Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa
File:                     33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa (raw, json)
Hash identifier:          8d9UDB2W/N5fyvrJ76cGeA+ZCEJ+3Hg1qAADoPuFvIw=
Subject key identifier:   12:BC:27:8D:19:0E:73:DD:F8:8A:8C:31:06:8B:76:85:C9:C6:49:F9
Certificate issuer:       /CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7
Certificate serial:       010D0C9F432858459633517DBD2A0B7DD1A3B480
Authority key identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     25593
IP address blocks:        162.208.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:51:7d:bd:2a:0b:7d:d1:a3:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=ecfb7f6d-d7ab-40cc-b4ca-1bfc6e1f04b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:4b:64:26:02:21:f6:4b:0b:b7:0e:84:4a:
                    1b:41:94:c6:4d:bb:21:50:8e:2c:cb:1f:18:a4:ff:
                    c3:69:9a:b1:11:24:c1:6d:a0:92:c8:5e:1b:c1:82:
                    2c:e3:c3:2c:3e:50:41:db:39:4b:b1:af:01:cc:7f:
                    64:9d:b4:5a:1a:48:be:20:25:93:c9:ad:45:a3:b1:
                    ff:e9:b5:52:92:35:a3:f4:0a:de:e1:68:23:ac:3e:
                    e6:b4:3d:38:b8:64:89:91:cc:5a:08:b2:26:eb:32:
                    a6:5b:f7:17:d1:18:63:ec:08:1e:db:d3:6d:ea:7e:
                    b3:bd:d8:58:25:7f:48:97:f3:29:f0:3b:a7:b0:17:
                    20:7c:d0:f3:aa:16:29:b0:ae:46:02:49:3e:c9:17:
                    0a:04:78:85:d6:b2:aa:03:66:4a:4e:80:20:fd:d9:
                    f9:ef:79:f7:6a:f4:a6:db:48:2d:e3:70:cf:0e:bd:
                    0a:df:b1:cd:45:41:12:cf:dc:50:6e:c0:71:c5:3c:
                    0d:25:61:c1:fa:23:da:01:cb:e6:3e:ca:c9:f1:53:
                    b3:58:45:ce:1e:e1:8b:80:71:59:ac:62:c9:ef:d7:
                    e4:38:38:e3:27:a7:d0:0c:19:86:cb:dd:2b:2a:86:
                    0c:34:9d:25:39:69:92:07:81:5d:02:e2:7d:9d:3f:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:27:8D:19:0E:73:DD:F8:8A:8C:31:06:8B:76:85:C9:C6:49:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/33015f1a-ae96-38c4-b702-0f0b7fc0233d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl

            X509v3 Authority Key Identifier:
                keyid:16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:32:47:37:6c:91:3a:a7:42:76:d4:4a:e9:ad:36:dc:63:f7:
         fe:c4:d7:93:e6:5a:39:47:e2:2c:7a:db:61:a5:d2:89:95:8d:
         87:b4:e6:1c:3a:03:a0:c3:f0:cd:fb:8f:a9:7f:2c:24:b8:5c:
         96:18:c4:8a:93:84:95:49:41:30:ab:7e:b0:a7:24:7b:1c:04:
         87:7e:af:29:5b:3b:5b:54:d2:c0:72:45:83:7b:df:e0:96:d3:
         b1:c7:3c:89:ac:35:85:b1:9b:6f:fd:8b:f4:c4:26:b9:73:dd:
         dd:b2:f9:d4:c8:39:63:5a:d8:fc:2f:7b:d4:35:6e:53:da:b3:
         44:bc:14:8f:1c:f5:8f:ea:94:f2:3e:ec:fb:47:55:f1:fb:ee:
         d7:6f:1a:b7:bd:26:21:64:ea:78:fa:05:39:b9:04:67:83:11:
         af:10:c7:ab:e0:76:5c:0f:4c:4a:98:20:4c:ea:27:39:47:05:
         e9:18:5e:6d:92:21:9b:31:73:d0:cd:da:a6:fc:cf:6c:60:ff:
         53:67:75:28:28:a7:19:8d:c0:51:f1:41:06:42:28:91:3c:8f:
         3b:9e:69:f6:bc:1d:48:4d:5e:84:12:e2:6a:c7:52:13:13:ef:
         c3:b9:c5:0f:0a:1b:88:5c:4f:87:c5:44:29:a0:cf:49:94:cd:
         8c:77:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:43 2024 by rpki-client on console-fra.rpki-client.org