Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aea55cf-594b-3128-b501-6a4afcaa210e.roa
File:                     8aea55cf-594b-3128-b501-6a4afcaa210e.roa (raw, json)
Hash identifier:          +15kBoftAz5lZzcw9ehbE3h3LBJPqg7QIE/l8xXU5Ns=
Subject key identifier:   E3:00:B0:0F:F4:54:77:F9:BF:16:B8:4F:07:E0:1D:E4:CB:36:40:F3
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D876AC4E6341EDDFC91BC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aea55cf-594b-3128-b501-6a4afcaa210e.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     4997
IP address blocks:        216.222.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:76:ac:4e:63:41:ed:df:c9:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=c3772737-37f3-4c85-89cc-845cbd918dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:3c:7e:d7:93:46:5f:08:a5:79:27:d8:57:
                    16:06:d5:87:b0:ab:17:c1:22:72:8c:a3:1c:52:18:
                    fd:fe:98:53:5c:33:92:9b:87:52:28:30:fc:37:11:
                    66:87:ba:3a:b9:a7:a8:43:f6:ce:53:79:ad:c4:17:
                    2d:0f:d3:2b:47:47:f5:ee:0a:92:6f:4d:3b:0f:cb:
                    b2:30:86:2b:d9:f8:ec:e5:8e:0d:df:5e:b4:4b:5c:
                    7b:81:88:cf:30:db:a9:2b:49:0d:52:19:6d:3b:15:
                    82:8e:20:31:8e:e8:e7:b7:7d:a9:a1:72:fc:9e:79:
                    56:cb:46:82:42:44:e0:11:94:f9:5f:cc:29:3e:74:
                    d3:81:71:c5:0e:b3:c4:0e:d6:6e:41:df:b9:70:ec:
                    9c:b3:03:af:d9:f4:05:b3:ff:e7:6e:c6:55:14:ef:
                    f9:e0:90:9f:8d:e7:f5:c3:03:d6:58:20:b7:86:12:
                    0b:62:86:5a:a4:fb:e9:eb:6c:5e:9f:b1:2e:a9:46:
                    72:89:19:6e:0c:99:30:1f:dc:72:52:90:f1:d2:81:
                    59:75:0b:eb:3e:ad:75:d4:4a:10:da:29:36:8d:05:
                    f5:e4:7f:17:fb:04:07:bb:03:57:a9:7f:67:dd:63:
                    9f:29:3a:d9:b7:16:8a:24:d0:75:95:61:c5:52:78:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:B0:0F:F4:54:77:F9:BF:16:B8:4F:07:E0:1D:E4:CB:36:40:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aea55cf-594b-3128-b501-6a4afcaa210e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:2e:27:c4:4d:93:a1:8c:46:62:02:2d:2b:85:3c:0f:9f:cc:
         50:f0:73:b0:29:00:a5:d6:a5:43:d9:8e:e6:58:51:4a:08:1e:
         ab:f6:0c:fa:b4:5e:9b:fa:d9:3d:03:fd:4b:3e:3f:37:c1:45:
         cb:0d:22:48:e6:b4:f5:c0:0e:c5:65:1a:ed:f2:5d:2a:6e:ef:
         ae:5f:a3:1d:4e:5c:54:b0:ac:41:0b:30:a1:8e:d2:0f:82:65:
         a4:16:18:23:c1:53:ea:00:d8:bd:cb:78:48:9f:a1:b7:74:36:
         4d:b8:db:14:68:dc:42:6e:3d:e9:51:98:6b:4c:f1:93:3d:cc:
         f4:13:da:b0:4b:01:37:ae:37:a6:d1:46:28:96:34:cb:41:41:
         f1:59:2f:89:e6:af:ef:5e:bf:d4:57:ac:ae:fd:a9:c8:58:ac:
         82:ed:b3:25:de:7a:56:00:7d:72:07:6b:bf:20:31:d7:28:7c:
         3a:9e:f0:65:38:8d:21:7c:b4:11:b4:62:40:d1:4b:93:66:34:
         3d:21:d8:d8:30:ac:2c:68:d2:1b:62:ee:53:e7:e3:1c:1f:03:
         b5:7e:b6:c2:8a:db:3f:3a:f8:c2:e6:78:06:7e:7d:c0:4e:f7:
         4e:8a:77:47:cf:1c:b8:9d:d5:00:9c:52:30:ef:c6:a3:11:55:
         80:9d:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:29 2024 by rpki-client on console-ams.rpki-client.org