Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/5c6ef643-4126-39d2-a721-39da0eb34ce8.roa
File:                     5c6ef643-4126-39d2-a721-39da0eb34ce8.roa (raw, json)
Hash identifier:          PDbsoOjzTJr6JadgWmO5NcH9Zr7vgJWDucUBm3U9fdA=
Subject key identifier:   E0:21:20:0B:39:35:DF:71:70:24:73:4C:44:AA:3F:5B:4C:88:BC:B9
Certificate issuer:       /CN=d3a00337-0fdf-42e1-9343-424fd474da93
Certificate serial:       010D0C9F43285845612865AEEABE23AC9B5AEC80
Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/5c6ef643-4126-39d2-a721-39da0eb34ce8.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     27398
IP address blocks:        162.218.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:65:ae:ea:be:23:ac:9b:5a:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=e147d020-05b9-4cac-b5c2-2baccbe81fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:ce:99:c2:aa:aa:f6:fb:0a:ec:3c:11:82:
                    35:fc:4b:bf:db:7e:b2:40:2a:27:d8:3f:61:2a:f7:
                    24:68:1a:de:6c:8a:38:f9:a8:03:02:f3:46:58:0b:
                    3c:98:73:ab:12:1e:cb:44:72:61:12:66:9f:2b:56:
                    f1:28:03:26:05:a1:9b:ac:b0:fb:59:ef:65:44:c0:
                    ee:19:0f:86:bc:d5:b8:a5:a5:13:05:4b:bb:2d:15:
                    ae:bd:95:87:63:33:bc:13:2d:92:98:9f:a2:66:d4:
                    5c:18:2d:20:d3:60:f0:9c:57:97:30:66:48:d9:0e:
                    c6:db:15:28:7d:2d:bb:30:23:f2:ab:b5:55:4b:2b:
                    30:c7:17:7f:dd:9d:89:68:a6:00:e5:ae:69:ba:85:
                    2b:77:bd:fe:c1:e3:75:31:02:31:85:12:42:d1:eb:
                    4f:95:74:09:c5:cd:bf:2f:1c:67:e6:fa:73:03:d5:
                    8d:af:6e:de:31:64:50:bf:3e:06:3f:71:83:88:1a:
                    88:2b:3d:ae:d3:72:35:6b:e1:91:88:67:3b:3e:8a:
                    4b:d3:8c:28:74:2d:45:35:b0:3b:71:10:5c:6d:26:
                    88:f7:bf:8e:87:a8:93:0b:bd:b7:35:7c:a4:8b:7f:
                    4d:da:5e:ac:0b:ec:3d:74:fc:31:5d:69:ec:0f:cc:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:20:0B:39:35:DF:71:70:24:73:4C:44:AA:3F:5B:4C:88:BC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/5c6ef643-4126-39d2-a721-39da0eb34ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl

            X509v3 Authority Key Identifier:
                keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:60:1a:c6:96:de:87:e8:f2:b4:d4:d1:fb:c5:8b:0d:40:
         75:d1:7c:c4:d7:32:54:62:f6:a2:f2:b1:b6:4b:12:eb:22:18:
         63:74:1e:0b:0c:7b:33:3b:44:6b:e5:62:24:39:09:f9:f5:cb:
         35:c3:e1:4b:4f:37:52:d3:27:55:2d:f8:33:79:d7:24:e7:72:
         40:a7:1a:a6:28:fe:95:64:e2:24:b9:64:a8:75:cb:9f:38:0d:
         cd:c2:d8:87:57:d4:48:c3:ad:34:1e:a5:f7:9d:90:3d:58:29:
         2f:88:a9:07:4c:58:57:d7:ac:8c:69:96:97:a1:7a:28:37:98:
         35:c1:8d:de:12:fb:ac:9d:b5:d1:c0:aa:69:d4:57:5d:b5:df:
         ad:a2:bd:11:83:20:c0:b7:68:4e:8e:23:b2:23:55:91:be:b5:
         87:1b:3f:6e:1f:aa:34:01:ff:a0:55:12:14:1a:cf:65:3c:5e:
         62:8e:37:ae:19:32:a7:1a:46:5d:37:63:d2:cc:02:c7:04:55:
         05:5b:e1:20:19:a6:47:07:9e:97:1e:e7:cc:67:b4:58:b4:21:
         fb:c1:0f:cb:02:13:aa:1b:39:92:d8:7e:4d:b0:76:93:ec:8b:
         e9:d3:0a:6a:dd:b8:93:ff:5c:37:86:57:e6:c8:96:d3:45:0d:
         4e:36:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:53:26 2024 by rpki-client on console-fra.rpki-client.org