Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa
File:                     1fda95ac-3843-3be1-be0c-4e0693659ba3.roa (raw, json)
Hash identifier:          BVjpgPYkG36/0mGFocFhv/3Odn2kjbCfc0TC4Zlgfbs=
Subject key identifier:   77:F1:B7:D6:BA:DE:A1:4D:C6:B1:C4:ED:80:F3:2C:22:15:CB:84:3F
Certificate issuer:       /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
Certificate serial:       010D0C9F43285845734DB92DD9015672AE10FF00
Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     32338
IP address blocks:        162.251.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b9:2d:d9:01:56:72:ae:10:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=c379f01b-c6f3-4604-9886-98fa129ce4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:c6:24:d1:8c:73:af:b5:50:35:d6:ba:08:
                    08:92:49:4b:41:e8:de:5f:5d:ca:2f:c0:33:d3:35:
                    61:04:86:30:79:90:dd:da:a3:ca:51:7b:e7:0b:e7:
                    f9:ec:ca:d7:94:e7:9b:e2:ce:c0:ce:24:4e:c6:9a:
                    e6:e2:c1:06:20:a8:8b:c7:04:4d:f7:95:28:5f:89:
                    b5:68:9e:2b:5f:28:e3:a1:ec:99:72:d4:9d:84:80:
                    8c:fb:9e:7c:f2:4b:26:ae:2d:b1:92:d2:e0:c1:00:
                    d9:57:f9:e4:31:c2:b6:03:20:db:59:d3:e6:ea:8f:
                    9a:c5:5a:40:cb:d0:90:bc:7f:55:31:cf:6a:e6:2f:
                    7c:91:19:52:52:2b:9c:ee:6f:80:f4:72:2d:a4:10:
                    0c:b5:05:29:26:71:79:32:0f:4e:bb:26:f6:78:27:
                    36:93:e5:78:80:54:15:99:f0:18:d1:45:7c:e9:86:
                    04:40:c8:c0:04:e1:be:a2:9c:eb:ff:71:44:5e:2c:
                    77:c8:5e:3c:0c:53:1e:c6:48:45:63:23:65:f5:44:
                    81:2c:3d:7f:b4:e8:e0:91:42:99:24:31:b4:b9:84:
                    71:81:c8:15:57:a0:d2:2b:02:d0:a7:1c:8a:35:33:
                    52:51:5c:88:27:57:a2:db:5a:2e:94:fd:41:4b:9c:
                    c6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:B7:D6:BA:DE:A1:4D:C6:B1:C4:ED:80:F3:2C:22:15:CB:84:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:b3:a5:9b:a5:d8:fa:e0:bd:a5:e3:04:a0:8f:e4:fe:cc:
         f1:18:b1:65:35:50:6a:00:36:a9:45:71:cf:e7:b5:13:67:ba:
         41:77:ea:4f:95:0d:9b:ac:26:73:ae:9b:63:9a:06:b5:67:27:
         08:cf:d0:3f:bf:ad:e5:0e:32:18:9d:ff:3d:a5:5c:a2:43:5d:
         80:0e:8f:0f:61:e7:7b:bd:b4:7e:9a:2f:f2:c2:96:04:2b:11:
         09:c6:f7:df:8b:94:a7:e7:7d:bd:26:92:8f:f6:c0:4d:3b:b6:
         82:d2:ed:ce:81:e4:4f:b5:b3:60:cf:8b:31:fb:8d:3f:fd:ef:
         f8:e2:a6:8c:0a:fc:43:3e:63:dd:53:fd:11:e4:83:69:43:f5:
         63:5e:e0:c2:93:31:27:6e:f7:aa:59:e0:4d:51:15:0e:de:9c:
         17:30:a1:19:87:95:1b:0c:8e:22:37:35:af:88:41:dc:10:1d:
         9f:7f:45:18:c7:d6:82:05:fd:a7:f9:69:09:ea:b4:94:47:1a:
         11:60:e3:77:30:d1:78:e1:d5:75:26:a2:c0:1d:b9:97:ac:fc:
         88:6b:03:6c:cc:7f:c7:4b:0d:31:76:c1:60:85:82:7e:ad:0d:
         68:16:ea:c6:bc:ef:6f:c9:22:bb:49:b1:07:2d:57:d7:c5:5f:
         07:d2:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 15:59:29 2024 by rpki-client on console-fra.rpki-client.org