Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
File:                     27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json)
Hash identifier:          iZNb8Rc4tE90hAXCUWt7du652hx2B5JuLHJELfWGsVY=
Subject key identifier:   23:21:1D:25:63:61:A7:15:D1:8F:A6:0B:6B:BD:11:F7:29:EA:B2:5A
Certificate issuer:       /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial:       010D0C9F43285845B4E8DA72C4A8D496B9C9A480
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     393433
IP address blocks:        162.254.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:da:72:c4:a8:d4:96:b9:c9:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=158755cf-ea05-4001-8cea-d440fac12e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:55:00:38:b0:fa:4d:15:e2:30:66:9f:ec:
                    5d:b7:09:52:2a:e0:bb:1b:1f:e7:d6:89:f5:02:53:
                    b9:d6:b8:60:27:eb:4e:b9:0d:d9:68:e6:c3:9a:2e:
                    63:fb:e9:ef:0f:6a:58:fe:1c:ad:a5:de:6d:95:0a:
                    51:50:eb:04:32:1d:f2:3e:63:90:21:3f:a0:f2:de:
                    6a:2c:6a:bd:6d:02:05:0f:76:5a:48:46:93:ee:9e:
                    80:5a:42:66:2a:50:cf:45:92:4f:a0:9c:b0:8f:09:
                    ae:ba:a2:7d:ce:da:88:35:32:ba:fb:27:c7:82:7e:
                    76:2a:4d:72:a1:ab:27:56:41:3c:50:de:8f:94:3b:
                    ea:02:31:7d:e7:00:39:32:ba:c7:33:e2:50:b8:7a:
                    74:c4:81:2b:74:13:bc:51:9e:5f:23:3e:32:71:81:
                    26:48:c0:2f:37:62:66:fc:13:8b:ab:72:ab:db:19:
                    4c:8b:ef:ff:4f:05:01:db:c3:0b:2b:f3:b0:31:f3:
                    ff:5e:a4:2c:5a:27:9b:eb:b5:2f:10:f7:2c:89:d5:
                    65:af:20:97:19:bc:ca:98:05:e9:cb:14:80:64:95:
                    d4:96:48:45:e7:2e:12:49:4d:b2:b4:56:5d:3f:cc:
                    6e:59:31:c3:e8:98:1a:33:76:48:99:67:4e:4b:ed:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:21:1D:25:63:61:A7:15:D1:8F:A6:0B:6B:BD:11:F7:29:EA:B2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl

            X509v3 Authority Key Identifier:
                keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:2d:6e:36:53:70:50:df:e9:a8:8b:7e:78:37:c7:db:f3:
         f6:ae:77:23:98:a7:a1:58:f2:09:c7:0c:48:f7:62:41:7c:53:
         67:c4:c8:8b:ca:1d:ff:26:46:a9:f6:55:38:18:d6:dc:2e:92:
         de:1d:78:cd:0e:cb:71:71:d4:36:bc:04:6b:f0:28:a4:d0:86:
         f9:f3:42:cb:e0:b8:f6:cd:7a:1c:92:a1:a5:5a:28:ea:23:d7:
         9a:d9:61:93:ba:04:53:a3:18:43:2a:44:78:57:5d:2e:05:bd:
         95:3f:a5:25:a6:ad:81:c8:64:41:74:37:98:fa:d0:92:de:e3:
         8b:3b:be:a7:6d:d6:f3:1f:e8:1c:bc:49:3a:9a:3d:c7:be:96:
         52:22:ed:a9:9b:e5:91:7a:67:bf:26:54:4f:6d:cd:89:fc:ac:
         04:b7:cd:00:52:bb:55:6f:da:ed:4c:8f:71:7a:43:52:f6:5b:
         8f:10:68:95:49:d2:f8:5b:67:48:cd:6c:88:8a:df:6f:c6:6a:
         c9:dd:53:48:cf:01:0a:82:1f:75:ff:39:2f:32:09:86:71:47:
         06:65:f2:16:e4:05:46:8e:2b:11:a0:86:14:62:e2:86:75:c3:
         05:bc:a5:50:c6:91:2f:63:04:3c:88:07:48:79:02:3a:8f:a0:
         f7:8b:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:03:24 2024 by rpki-client on console-fra.rpki-client.org