Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa
File:                     6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa (raw, json)
Hash identifier:          R7X691MXnGJXyavIXn2ucJdWAI0XFzJnWd+PpbIva+k=
Subject key identifier:   99:C4:91:C2:36:BD:7F:BF:DA:74:13:64:DB:EA:F2:DC:47:5F:E9:4A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847EE7D4E6B774E1C8884ADE110
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa
Signing time:             Tue 19 Nov 2024 13:34:49 +0000
ROA not before:           Tue 19 Nov 2024 13:34:49 +0000
ROA not after:            Mon 17 Feb 2025 13:34:49 +0000
asID:                     396597
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:7d:4e:6b:77:4e:1c:88:84:ad:e1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 19 13:34:49 2024 GMT
            Not After : Feb 17 13:34:49 2025 GMT
        Subject: CN=999fe9c7-0b03-45bf-937b-055110967eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:e6:c4:fa:22:33:2e:97:e8:91:7d:0d:34:
                    5a:cd:11:be:e3:14:31:e4:42:4c:e3:73:9f:03:1f:
                    7c:ed:ca:99:87:35:35:50:bc:d7:04:01:73:b3:16:
                    77:70:8b:5d:2a:83:f4:64:3b:cb:13:f9:d7:68:67:
                    c6:13:95:16:1b:7c:08:7b:0a:af:77:15:9a:9e:ef:
                    b2:99:67:76:ad:56:e8:2f:20:d1:aa:62:d3:2e:1c:
                    47:1a:e5:70:de:ac:89:00:37:e9:69:c9:70:a1:7d:
                    85:0d:ce:cf:44:73:c9:c6:5a:ea:6a:ee:d7:b3:a7:
                    4a:ac:e2:0f:db:d6:74:13:e1:6f:fc:f7:e9:5d:06:
                    08:05:4b:60:e6:c7:2c:a1:fb:c8:0e:bb:97:f3:7c:
                    5e:73:cc:eb:09:25:6c:81:d3:59:7e:cc:f5:93:e2:
                    95:09:e2:bb:d4:90:c7:35:c4:1c:73:ed:67:76:c7:
                    4c:db:5c:62:7a:bc:ce:ce:d9:cc:7d:68:a4:bd:f1:
                    ff:f5:2e:d3:cb:17:c7:05:e5:a9:61:33:c4:5a:49:
                    67:e6:1c:12:ba:57:13:ad:69:a0:da:dc:c8:aa:76:
                    4c:84:4b:3d:6e:e1:ac:74:dc:f0:1f:5b:ea:20:3f:
                    aa:da:6b:4c:f7:e4:37:1a:da:7e:4e:02:4d:ff:81:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:91:C2:36:BD:7F:BF:DA:74:13:64:DB:EA:F2:DC:47:5F:E9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6271d322-08b1-32e8-a8b3-dabc1a4b33fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:90:d4:cb:cd:df:93:a8:09:4f:6d:40:bc:f4:5d:72:29:a7:
         2c:5c:83:48:cc:ce:76:be:a7:74:e4:9f:1e:c2:96:f4:f9:78:
         5b:05:81:78:26:78:00:1d:5f:ee:bc:a7:df:ab:78:fd:4d:1a:
         ed:ea:76:b7:cc:d3:d3:fd:45:15:ca:00:4d:96:10:57:3f:3a:
         48:45:ff:32:5b:44:da:a0:e3:bd:7f:d7:68:16:b1:5a:df:63:
         c3:ae:34:61:ed:2e:c8:db:3d:5a:48:cd:b1:a2:ed:3d:cf:74:
         a9:3b:7e:ec:ca:1f:ba:46:13:b7:db:44:82:0b:98:d7:02:73:
         26:92:4b:a8:d1:ab:31:32:ea:ea:a5:70:77:83:76:e2:27:c5:
         63:68:6c:46:61:e5:e3:8b:1d:a3:66:3a:6f:6b:04:06:4d:1f:
         e7:b9:8e:ba:0c:95:70:39:12:f2:4d:a8:db:de:b6:7a:99:85:
         bb:e4:45:89:21:8d:3e:eb:9d:e0:d9:e6:13:1f:ca:88:9d:50:
         06:c3:44:62:b3:fd:f8:46:8f:74:71:52:ef:38:70:6a:36:c0:
         7b:5c:65:57:f0:07:bd:d4:07:7d:6f:ae:40:9a:06:18:7e:4d:
         df:a4:f9:47:e8:32:96:91:b2:fa:56:ba:a6:d3:02:b0:8e:bb:
         b1:e6:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:36 2024 by rpki-client on console-fra.rpki-client.org