Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa
File:                     b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa (raw, json)
Hash identifier:          ZHQ0PjB6H66CaPNG8agL0UyaXJFWDUzpvHPqlIV3GoM=
Subject key identifier:   BF:89:1D:36:FE:D8:B7:95:87:F0:F5:70:D8:AE:87:6F:D4:2C:B3:DB
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F432858469823D137123AE57899A6D380
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa
Signing time:             Fri 19 Jul 2024 22:28:03 +0000
ROA not before:           Fri 19 Jul 2024 22:28:03 +0000
ROA not after:            Thu 17 Oct 2024 22:28:03 +0000
asID:                     16509
IP address blocks:        162.212.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:98:23:d1:37:12:3a:e5:78:99:a6:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Jul 19 22:28:03 2024 GMT
            Not After : Oct 17 22:28:03 2024 GMT
        Subject: CN=3cc548f6-89a8-4b19-910c-13c221778f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:ba:b1:ad:c3:92:3c:0b:a5:6c:ad:04:3b:
                    f0:c9:1a:97:d7:50:35:43:76:2a:39:b8:a0:63:8c:
                    07:e9:a4:47:0a:63:c2:4a:dd:b2:f2:9b:ca:6c:e3:
                    b4:08:4b:ed:07:d0:99:c7:6a:a1:6e:8a:bb:eb:58:
                    dd:92:2a:6f:db:c9:95:b4:6d:c3:be:51:f7:2a:ac:
                    6b:a7:bc:df:94:17:14:2f:6c:1e:7a:d5:37:41:9b:
                    9e:4c:6c:a4:0a:fa:30:e5:3e:f5:bc:56:9b:e3:9a:
                    b0:8a:fa:6b:95:50:da:76:04:3f:dd:59:2f:e1:6d:
                    24:c3:b3:1a:00:d9:a7:ed:3e:7d:67:c0:2e:ae:8e:
                    79:48:43:66:ef:93:59:b7:6b:a0:0c:8e:64:68:f7:
                    2b:32:5b:bc:c8:1a:4b:94:6a:8d:a5:83:e9:6e:cf:
                    86:bb:d6:39:94:35:fa:33:c2:a5:3a:80:5c:fb:2f:
                    2a:66:c8:1d:3f:d8:81:42:ec:0e:f7:e1:bf:89:f7:
                    96:fe:86:bb:08:c3:9d:6e:99:b5:dc:76:c9:4d:cc:
                    69:38:ce:0e:45:8a:04:e7:ce:48:d9:b2:6c:ee:c9:
                    f8:1c:46:6a:b6:ef:fa:2d:7f:45:ef:f8:7e:0a:77:
                    aa:17:15:8f:b3:a9:b3:e9:b9:5e:53:55:ed:e7:fa:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:89:1D:36:FE:D8:B7:95:87:F0:F5:70:D8:AE:87:6F:D4:2C:B3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:8b:a1:fe:4d:33:3d:94:c0:12:80:77:4b:1d:17:fc:4e:60:
         73:c1:20:39:ba:99:30:14:d6:be:d6:73:9f:99:b4:02:d6:b2:
         c7:72:fd:a4:4a:f8:f3:27:46:2f:3e:e6:8c:a8:d0:03:50:1d:
         78:39:22:c8:41:8c:c9:f6:a0:80:c0:03:19:68:a2:d5:ac:94:
         9f:3f:36:7c:93:bd:57:05:aa:b4:3a:10:3c:36:ae:d6:85:86:
         c7:25:a1:87:fd:78:80:e7:b9:77:5e:78:86:17:4d:45:00:f0:
         f4:ec:64:81:d0:fd:10:4e:ba:a0:72:70:f7:f2:c1:75:e3:91:
         dd:3d:ef:8d:8b:86:3d:dd:84:a4:9f:2a:bb:49:b6:3d:42:ea:
         ee:c0:0b:4e:64:83:28:48:4e:7b:06:cc:a3:23:4e:93:a0:53:
         bd:0a:a4:bb:63:97:3e:e7:bc:72:bf:51:6c:d3:8b:73:15:01:
         be:7d:1a:6d:af:d1:55:aa:6d:10:8c:94:31:8f:16:eb:18:3c:
         fc:01:bd:93:0f:b5:95:52:59:b0:4f:1e:84:a7:1a:95:54:b8:
         05:4c:88:9f:ce:fd:eb:6a:32:c7:66:5c:1d:f8:1a:82:c8:f5:
         8d:09:b4:22:73:73:fd:3e:ca:02:b0:0a:0d:f1:98:89:c7:32:
         78:5f:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 16:48:47 2024 by rpki-client on console-fra.rpki-client.org