Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd/dc94bb1c-bb64-3b01-b910-9a80303ef774.roa
File:                     dc94bb1c-bb64-3b01-b910-9a80303ef774.roa (raw, json)
Hash identifier:          oCpK3KjtQogAA8mNHStKHmKovbR24iZ795OoH7E8dTQ=
Subject key identifier:   23:AA:58:FF:04:30:7E:E5:C9:D5:7A:2E:12:58:72:72:61:8A:47:17
Certificate issuer:       /CN=4205c051-0c24-4afd-b2cd-7e4e72695ffd
Certificate serial:       010D0C9F432858474B1B4CA99A667C16B8998540
Authority key identifier: 8E:D3:B9:1B:2A:BC:8A:94:B3:4C:58:E5:49:B1:D6:44:15:77:F3:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd/dc94bb1c-bb64-3b01-b910-9a80303ef774.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     393268
IP address blocks:        162.220.236.0/24 maxlen: 24
                          162.220.237.0/24 maxlen: 24
                          162.220.238.0/24 maxlen: 24
                          162.220.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd/4205c051-0c24-4afd-b2cd-7e4e72695ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd/4205c051-0c24-4afd-b2cd-7e4e72695ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:4c:a9:9a:66:7c:16:b8:99:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4205c051-0c24-4afd-b2cd-7e4e72695ffd
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=2fbaff69-d6b1-4372-a2ef-391bfa708144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:24:24:c1:2f:e6:50:fc:05:b3:33:e8:c3:
                    7c:f4:d1:a6:df:1c:61:c7:90:89:39:17:eb:d9:d9:
                    4d:3e:c9:e5:90:c0:43:a4:e6:ca:1c:a1:29:a4:bb:
                    14:0b:8c:bc:31:4e:6a:70:ad:64:53:55:35:d3:0f:
                    e5:60:a8:65:5d:80:60:9f:6d:c1:75:fd:e9:29:39:
                    e0:69:68:f9:a7:5b:7e:36:75:c5:84:cf:78:f0:43:
                    67:24:56:60:a5:64:cd:f6:b3:f4:03:db:86:73:87:
                    67:b8:c2:44:f5:d7:a2:79:fe:6d:83:11:67:3f:41:
                    9d:b9:43:33:f0:33:16:1a:f5:6e:f7:d5:93:27:73:
                    8e:89:f9:c5:99:84:0e:00:9f:3f:3e:21:69:8d:cd:
                    a2:8f:fd:83:e8:b1:63:69:ce:e8:af:9e:e5:03:a3:
                    4a:ab:a2:bb:73:12:fd:28:e8:51:a6:e9:c9:54:c4:
                    94:95:b4:16:c1:69:db:ff:a2:fd:32:69:54:e1:fb:
                    5e:63:97:4d:fc:22:37:80:e8:b3:3f:f1:ae:d2:65:
                    a9:f2:c3:42:27:7f:f9:cf:8e:b0:19:02:c3:c5:8f:
                    a5:60:94:c0:71:c3:c0:5d:9f:67:bd:23:96:c5:f0:
                    63:e6:e1:0c:5b:2c:aa:43:a2:b6:24:82:23:f9:21:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:58:FF:04:30:7E:E5:C9:D5:7A:2E:12:58:72:72:61:8A:47:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd/dc94bb1c-bb64-3b01-b910-9a80303ef774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd/4205c051-0c24-4afd-b2cd-7e4e72695ffd.crl

            X509v3 Authority Key Identifier:
                keyid:8E:D3:B9:1B:2A:BC:8A:94:B3:4C:58:E5:49:B1:D6:44:15:77:F3:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4205c051-0c24-4afd-b2cd-7e4e72695ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:34:9e:e7:44:8c:a6:fe:92:37:0b:6f:6a:ef:45:47:f3:51:
         31:24:56:4d:b5:7e:84:98:91:b7:3e:f3:6b:0b:ef:17:1b:27:
         c6:d6:bd:81:46:a7:43:81:54:c2:5a:35:b4:1a:90:a8:24:80:
         69:41:c9:e5:e7:0e:3a:2e:6f:78:29:62:62:2d:29:ad:d9:0d:
         e1:5d:92:84:9f:5e:c0:40:fe:04:7d:44:0f:bb:da:8e:08:ff:
         bd:c0:d4:c8:3d:12:8e:4e:b3:9c:9d:46:19:29:90:99:04:1b:
         c5:04:71:46:a0:8a:3e:a4:a9:e0:e9:2e:69:1f:a2:ee:b1:f1:
         3e:52:54:8f:5b:be:04:75:8b:1f:5b:62:67:33:88:43:f6:5f:
         f0:b7:eb:fe:95:e9:9c:43:06:f8:b1:f6:c8:12:bc:60:f7:0c:
         1c:14:80:d2:f4:2a:64:b9:45:40:ef:52:2a:c1:29:45:ef:35:
         11:1e:e5:9e:83:43:10:bb:f1:e6:8d:7d:4a:eb:7c:13:54:c2:
         bf:1a:69:bf:5d:ca:be:ab:58:ba:9f:14:4d:c7:39:2b:ff:e9:
         82:30:60:a7:59:77:dc:b0:c2:0c:e0:3e:71:b3:87:00:b1:b7:
         87:8c:07:ec:ce:c9:4b:9b:cf:76:28:d6:4a:44:0b:24:96:87:
         1e:61:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:25 2024 by rpki-client on console-fra.rpki-client.org