Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
File:                     41081f1b-d82b-37ee-bd2d-85ddb0792990.roa (raw, json)
Hash identifier:          VgLhNDt9vi54MEvRFGVQQMDp2kB/Tod81rCuG//7O7I=
Subject key identifier:   0B:C4:4E:08:25:60:CC:B4:6B:E3:B5:B6:47:E4:BF:23:35:16:36:4E
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DC1969512550DA184C0C0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        162.221.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c1:96:95:12:55:0d:a1:84:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=152be40e-92de-40ce-a4ab-452016ce3193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:06:7b:59:ae:50:08:27:24:43:6e:90:31:
                    17:e8:ea:8e:57:f3:f2:e7:a1:0e:f8:77:02:0f:26:
                    c3:36:93:98:e8:21:89:13:20:d9:bf:39:a8:e3:cd:
                    65:2b:c8:3c:b7:52:ab:d4:04:1f:00:c0:42:95:12:
                    81:58:b2:22:85:f0:dc:61:ad:d7:98:c3:02:48:bd:
                    c8:07:52:46:96:2a:f8:73:41:50:07:e6:10:e0:a9:
                    94:09:f4:57:0e:ec:8f:e8:ee:77:2f:42:ec:ea:f6:
                    30:4e:8d:33:f2:af:af:47:67:70:ba:84:62:2c:b8:
                    7b:77:c4:a0:b7:a5:9b:5f:9b:fc:97:e3:77:8c:c5:
                    9c:12:51:01:02:1f:67:cb:58:20:71:ad:40:59:6b:
                    b0:83:3c:48:3a:28:dc:d7:54:4e:a5:bb:a9:c1:fa:
                    a7:80:47:75:34:be:8e:ac:97:f4:2e:ca:86:72:f8:
                    66:bf:8d:dc:ab:5b:d9:69:d0:cf:82:60:ac:ea:0c:
                    21:09:44:7d:86:06:53:80:0d:2a:f7:da:ca:a3:0b:
                    e6:26:e5:fe:a0:25:06:1a:c6:c2:e1:3e:95:7d:7f:
                    62:20:bb:95:0b:10:ce:10:f9:b4:57:8a:b7:69:87:
                    48:36:3e:e8:e1:24:d2:aa:77:4f:84:a0:ba:72:5d:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C4:4E:08:25:60:CC:B4:6B:E3:B5:B6:47:E4:BF:23:35:16:36:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:76:28:5e:fa:76:26:b8:3c:c4:79:e0:0c:89:16:e4:01:39:
         2c:f9:2c:e9:4e:f7:ce:2d:dd:12:ea:06:ba:7d:6c:4e:1b:82:
         5e:1d:83:a2:c1:4f:9e:76:99:ff:a0:13:cc:dc:20:3e:cb:6b:
         b1:3c:24:cc:04:72:5b:08:22:6f:49:80:7c:9b:48:33:8d:60:
         2e:e4:a8:68:02:ef:29:28:2d:0f:4b:6a:a4:31:2c:47:f3:42:
         9f:b2:f1:f4:3f:f5:06:87:f4:3d:f9:1d:44:7d:76:de:e3:9b:
         19:80:d0:b7:94:ae:78:08:2e:80:78:5f:66:f4:b6:be:04:3a:
         f0:8b:5a:4e:ad:4a:4a:f1:22:e6:a8:9a:be:ba:c1:13:89:1a:
         33:2c:05:fe:78:9c:ad:dd:33:30:12:bc:9e:44:bc:4e:16:16:
         27:66:ef:70:ce:34:9d:f3:b4:93:50:58:cf:20:5a:70:0b:29:
         9a:29:f7:5e:e1:a9:3f:b4:36:39:1c:aa:af:92:4b:a8:41:cb:
         41:56:c0:d8:36:07:ba:1c:f0:c4:6e:ac:65:20:90:7a:61:45:
         53:74:ff:0e:01:93:4e:d1:59:39:df:3a:da:88:79:54:ff:a8:
         d3:ef:4a:14:a7:19:6b:e9:e1:36:75:dc:fd:d2:a1:b3:02:30:
         ef:c7:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:02 2024 by rpki-client on console-fra.rpki-client.org