Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa
File:                     7cc02203-158d-396c-b655-061c5cbbf221.roa (raw, json)
Hash identifier:          dNqef7qa/0JCbuNndlyw6qHFK9mlxjw70rwVc6BeG64=
Subject key identifier:   AA:8C:85:6D:F3:84:3A:B3:50:A6:0E:A7:13:91:89:EA:06:70:0F:0C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285845BA7E372D05E0CFBF3ECDF680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     26004
IP address blocks:        165.254.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:37:2d:05:e0:cf:bf:3e:cd:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=9254fa0d-87d0-4fc8-8359-f9844fb37593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:54:30:90:e2:eb:b9:ab:3e:bf:e9:be:c5:
                    3e:3d:3b:a7:6f:27:92:ec:0a:de:54:1c:cf:d4:6e:
                    b4:67:ef:32:42:7c:a6:1d:11:f4:0c:50:e7:04:e8:
                    93:42:96:12:3e:85:85:2d:3c:69:91:64:8e:18:92:
                    bc:e3:b0:c6:b2:2e:5d:18:4e:28:83:63:c5:19:c2:
                    95:23:59:93:dd:b3:43:c4:3f:61:80:28:30:38:ff:
                    c5:bb:b7:a0:41:30:fd:ac:ec:5f:47:bd:46:b7:3a:
                    91:1c:33:dc:85:c7:8e:22:31:9f:78:7f:93:42:fc:
                    af:fe:13:c9:36:cc:9e:f1:57:3a:2c:e7:13:db:b7:
                    ac:7f:10:5d:c7:ce:43:d8:18:59:45:0c:55:5c:c1:
                    10:dc:82:f9:0b:c5:16:eb:9d:33:11:48:10:fb:e0:
                    d8:02:ce:47:b9:52:d5:a1:ed:52:ad:ab:30:87:ea:
                    3e:a6:75:ec:30:ec:72:a1:dc:c6:36:f2:d9:23:71:
                    c0:2c:14:f9:2e:32:2d:71:63:19:08:95:bf:ba:80:
                    bf:fc:b3:ad:ef:59:e7:80:ee:84:16:1a:d4:3e:0c:
                    4f:37:38:cb:94:d2:7b:00:e3:81:fb:ee:cb:c3:3a:
                    0a:05:9f:45:3c:af:bf:d9:0e:48:e3:cf:c1:81:dd:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8C:85:6D:F3:84:3A:B3:50:A6:0E:A7:13:91:89:EA:06:70:0F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2b:85:5c:c1:95:57:ea:36:aa:72:bb:4e:d0:15:98:ef:c0:
         7a:02:96:00:0a:a5:59:33:fb:f6:e6:dc:74:b6:04:2d:5f:19:
         46:70:0c:e9:9d:07:33:40:c0:3c:ac:e1:b9:22:9b:52:be:f5:
         08:a6:d0:5e:cb:c5:5d:a1:5f:ac:ea:f8:44:a8:4d:7f:41:4e:
         38:a7:a4:6f:1a:51:40:77:e5:7c:26:fd:e8:d5:9f:5f:d5:06:
         98:9a:a5:5a:52:a4:6c:27:bc:14:86:13:dc:c4:45:27:b0:63:
         57:3c:f3:bc:30:5c:98:0b:42:f0:11:e1:ce:fa:c8:74:28:e2:
         73:03:5d:08:26:79:56:90:5c:b6:59:32:eb:d7:24:98:80:f5:
         51:a2:01:9d:79:b9:24:ad:a5:84:c0:45:18:bf:0d:81:1f:01:
         c8:7b:76:b9:13:8a:d6:fc:34:a1:eb:4f:34:2d:48:9b:20:5f:
         74:a9:f2:28:0c:65:72:68:30:c4:7e:54:2b:49:31:68:80:23:
         e5:87:21:7d:37:16:8a:c3:6a:13:d4:23:88:35:52:7f:eb:0b:
         77:79:bd:0a:48:8e:fe:ba:a8:17:9a:97:f5:59:4c:fb:54:7d:
         e8:5a:7a:d8:17:a1:c3:37:0f:15:98:44:9c:9f:be:52:7f:03:
         dc:76:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:54:17 2024 by rpki-client on console-ams.rpki-client.org