Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/84b03aef-7bb1-3890-995b-cc08844b0ff3.roa
File:                     84b03aef-7bb1-3890-995b-cc08844b0ff3.roa (raw, json)
Hash identifier:          pKh4Q3FK0cDx158N3XerDOad8/JZqD3H+FLQOnvvYfE=
Subject key identifier:   85:C7:66:1D:73:73:9E:B4:5F:B8:73:E1:F6:0F:78:CC:48:8F:E5:B4
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285847C4AA1A346275E460A80C1E80
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/84b03aef-7bb1-3890-995b-cc08844b0ff3.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     33548
IP address blocks:        162.251.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:1a:34:62:75:e4:60:a8:0c:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=c95a1b3a-ccf6-4aaa-a16a-b8d80d6c9988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:a8:44:e5:7c:02:e7:fd:a3:ce:c4:32:20:
                    a3:a1:bd:26:4b:94:98:df:d3:2e:47:7a:0f:87:ff:
                    3b:81:89:2c:d2:32:38:dc:e2:8f:4a:c2:ea:2a:5d:
                    fd:58:0b:78:bf:52:88:e7:c3:45:e5:44:ae:ec:46:
                    af:75:cd:0e:55:59:33:b1:97:51:60:ed:17:0b:14:
                    9b:42:63:a8:99:6f:26:a9:80:c1:8d:0c:47:ff:38:
                    44:ef:10:8a:57:a7:76:8d:8b:c7:49:d9:38:c5:bc:
                    b9:15:0e:ba:59:c9:73:4c:c9:7b:9b:56:7d:a2:eb:
                    75:10:ce:a8:68:12:c4:4b:b2:1d:f7:d9:be:39:c6:
                    2e:be:49:20:ac:25:40:ba:f0:2e:e4:4e:ba:80:2d:
                    9b:cd:87:12:16:a3:af:51:ad:1c:e0:33:3f:c9:70:
                    88:f2:56:23:1a:2e:6b:4d:1d:1a:2e:80:71:7f:8c:
                    23:d5:07:e6:5f:84:9a:ae:90:e6:46:86:db:a7:47:
                    b0:80:15:ad:2e:bd:1b:1c:c3:c5:ef:f7:bb:b1:a7:
                    f5:1a:f1:72:8b:c0:32:b9:b8:15:b8:fc:2e:bb:93:
                    b3:5c:36:41:4a:55:18:b7:1c:ec:6b:f6:19:3f:9b:
                    02:c5:de:c4:a6:9a:65:d5:97:ca:49:a0:47:2e:d9:
                    46:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:66:1D:73:73:9E:B4:5F:B8:73:E1:F6:0F:78:CC:48:8F:E5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/84b03aef-7bb1-3890-995b-cc08844b0ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:bf:96:a0:b1:d1:52:98:1f:34:34:31:36:3b:12:37:2f:
         01:c2:da:aa:58:55:7b:25:7f:47:f8:d2:a6:00:bb:f3:05:b1:
         c0:4d:7f:ab:69:57:6b:d5:41:ba:9e:1c:6c:ab:46:4e:e7:fe:
         47:ec:52:00:a3:3a:d0:a4:75:9e:a7:71:bb:c4:47:25:74:3c:
         fd:eb:bd:e7:44:53:6e:d1:2f:87:20:a8:8d:bf:2c:de:a6:b2:
         3f:28:5f:4d:03:ab:ed:4b:db:d5:fa:f9:3b:b5:c8:10:db:0f:
         f0:a8:a6:f8:0e:e0:cc:be:91:d3:19:b1:08:08:37:fd:1a:66:
         d4:da:c9:cf:af:cd:20:4f:f0:3c:49:99:6a:f9:02:6b:7b:bc:
         c5:1b:c2:70:9c:a1:38:42:d9:d9:01:87:6a:6f:01:3b:ea:dd:
         b2:c6:30:71:84:0d:9a:55:5e:db:cb:03:1a:ef:27:75:6c:10:
         99:bc:84:a4:3d:d8:37:ac:95:3a:13:60:af:9e:77:9f:93:af:
         cc:6a:6c:4d:62:98:d4:bf:64:80:2a:82:72:85:16:fd:5b:a6:
         d9:16:cb:ef:49:19:11:61:d6:45:b9:2c:8e:9f:ca:d4:24:a4:
         f9:12:ce:80:e0:1a:12:bc:c8:02:f1:c8:2a:22:83:23:61:3e:
         79:46:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org