Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa
File:                     b4650fb5-7679-338a-8f55-9496e081bd1c.roa (raw, json)
Hash identifier:          wYIEo9XXVwJcBqRjTklAcPjyR1Jh/yaMyPP6NcQYKiU=
Subject key identifier:   27:00:AF:FE:EB:34:55:CE:E7:6E:09:A6:AE:D7:5C:43:C5:07:60:36
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F43285847A00D4D9D63F7282DC7C23000
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa
Signing time:             Tue 22 Oct 2024 11:16:05 +0000
ROA not before:           Tue 22 Oct 2024 11:16:05 +0000
ROA not after:            Mon 20 Jan 2025 12:16:05 +0000
asID:                     16509
IP address blocks:        162.212.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:0d:4d:9d:63:f7:28:2d:c7:c2:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Oct 22 11:16:05 2024 GMT
            Not After : Jan 20 12:16:05 2025 GMT
        Subject: CN=3fac6d6d-e306-458a-8429-cfed3a3981af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:67:b7:8d:50:55:1b:73:a2:7b:b1:ef:9a:
                    fd:2f:cf:a4:56:31:d7:fa:99:0f:78:b1:44:37:f5:
                    df:80:cb:0f:b6:52:e6:a2:c3:45:b1:26:36:19:f3:
                    49:00:c3:0a:3e:b1:f0:cd:2d:81:c2:f9:7d:c0:b0:
                    91:fd:2d:24:50:d5:3f:20:8e:cc:46:47:a1:83:af:
                    14:7e:d9:f5:70:58:58:84:f0:e9:fb:6a:a0:15:f5:
                    c1:72:86:9e:03:d4:fb:2d:af:1c:8d:1e:25:eb:25:
                    56:09:1a:d8:3c:d1:9b:72:d4:eb:e3:af:1e:9e:4d:
                    b6:a5:94:2e:99:3f:34:b2:44:04:71:a8:1a:91:b8:
                    78:6b:93:8a:30:23:04:ad:2b:00:e0:72:b9:ea:b2:
                    28:8e:18:89:f3:22:73:0e:60:6e:80:6e:c9:d3:0b:
                    a8:41:0d:dc:20:3f:dc:a5:f5:bc:4a:1f:fb:2c:d3:
                    95:27:4c:98:d3:73:32:db:6f:91:cc:cd:89:a7:7f:
                    15:e7:60:68:0f:fa:11:46:2d:3c:82:cf:df:35:80:
                    8d:b4:61:26:16:58:de:4a:1d:53:f3:e4:72:f2:c1:
                    e3:19:b2:12:aa:68:d7:84:f4:8c:05:ab:a9:f6:f2:
                    b0:d1:e2:75:1a:df:c8:6f:ad:17:93:5f:e7:0d:5d:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:00:AF:FE:EB:34:55:CE:E7:6E:09:A6:AE:D7:5C:43:C5:07:60:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:ca:9b:08:0f:1f:a9:54:b8:91:7d:41:b7:98:d8:60:e1:d2:
         19:b2:fe:22:7a:f9:37:13:8c:84:02:87:bd:0a:16:a3:d4:7e:
         72:0f:cc:74:d5:8d:81:a3:c2:da:5a:bc:36:c9:ec:b6:0b:b9:
         50:d6:9d:19:94:4b:25:26:df:81:4a:27:82:c4:00:47:df:f4:
         b3:86:6d:5b:38:8d:7c:8a:2c:e4:2f:2e:a0:9a:55:bc:e3:80:
         5b:71:a7:97:0f:c4:d8:f8:53:9e:e6:61:77:1a:48:33:e3:ae:
         b9:a2:9d:38:f2:82:c3:86:bf:a8:4e:17:2c:31:6c:4f:be:06:
         1e:98:0f:aa:9c:d5:54:f3:3a:3f:93:b9:c9:e0:3f:30:d8:17:
         fb:be:42:94:29:58:c2:7f:c6:b2:b7:e8:22:cf:55:5b:c3:63:
         05:36:9b:cf:72:dc:ff:ac:5b:25:2f:7a:2c:2d:9e:e0:5a:be:
         c7:b6:90:f0:80:84:02:0d:64:58:e7:7f:24:cb:99:6d:05:76:
         94:0c:c3:fc:d2:d4:31:b2:ff:df:a7:8f:d8:9e:98:cb:e0:8f:
         73:c0:33:da:2e:b2:e4:69:79:ad:87:e7:11:46:ac:ac:72:59:
         4f:5a:8d:71:7a:68:8f:11:17:88:4c:d8:53:59:0a:ae:03:94:
         d6:d5:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:45:17 2024 by rpki-client on console-ams.rpki-client.org