Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa
File:                     36ed91fb-062d-351c-b4c9-180bcb664af4.roa (raw, json)
Hash identifier:          YSli4RHRYbux6f87PEYlIQnIvpNbY3gVWliqmG752qM=
Subject key identifier:   D4:39:6A:F4:4A:54:08:3E:9F:29:5C:49:93:58:58:28:5E:C7:B6:DE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847EE7D4E87212B252C87F93C40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa
Signing time:             Tue 19 Nov 2024 13:34:49 +0000
ROA not before:           Tue 19 Nov 2024 13:34:49 +0000
ROA not after:            Mon 17 Feb 2025 13:34:49 +0000
asID:                     36629
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:7d:4e:87:21:2b:25:2c:87:f9:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 19 13:34:49 2024 GMT
            Not After : Feb 17 13:34:49 2025 GMT
        Subject: CN=4d3f2e7c-0bbf-4ebf-bf66-bb8b62cd5d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:7a:ba:cc:28:7d:aa:53:d3:8d:12:e4:ae:
                    5c:e4:7c:43:5a:0a:a1:80:09:b5:56:73:03:97:92:
                    cc:d8:d7:71:a3:be:9f:c2:3c:d2:87:ec:41:f5:82:
                    ab:45:e5:02:9e:33:f9:39:f0:20:60:42:e3:6e:aa:
                    a6:b3:57:e2:4e:cd:34:3b:06:20:de:d6:37:50:35:
                    1e:27:1b:3a:e0:ad:a1:cb:23:ba:d4:65:fb:2a:74:
                    45:17:48:cd:2a:38:f2:a7:59:2b:6d:f5:7f:71:3e:
                    0f:f1:6e:4a:92:22:c0:92:fb:64:e4:48:27:b4:38:
                    b4:b9:d3:61:90:cb:59:50:e3:6c:9c:eb:d8:0d:d4:
                    a6:99:9a:90:2f:0e:0f:eb:73:3c:16:ba:2c:40:41:
                    84:80:a4:b2:0b:7e:dd:20:c3:dc:8f:a6:87:bb:0f:
                    78:08:74:1b:93:46:ba:44:39:52:5a:ca:73:04:17:
                    29:4e:d3:5e:8b:a7:94:3d:f2:51:0d:8a:e7:e6:9e:
                    5a:dd:99:32:f0:32:c1:cf:67:29:12:30:5c:53:49:
                    ed:7a:42:d2:e8:a3:43:1d:16:7e:9f:3c:54:3b:3a:
                    60:c9:13:88:b1:60:04:44:35:46:ce:8e:b0:15:50:
                    be:b4:50:79:67:5c:87:93:f3:01:48:37:57:82:75:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:6A:F4:4A:54:08:3E:9F:29:5C:49:93:58:58:28:5E:C7:B6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ed91fb-062d-351c-b4c9-180bcb664af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fd:86:19:37:d4:bb:56:79:17:7a:12:b2:81:f3:62:11:c3:
         fb:1f:08:8c:28:89:10:ac:83:57:52:70:72:c2:a8:97:47:5f:
         a8:d4:7b:53:89:06:a6:46:87:ec:6e:73:7b:6e:e4:b3:cb:9e:
         57:ad:64:c4:0f:b5:0e:2b:ec:a7:ac:5c:2c:a0:d9:cd:fd:6c:
         96:ff:2b:84:1b:16:32:ec:7c:32:ab:ad:ce:3b:b2:56:fa:b7:
         01:fe:03:b6:59:f9:71:b4:f1:bb:cf:0e:57:02:51:23:e5:3f:
         77:dc:4e:ef:8a:b2:39:fd:9d:a5:f4:d8:e9:2a:30:4f:50:b1:
         f8:7a:f5:cf:a3:bf:e1:fa:9d:3b:1a:9a:b5:07:8f:a3:87:36:
         f9:6f:3b:a0:e3:19:33:39:a8:ac:6c:93:95:8b:f7:0c:0a:94:
         5b:6c:67:c5:3f:5a:4a:58:2a:3a:fb:95:ba:ed:07:64:80:08:
         79:73:6b:d2:17:c3:4e:e0:3e:5b:bf:1e:2d:2a:52:0e:3c:ed:
         ee:c4:ba:8f:4b:89:70:33:76:04:d8:d7:db:09:c3:79:70:a6:
         9d:6f:4c:6c:54:7f:e5:5c:10:05:e1:6c:a7:58:7a:b1:89:fc:
         4b:fc:c3:09:d7:4b:87:f2:bf:02:52:0f:d1:16:27:ca:8e:55:
         4c:a6:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:33 2024 by rpki-client on console-fra.rpki-client.org