Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
File:                     541b454a-f70e-3454-bcae-4a7dff7be3ef.roa (raw, json)
Hash identifier:          OxE4YYNzL4rw/4RQ69KVJD34QfjDpCWC5ObpgfG3MH8=
Subject key identifier:   9F:26:98:E5:E7:BD:E3:18:7D:0D:60:CC:FB:F5:1D:35:D0:5B:42:99
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F43285847A00D0843899CBF464F9B3CFE
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
Signing time:             Tue 22 Oct 2024 11:15:33 +0000
ROA not before:           Tue 22 Oct 2024 11:15:33 +0000
ROA not after:            Mon 20 Jan 2025 12:15:33 +0000
asID:                     14618
IP address blocks:        162.212.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:0d:08:43:89:9c:bf:46:4f:9b:3c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Oct 22 11:15:33 2024 GMT
            Not After : Jan 20 12:15:33 2025 GMT
        Subject: CN=2bc62093-5b31-4117-9071-e8600888e93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:8c:58:ce:96:c0:65:fe:42:17:e7:b5:d3:
                    34:59:09:96:e7:4c:50:72:49:a5:ee:3c:49:94:c0:
                    96:5a:d5:7b:2c:e6:48:94:b4:9b:bd:19:ba:3e:93:
                    2b:c5:55:6d:f1:ad:27:c4:da:dd:ca:b7:b1:64:9b:
                    02:aa:cc:df:af:a8:c1:fc:a2:92:0e:ce:57:36:f3:
                    7b:20:76:b4:c1:08:c0:21:a4:ee:b7:a3:6a:b4:ec:
                    e3:fd:9d:ec:2d:f8:6f:d0:2b:b1:b7:84:28:d9:b3:
                    e9:06:5c:ff:d7:49:79:f2:d4:39:44:27:ae:05:b2:
                    07:94:0c:73:41:da:9d:38:20:42:09:45:a6:32:4b:
                    6b:a4:f7:80:0a:fc:aa:4e:28:3e:54:c4:22:fe:ff:
                    81:fb:3d:f4:68:14:3f:75:51:47:17:b3:88:fc:8b:
                    6e:61:dc:49:8f:f7:8b:02:33:18:07:c9:cf:dd:0b:
                    30:f3:60:3c:1b:f0:1f:06:39:8d:3b:56:20:b5:49:
                    c0:e3:06:41:58:2b:10:9f:32:e8:dc:e8:05:ac:26:
                    fe:75:9b:d2:af:3e:a5:95:06:58:ed:b4:52:e8:0d:
                    22:e7:0d:bf:94:9e:0d:ff:f3:ff:1c:03:69:22:46:
                    e5:a1:14:af:9a:c9:a4:00:85:19:41:ef:6b:8f:3c:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:98:E5:E7:BD:E3:18:7D:0D:60:CC:FB:F5:1D:35:D0:5B:42:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:b4:43:33:f1:5e:b5:46:3a:60:c4:61:6b:9b:6b:c8:d9:
         21:48:33:cc:45:0b:ae:0c:96:dd:18:ff:67:e2:0c:34:86:df:
         09:f0:38:25:0a:7d:e8:f9:32:c2:70:db:ef:1a:88:ff:74:bf:
         67:af:3e:d0:4a:07:38:50:84:d0:0e:f3:62:a5:41:11:4c:6d:
         7b:e7:1a:6f:a7:5e:ac:e2:cb:5d:14:a9:ad:4b:53:a1:d1:b3:
         55:a5:e0:9e:6e:ce:af:5a:1e:c4:ed:dc:9d:32:41:ba:1c:95:
         79:a6:bc:90:27:7b:4b:17:65:55:e4:6f:bc:4b:43:4b:0c:a8:
         fb:aa:d4:d5:78:41:41:96:1d:47:a9:8a:27:76:7c:fa:ef:dc:
         64:d7:e5:af:66:d5:87:d2:a8:c5:4a:34:14:5c:d4:a9:7c:39:
         14:23:2e:ce:75:df:5a:50:fb:f9:1f:c8:df:b2:ee:1e:26:e3:
         64:bc:c0:51:ce:e7:3e:b7:9a:cb:51:1e:e3:e3:b0:84:1a:37:
         2d:d9:99:ee:93:b4:e4:6b:6f:79:5f:c5:af:f3:79:39:37:50:
         e8:5f:21:ff:75:04:08:60:6f:bb:a5:4f:a6:c3:58:fa:78:20:
         e7:ed:1f:b5:96:ad:39:2f:3c:77:d2:9a:5e:53:13:7e:cd:f1:
         84:31:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:18:44 2024 by rpki-client on console-ams.rpki-client.org