Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/9f16564b-13e0-3a41-a755-f475fe240546.roa
File:                     9f16564b-13e0-3a41-a755-f475fe240546.roa (raw, json)
Hash identifier:          NwyjqBUShv61jfZfnaNkMrS36UzMV4gMwmM6lID3/Pk=
Subject key identifier:   3C:8F:15:31:F1:E6:8E:F6:23:E7:55:23:84:91:FC:66:68:A2:01:7A
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F432858454AD2CCA4C4CF295FDF625280
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/9f16564b-13e0-3a41-a755-f475fe240546.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     62695
IP address blocks:        155.254.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cc:a4:c4:cf:29:5f:df:62:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=7f1f85f4-07a3-46d9-8748-3cc35d67cf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:6e:ef:dd:b0:ae:98:aa:50:35:e5:ea:66:
                    3a:89:f2:03:97:33:44:30:e8:8c:88:ff:4e:bf:ef:
                    a4:0a:55:b1:09:5f:21:3d:94:17:03:1a:5c:b2:1e:
                    d2:dd:6b:ce:9d:54:c3:a3:3f:ee:9e:66:b5:cc:18:
                    94:8a:ed:28:9e:fd:ac:8d:07:d7:a2:3e:3a:78:d8:
                    f8:87:36:5f:bf:13:f1:7c:56:31:78:e8:a2:64:80:
                    a0:12:07:ed:16:c3:84:0c:7c:37:cf:4b:7d:b2:80:
                    86:93:b9:c3:23:9c:34:b0:03:a4:0a:e6:1d:0e:19:
                    af:79:1a:94:6c:24:8c:58:25:c2:cb:67:c6:7a:a5:
                    46:bb:4e:b8:64:19:cc:2a:85:f6:8e:ef:81:2f:63:
                    df:98:2a:37:e1:9c:25:90:2d:3c:24:3e:93:c4:90:
                    3f:93:76:f8:20:b2:c2:69:ee:41:2a:37:1d:e7:a9:
                    23:25:13:d8:85:03:c8:ee:e0:30:8a:3b:8d:50:7f:
                    1c:76:8c:2c:dd:fd:01:32:53:54:67:0c:80:d3:3b:
                    ad:c9:d8:a7:73:64:17:b6:ad:42:9b:7d:25:2d:50:
                    31:9f:b9:20:e9:cb:ad:90:00:6d:2e:f5:20:22:60:
                    47:c2:6e:95:bf:16:11:40:de:a5:45:5a:2b:e8:57:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8F:15:31:F1:E6:8E:F6:23:E7:55:23:84:91:FC:66:68:A2:01:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/9f16564b-13e0-3a41-a755-f475fe240546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:26:a3:70:1c:7b:90:d7:5a:af:ee:d6:cd:21:56:e1:a4:35:
         93:3a:ad:20:15:3f:81:3b:56:60:63:b5:fa:ce:40:a9:86:28:
         24:0c:28:20:cf:f0:25:ac:16:97:30:8f:41:63:45:fb:4a:19:
         a8:4e:c2:a0:a7:a6:5b:d0:e7:dd:be:40:1d:3d:32:c8:95:f1:
         d5:c3:35:77:18:ab:c6:8d:a9:e9:39:b9:81:f9:6f:f7:26:ee:
         d3:a9:7a:f4:79:bf:d5:84:79:4d:83:7b:56:2b:fc:0f:d9:27:
         30:9f:fc:1c:8e:08:27:e1:2a:81:13:e2:47:a1:de:8d:5a:69:
         c9:4a:b4:de:a8:71:f3:06:ce:d9:93:7b:d4:eb:95:e1:cd:d8:
         f3:61:45:6e:51:0f:f8:46:1a:f0:04:b3:a8:bb:9f:5b:b8:5b:
         4f:bc:24:a4:2d:00:63:84:54:eb:78:61:9f:07:40:a5:79:47:
         96:ba:1c:d1:40:11:d7:fe:cd:1b:9a:d3:3d:2e:43:82:4a:76:
         f9:90:81:5a:9b:2b:53:92:51:ae:d7:44:86:01:c6:84:6e:56:
         34:37:a2:19:c3:8d:f8:62:d4:9f:22:5d:64:73:75:10:66:0f:
         1e:7b:51:44:06:18:e5:cc:84:ff:c5:7d:4b:d7:15:18:2a:ef:
         50:47:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:03:07 2024 by rpki-client on console-ams.rpki-client.org