Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa
File:                     31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa (raw, json)
Hash identifier:          vZnzotBmzfk9Q5bGFVlVk+X2ef1QV+4HucQ5pap0aME=
Subject key identifier:   2B:53:D3:60:EE:FC:51:59:B8:AF:42:BB:14:90:DB:6B:3F:B2:93:79
Certificate issuer:       /CN=22d0498f-1d90-48ff-92de-ab62b685b2fe
Certificate serial:       010D0C9F4328584765A0EDBC01974684D555ABE0
Authority key identifier: E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     22773
IP address blocks:        134.195.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ed:bc:01:97:46:84:d5:55:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0498f-1d90-48ff-92de-ab62b685b2fe
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=39956372-ba41-4940-b9db-be79f47ff6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:a4:e3:ff:e0:7c:09:b3:b8:ed:f1:2f:ba:
                    e9:c9:e3:97:29:a3:8b:08:2e:a8:73:eb:f6:a1:06:
                    5f:a2:59:1b:cd:e9:d4:09:45:08:13:b8:ca:54:34:
                    d5:58:09:a9:3f:bb:e5:31:3f:d8:84:07:8c:04:e7:
                    7e:d8:51:9b:9b:06:f1:6a:67:9c:c6:1e:87:3c:b7:
                    f5:3b:f7:f2:d5:65:72:45:5a:9f:27:dc:64:00:d8:
                    07:b0:1c:af:89:33:32:f7:bf:73:22:6e:83:f4:c3:
                    e2:3e:2b:7d:0f:7a:53:69:e8:20:b9:85:6a:f0:ee:
                    ef:53:95:60:60:d8:9c:ae:5b:d0:43:36:64:f6:85:
                    be:37:1c:0e:51:16:7b:1b:8f:d6:0c:a9:07:85:01:
                    1b:9f:d9:9d:b9:47:24:7a:08:e6:5c:cf:09:57:b3:
                    ae:0f:3d:5e:a0:3e:41:ba:1b:62:85:50:0a:eb:be:
                    8a:34:e8:ab:07:03:9b:51:87:82:e0:9f:83:11:c5:
                    50:e1:e4:8f:81:2e:eb:7c:a5:dc:89:a3:f8:6e:0f:
                    58:5a:1d:f8:a3:de:37:08:e9:8e:15:d2:0e:c9:b9:
                    ab:a3:6a:04:1b:c0:20:bb:f4:89:df:b5:a9:9e:35:
                    0f:61:ea:ad:20:b4:bf:55:bd:6e:02:dd:d9:44:47:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:D3:60:EE:FC:51:59:B8:AF:42:BB:14:90:DB:6B:3F:B2:93:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.crl

            X509v3 Authority Key Identifier:
                keyid:E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:c5:1f:a0:b0:ff:f6:bb:1f:c0:8e:54:1b:0f:ab:9f:ee:
         0c:35:97:4b:16:56:42:9b:19:d2:28:5c:ce:37:be:73:aa:3e:
         26:a3:65:19:d1:09:f0:76:98:bc:3a:10:8e:d2:98:c6:94:19:
         6e:77:11:d9:5f:d3:d5:92:6f:5d:a4:03:b5:02:6e:7f:c4:9e:
         ed:6b:f8:f5:bc:ca:dc:45:f1:06:55:4e:9d:f0:d6:9a:2a:ca:
         e5:06:88:4d:40:ae:08:3c:ed:27:de:7a:a9:c9:78:74:61:ce:
         39:5a:43:87:5e:cc:1d:a0:c5:bb:0c:04:48:31:c6:b1:cf:10:
         fb:7c:dc:e0:3a:52:09:21:11:27:c0:43:7d:0c:e9:99:2a:f9:
         96:22:55:8e:9a:b4:07:61:41:97:2a:d6:26:a4:35:34:e0:6f:
         1b:a5:b9:27:57:b9:5c:25:46:3a:05:fb:0b:a8:f7:2d:d9:d3:
         b5:e8:4e:21:1a:9e:16:9e:fa:3b:0e:ba:f9:74:43:71:73:d3:
         6a:56:f6:72:fc:b3:33:db:36:c7:c0:c1:f4:47:09:8d:12:9e:
         ee:60:33:a7:ec:b1:0d:bb:a2:3b:44:5b:cb:89:ef:9a:bb:ad:
         0e:6e:63:ce:c8:be:38:37:a0:14:72:f9:5c:69:81:e9:d8:ce:
         60:a9:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:23 2024 by rpki-client on console-ams.rpki-client.org