Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa
File:                     25ed31a6-13c1-3088-8152-35ba9db84078.roa (raw, json)
Hash identifier:          r/WmRRFkHj8l1JSHteQOUyplyPI4pGvxoW3qKGnoxAs=
Subject key identifier:   06:B7:C0:0A:9E:92:7C:FE:E0:1D:D5:FC:4A:29:39:B2:43:7D:E5:8F
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F432858457D1323E99DBADC0A7E8C7340
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     30475
IP address blocks:        162.245.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:23:e9:9d:ba:dc:0a:7e:8c:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=64b2df7b-514f-4b39-b18d-404e90186988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:15:9e:d3:92:a0:bd:9e:d9:38:67:20:0f:
                    13:57:b3:5d:9a:f8:8e:a1:8a:53:03:ab:f5:67:b2:
                    c2:b6:b0:12:dd:03:7d:0d:2e:e6:3a:78:4e:2b:e5:
                    25:af:c0:9f:58:72:01:1b:63:a4:7f:0b:84:c1:ab:
                    3f:94:1d:ce:f1:24:15:bf:ab:d3:9f:ef:1b:7c:81:
                    51:f3:44:4b:6e:85:be:df:33:a3:da:a5:41:45:3f:
                    1d:1d:71:9b:d8:30:1e:25:53:df:4d:98:d5:fa:4d:
                    94:6d:26:ba:9f:81:5e:3b:5c:a1:7c:46:29:3c:f8:
                    0f:fb:ea:7c:f3:8b:68:82:0a:e3:ee:f8:dd:9a:10:
                    e5:38:02:f2:79:98:a6:29:e0:5c:62:08:48:58:c1:
                    0e:d1:59:b4:e8:df:16:b1:ba:7c:a3:11:f5:82:0d:
                    30:f3:5c:8c:46:d1:d1:d5:39:fb:8d:33:d6:34:ad:
                    b8:a1:02:8f:96:9b:72:b3:2c:cb:fa:0c:b8:50:b8:
                    33:e1:4f:e4:fc:d6:e8:6b:7f:b1:b3:d8:f6:bc:3b:
                    6d:03:ad:a9:6e:17:02:fe:e9:c4:ff:8a:5a:9f:79:
                    70:77:4c:1d:09:3b:cf:75:27:18:dc:b9:36:8d:8a:
                    4c:99:20:db:ac:3b:a5:0f:51:2c:68:89:fc:ce:16:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B7:C0:0A:9E:92:7C:FE:E0:1D:D5:FC:4A:29:39:B2:43:7D:E5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:d7:3d:e7:09:d4:12:ea:2a:09:90:4a:9c:f3:a9:08:29:
         3f:77:f0:19:26:6c:04:cd:78:00:53:04:35:a7:83:c4:76:a7:
         30:c4:32:ac:82:26:30:15:4d:5c:3c:dd:b3:eb:4f:fa:bb:18:
         72:5b:80:9b:d8:b4:0c:39:f3:74:b9:4a:99:de:7f:18:55:4e:
         ad:4a:d0:c2:cb:dd:26:ed:2e:bb:af:98:43:f8:d6:cf:5b:33:
         9a:bc:66:16:64:07:0b:71:12:d1:25:81:c9:3e:c4:b7:e0:66:
         de:bf:7a:30:d5:6f:db:4b:89:ce:3e:b4:a3:d0:1b:17:d3:55:
         82:ba:38:fb:7b:27:e1:26:5c:25:e2:a5:fd:9e:ef:61:bd:1c:
         5f:9e:d3:41:28:3b:60:f1:f4:a1:d2:9c:d8:3e:c0:a3:a6:01:
         9c:0f:52:cb:76:f9:b5:5b:8e:1d:79:58:31:84:3c:99:ea:51:
         20:15:56:eb:c3:d3:fb:ff:c4:c1:cc:bc:d0:21:21:9e:10:4f:
         55:e5:75:ba:cd:4b:7e:66:f6:0b:8b:c5:5f:63:90:a0:66:42:
         5e:7f:bf:9c:49:02:ee:79:04:24:ab:74:cb:9c:3d:1e:d6:69:
         cd:cd:56:c9:1d:f0:15:e5:4e:6f:5e:f7:07:46:fb:eb:19:51:
         33:2f:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:49 2024 by rpki-client on console-fra.rpki-client.org