Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
File:                     22eb73ec-b415-3bc1-9d15-13db833fbec4.roa (raw, json)
Hash identifier:          x3QTgyBy1q2eaZ/EMEd7Xs25cXLjuDgZFX8TRH+Gq8g=
Subject key identifier:   C4:F1:DC:20:61:91:4C:94:5F:1C:F1:2F:0B:4A:1D:76:43:D6:7C:83
Certificate issuer:       /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial:       010D0C9F432858476F6638849381975E75A2EBC0
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     22169
IP address blocks:        204.10.136.0/24 maxlen: 24
                          216.239.128.0/24 maxlen: 24
                          2607:fe90:8000::/48 maxlen: 48
                          2607:fe90:8001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:38:84:93:81:97:5e:75:a2:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=2c9cf799-c171-47c7-9a66-f7b3e91f136d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:54:0b:d3:3f:9d:7e:08:f3:5e:ac:1b:d9:
                    b1:b2:b2:7a:97:27:1b:50:31:d5:ab:42:75:f8:3a:
                    05:f5:8f:b0:60:4d:9d:22:f9:75:4a:30:1e:45:d3:
                    45:ea:89:77:8a:41:a7:d0:6f:87:7c:74:5c:8f:31:
                    f2:dd:64:af:9a:0a:26:a4:94:fd:a4:26:05:18:de:
                    b9:d4:d9:f6:10:b4:5a:93:8e:e2:10:4c:5d:45:f1:
                    36:6f:63:23:2e:b0:33:6f:bd:ef:df:bf:c2:5e:90:
                    67:de:29:4a:fe:bf:ac:b2:b6:24:bd:52:48:b9:66:
                    75:1a:0b:ff:0d:a3:67:b0:86:7e:d5:49:4c:39:97:
                    32:b0:71:59:23:54:60:d3:ea:3d:31:90:bb:c9:4a:
                    0e:7b:bb:f4:33:7e:cd:66:76:7b:ec:65:04:f5:a0:
                    aa:47:07:8b:69:8d:f0:3c:df:18:14:ef:f1:ea:ed:
                    62:36:0c:42:6f:49:db:e8:15:ed:eb:95:8b:99:7d:
                    e4:a1:a5:0a:eb:78:ca:fa:b7:eb:54:f7:e0:f7:67:
                    61:81:7c:c5:ff:48:88:96:dc:ed:70:fa:72:02:7c:
                    86:2e:d3:39:a7:ef:39:f1:ac:94:32:fa:b9:e9:04:
                    e9:d0:34:e3:0d:f8:9e:37:a2:5f:69:10:76:ec:4c:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F1:DC:20:61:91:4C:94:5F:1C:F1:2F:0B:4A:1D:76:43:D6:7C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl

            X509v3 Authority Key Identifier:
                keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.136.0/24
                  216.239.128.0/24
                IPv6:
                  2607:fe90:8000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:fc:d8:5b:0c:ec:17:f5:59:9c:be:ca:9b:12:2e:8a:11:
         78:d1:12:6e:f6:d5:fc:da:b8:36:94:a3:5c:eb:60:17:56:21:
         e9:db:f9:e4:dd:04:62:42:fb:99:4d:34:bc:e3:cc:b7:30:27:
         2e:8e:13:96:81:c1:85:48:21:9d:62:51:ed:28:8d:5a:95:a3:
         47:83:78:dd:1b:b3:3c:da:9b:9d:37:d7:7f:62:6a:6c:02:44:
         dd:8a:da:9e:c8:48:33:c0:8c:4d:c0:b2:8a:ba:d5:61:f1:cb:
         a1:c9:3d:93:75:f5:8d:5e:86:90:47:5a:e5:9d:1b:37:82:06:
         25:61:61:58:c1:0e:d0:48:6b:1c:7f:2c:94:c2:1b:00:17:fe:
         26:4e:7c:13:0c:b7:2f:2a:a5:ed:78:f8:4d:c3:ce:ce:08:c9:
         e2:2e:ff:e7:25:19:d1:06:e5:3e:e3:d3:42:80:2d:2b:84:69:
         b0:54:4d:f2:42:f8:b4:71:7b:c4:c5:d9:f7:6e:86:71:7c:27:
         73:88:e3:80:ac:30:fb:28:19:d8:04:ee:12:95:58:91:00:67:
         1e:5d:87:7f:e4:a4:25:67:b9:9e:21:06:2f:7f:3c:af:99:72:
         f3:65:d6:fb:d9:7c:0e:39:01:de:70:f7:55:90:d0:db:d6:e6:
         45:15:fd:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:29 2024 by rpki-client on console-ams.rpki-client.org