Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/10d64a9c-2ac6-3a9f-8be9-18c0a7b13d89.roa
File:                     10d64a9c-2ac6-3a9f-8be9-18c0a7b13d89.roa (raw, json)
Hash identifier:          bS/XP4LL58MJlGsxEvpeaPaL7DhTnS8trtfnLEou+/k=
Subject key identifier:   BE:18:89:08:B2:83:20:82:74:DC:67:AA:DF:7D:74:2B:12:7F:05:32
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845CB3E486B23AEDB920089AF80
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/10d64a9c-2ac6-3a9f-8be9-18c0a7b13d89.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     16904
IP address blocks:        162.221.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:48:6b:23:ae:db:92:00:89:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=f916e8c4-1ce1-4b3a-ad34-8c1607935946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:8f:a9:36:0f:f0:28:28:6d:c3:8d:51:1e:
                    63:40:0a:87:b3:20:1d:bf:f8:3b:85:da:76:25:55:
                    ef:ba:05:25:b5:91:a8:ba:05:72:fc:f1:39:b7:24:
                    1c:ae:07:81:c3:67:4f:20:60:a8:c7:81:25:0a:a2:
                    83:4e:57:ef:89:dd:6d:4a:e2:7b:89:3e:70:a7:b3:
                    b2:52:2a:61:cc:e0:3d:9d:86:66:ec:0d:85:1a:f6:
                    a5:70:ba:e8:ba:7d:87:2a:df:71:06:2b:cf:9c:7f:
                    87:46:c5:de:f8:da:09:97:76:44:1d:6a:65:9a:ce:
                    ce:c0:be:b5:22:4d:c7:51:31:5e:c7:7c:3e:35:91:
                    ef:ee:ef:7b:56:06:ca:39:f2:08:35:22:b0:8b:d1:
                    c9:2a:90:50:59:37:5c:47:24:19:28:43:32:a8:1b:
                    2d:48:e6:ea:b0:8e:5c:d0:51:a5:80:68:fa:90:83:
                    f4:95:49:cc:b7:48:6a:f0:5d:7c:6d:37:1d:2d:12:
                    50:cc:c7:d5:5b:eb:e8:01:4b:4b:5c:d2:af:f4:63:
                    a5:14:6b:0d:b5:6e:45:9f:ee:ea:ff:68:72:7d:58:
                    ff:26:8a:00:24:da:33:80:34:a1:6f:f3:01:7b:56:
                    2b:48:4a:b6:69:3f:41:9e:23:be:42:b1:a2:aa:f1:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:18:89:08:B2:83:20:82:74:DC:67:AA:DF:7D:74:2B:12:7F:05:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/10d64a9c-2ac6-3a9f-8be9-18c0a7b13d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:f4:a1:c5:12:fa:d3:9f:33:6d:14:2c:96:dc:94:60:6b:
         8f:f9:81:25:78:55:11:0f:a7:8d:e3:af:ea:ce:9f:40:f7:c0:
         31:79:57:5a:c2:f3:d7:52:d1:3a:bf:b2:62:4b:28:1e:dd:6c:
         e6:ca:61:ca:29:da:a0:c4:92:f1:7e:39:fa:6e:ee:97:d8:87:
         52:25:26:0d:c6:30:ed:14:f1:b9:30:0d:57:1e:f6:66:b8:5f:
         5d:47:64:9a:66:ba:79:c1:bf:99:4b:9f:2d:da:92:91:d6:99:
         53:4f:6b:79:a1:a7:1b:d1:6c:19:db:b5:0b:3c:2d:00:a2:17:
         26:eb:f1:a8:a8:94:a9:18:a9:e4:24:36:fa:cf:e3:3d:65:45:
         9e:83:c6:b2:cd:19:00:f6:9f:45:49:aa:21:b3:68:a0:d5:40:
         5f:a4:c8:b6:c1:4b:42:42:70:47:e7:b6:24:6e:b2:51:c1:ed:
         aa:89:5b:9b:bc:56:50:57:69:75:66:43:79:71:e0:dc:ff:e9:
         6b:37:9a:32:42:60:9f:2f:47:1e:11:af:6e:9e:7f:e4:58:a4:
         4e:3a:a3:6f:91:23:5f:39:b1:c3:9d:4a:13:5f:1b:ec:a1:1d:
         50:98:0c:dd:78:f2:97:c5:6c:22:4c:76:86:a1:0e:90:31:50:
         59:e8:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:10:32 2024 by rpki-client on console-ams.rpki-client.org