Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/2e657780-8908-3409-9c34-94fa6f5fcc97.roa
File:                     2e657780-8908-3409-9c34-94fa6f5fcc97.roa (raw, json)
Hash identifier:          G/FJuR0z4u7kp0CfqRRUsiyaY2ggDn11Dl0bCJ8WrCk=
Subject key identifier:   A1:D6:2A:5A:B1:FE:3B:6B:E6:41:80:89:25:F5:68:29:44:9D:1F:4B
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F43285847CD4C011C718F15A305B90600
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/2e657780-8908-3409-9c34-94fa6f5fcc97.roa
Signing time:             Thu 07 Nov 2024 16:13:48 +0000
ROA not before:           Thu 07 Nov 2024 16:13:48 +0000
ROA not after:            Wed 05 Feb 2025 16:13:48 +0000
asID:                     395261
IP address blocks:        163.182.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:4c:01:1c:71:8f:15:a3:05:b9:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Nov  7 16:13:48 2024 GMT
            Not After : Feb  5 16:13:48 2025 GMT
        Subject: CN=64fb4b3d-e7b3-4651-bb77-a5a8b0c664d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:20:92:ec:21:58:5b:48:12:a1:86:4b:ba:
                    1a:34:c7:a0:2e:0a:dd:10:e7:e5:62:75:cd:6d:c6:
                    14:aa:f3:13:3d:a6:97:77:af:ec:cc:9e:40:0e:5b:
                    de:cc:4c:94:ea:42:db:d9:df:11:cb:ec:4c:ce:dd:
                    02:df:45:c1:c0:d7:5b:8f:3d:5a:98:de:9b:bd:22:
                    45:d0:3b:7c:6c:e1:94:5d:56:4c:fc:11:2f:73:3b:
                    ea:99:04:ba:5b:77:e4:0b:0d:78:0f:d2:90:39:3d:
                    9f:e3:7e:69:b4:31:c4:0b:be:ce:c6:07:67:fe:15:
                    29:2c:24:a2:91:a4:08:ed:d7:d8:42:37:e8:6c:cd:
                    10:5a:71:35:be:a0:58:02:bb:e1:48:c6:b7:09:4f:
                    04:72:e0:67:d2:5e:eb:cd:9f:68:62:48:11:58:11:
                    87:3a:37:78:ac:83:21:70:de:64:17:c0:4b:3c:ae:
                    a2:78:d6:e3:15:b9:95:79:8c:80:0c:6f:c5:ea:12:
                    87:52:88:81:7a:87:ea:f9:35:19:7e:9b:88:86:e3:
                    c2:75:5b:34:e6:a6:d9:19:1d:b7:30:24:a9:49:11:
                    e6:37:95:8e:e8:0a:78:31:71:26:39:d9:64:ab:6e:
                    a3:d0:4f:32:f2:75:5f:b9:74:3b:10:b7:a5:53:19:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:2A:5A:B1:FE:3B:6B:E6:41:80:89:25:F5:68:29:44:9D:1F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/2e657780-8908-3409-9c34-94fa6f5fcc97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:d1:3f:51:c4:5e:fc:4a:f6:ec:f1:cb:c2:e3:25:21:66:
         c2:53:a2:c8:23:3d:68:eb:e4:d3:52:3d:57:26:01:35:cf:63:
         1c:22:c4:2e:b8:44:96:98:21:86:41:1f:5b:a6:58:48:71:7c:
         18:49:69:b5:66:47:9c:3d:f1:5f:3c:c0:3a:a7:7d:cf:f2:ac:
         da:60:e9:d8:16:ac:e7:d1:e1:bf:77:42:38:6a:e8:12:23:33:
         35:99:cc:c7:00:c8:f2:91:e8:e8:c4:89:1f:51:e0:a5:c1:9b:
         5e:c9:11:2c:f3:34:ff:f0:37:a8:ba:b8:c6:f6:c6:42:2d:18:
         9f:7f:02:8b:5c:4d:8e:83:8a:95:f0:64:82:8d:84:b8:a5:66:
         a5:c2:99:1e:d0:1e:cd:76:f3:e6:9a:39:2b:f9:58:e2:a4:a1:
         14:05:bf:db:02:b3:d5:ba:d2:a3:52:6f:4c:8c:90:6a:60:ea:
         99:19:91:b9:60:04:2e:e0:0a:97:5a:5d:73:36:b2:72:f6:57:
         34:af:a6:d9:49:87:e0:a4:ef:d2:7f:93:4a:fa:ce:85:59:e5:
         5d:d0:31:27:bd:4f:ea:3b:54:c6:77:b9:8d:68:3f:74:d9:6c:
         78:71:e5:2a:c8:6c:74:9c:0a:bf:b9:c5:ae:3e:8b:2e:8e:62:
         64:48:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:11 2024 by rpki-client on console-fra.rpki-client.org