e:b5:f1:84:96:62:8a:2f:29:71:66:6e:e9:91:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0C:D2:3F:AD:6A:DC:55:20:7B:A3:B1:05:8B:46:D8:B6:7D:BB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl

            X509v3 Authority Key Identifier:
                keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:7e:fb:c6:37:c8:82:18:44:eb:a0:d9:6f:be:cd:01:51:
         d7:84:41:9f:08:0b:cf:88:eb:9b:61:5b:88:ac:a4:c8:cf:2d:
         0a:16:5b:e6:44:74:6a:1b:2c:43:c1:88:ef:73:78:05:b9:35:
         a1:52:d7:4d:57:97:3c:25:fc:0b:a7:b0:15:32:92:09:d3:77:
         8e:9f:78:f1:7a:70:c7:8f:f5:5a:6b:01:9f:bb:a7:b2:8d:e5:
         af:48:69:bc:ca:7b:3f:75:1d:be:1c:ce:a7:bd:ab:f2:73:d0:
         ff:a2:e6:28:a0:bd:56:04:f2:66:f3:30:77:c0:20:c9:df:67:
         4b:7a:82:66:07:5e:9d:ad:ff:5d:6b:7a:a2:76:be:49:5a:d5:
         21:01:8c:a6:b1:ce:6e:86:f7:40:3f:52:db:82:7b:a4:e7:cd:
         c1:1d:4f:a0:19:61:5f:8d:c5:d3:fe:e8:c9:b7:2b:2b:98:72:
         7e:fe:b8:97:52:86:77:2d:29:0e:be:13:cc:1e:a7:b2:97:4d:
         fc:d0:63:73:6b:7a:75:b9:19:80:29:d9:56:68:5b:97:1c:a5:
         aa:a1:1b:8d:70:a8:c0:91:d6:9b:d4:22:47:28:fe:74:b1:54:
         e4:10:0f:0c:14:3a:36:82:ff:77:05:93:31:96:a7:48:41:f9:
         13:f3:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:23 2024 by rpki-client on console-ams.rpki-client.org