Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/78b29fb8-effc-3a2b-90dd-252aa3b543b4.roa
File:                     78b29fb8-effc-3a2b-90dd-252aa3b543b4.roa (raw, json)
Hash identifier:          YYjxB3WDuCI5G6p6X4IGYW2MFsxDk/Seyb4sLDH8H58=
Subject key identifier:   81:C7:15:F3:B3:89:79:96:AD:24:AC:7A:BE:CF:C0:FC:6F:11:5B:5C
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584754E0E84DC81422024F382700
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/78b29fb8-effc-3a2b-90dd-252aa3b543b4.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     7018
IP address blocks:        170.205.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e8:4d:c8:14:22:02:4f:38:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=9cc80e14-df52-4c5d-8481-17f2d5ffb90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:04:3e:fc:a6:66:84:01:c1:2c:1e:4d:6d:bc:
                    1f:86:c8:a7:15:77:bb:a9:7d:54:ef:c0:09:18:93:
                    c0:a0:f3:2a:0d:8f:68:54:a3:c9:d3:0e:f6:e5:86:
                    df:0c:56:13:0c:b5:fe:01:5f:cb:89:b6:d5:ab:13:
                    13:8b:33:18:e7:af:48:91:e3:48:00:82:1c:d6:37:
                    d7:ee:27:85:94:d4:80:6a:57:f9:a0:75:fd:c2:44:
                    f0:2b:1f:1e:be:b1:9a:bc:c7:3e:e0:7e:55:97:9c:
                    72:b8:20:f7:d6:f9:15:65:e0:5b:6f:3e:d6:c2:eb:
                    9b:50:38:79:48:41:38:d4:02:ad:d5:36:6e:d9:b7:
                    14:77:29:7b:33:41:7e:33:ce:95:dd:da:a7:c7:2f:
                    53:c4:fe:3b:b4:69:9e:37:98:bf:5c:17:f3:32:5c:
                    92:0f:db:ed:68:5f:d1:dc:47:3d:4d:c4:b8:0b:10:
                    82:98:e9:52:0b:d3:54:54:f7:26:98:93:9f:33:6d:
                    77:32:28:28:68:d9:bb:a9:07:d0:8d:8a:f3:52:3f:
                    22:ef:b4:7c:b7:5f:8d:a2:a9:3d:67:6a:58:e6:35:
                    77:04:c0:d4:b0:f6:8a:ad:a6:d2:22:a9:c2:0a:56:
                    e4:ff:c4:99:aa:4a:4a:24:ce:f2:39:d6:7f:34:5d:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C7:15:F3:B3:89:79:96:AD:24:AC:7A:BE:CF:C0:FC:6F:11:5B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/78b29fb8-effc-3a2b-90dd-252aa3b543b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:f9:3a:8d:45:15:57:65:ce:fe:b3:b6:36:fe:92:c4:ed:
         9b:97:ca:49:8b:70:ce:62:fc:ac:fb:15:b4:11:eb:63:97:f8:
         e2:a1:17:b3:46:30:3e:58:74:e9:7f:e9:96:e8:80:23:ab:9d:
         ca:f0:b2:ce:c9:d2:5a:97:ed:20:50:63:93:dc:a1:f3:19:3c:
         62:9a:c6:0e:fd:1d:cb:80:1b:9b:38:7b:cd:68:99:10:3b:5f:
         fa:0d:e4:1b:6b:a4:e6:1a:b4:1b:38:12:32:a2:7c:b3:6e:81:
         49:ca:61:94:8e:c3:48:2b:bc:57:1d:9b:f3:b8:22:44:d2:70:
         3a:95:cd:23:30:fd:6b:b6:19:ff:72:c2:14:67:d8:88:17:97:
         e9:7a:9b:16:97:97:4f:54:61:b1:21:ea:9c:cc:99:a2:58:99:
         0f:f1:c9:de:79:7d:f6:59:c1:18:87:60:05:c2:71:2c:0e:f4:
         c3:28:40:03:22:21:5d:bb:99:3d:07:7f:10:b4:e8:58:5a:2e:
         b3:f5:ca:66:18:90:4a:6d:3d:b2:df:53:62:3a:31:cc:39:95:
         f6:85:de:68:bc:cc:5a:d9:3a:96:2b:c3:7b:97:f0:06:51:b8:
         f2:20:18:de:7a:e4:0c:46:0d:41:e2:df:b7:7e:09:ce:f5:cd:
         c0:27:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:06 2024 by rpki-client on console-ams.rpki-client.org