Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/485b245a-e6e4-3551-b9b0-cdd124cb0285.roa
File:                     485b245a-e6e4-3551-b9b0-cdd124cb0285.roa (raw, json)
Hash identifier:          vftlW8ECUxZidThWeIW+n8xxCH1l0WijhdZ9cX4lueE=
Subject key identifier:   F5:E3:6E:23:01:A9:69:5D:19:95:D2:47:B7:7F:2E:F8:C3:4F:42:44
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858467DAB75A04D93DCFF73BE3900
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/485b245a-e6e4-3551-b9b0-cdd124cb0285.roa
Signing time:             Wed 10 Jul 2024 10:54:32 +0000
ROA not before:           Wed 10 Jul 2024 10:54:32 +0000
ROA not after:            Tue 08 Oct 2024 10:54:32 +0000
asID:                     6461
IP address blocks:        216.211.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7d:ab:75:a0:4d:93:dc:ff:73:be:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Jul 10 10:54:32 2024 GMT
            Not After : Oct  8 10:54:32 2024 GMT
        Subject: CN=18dfff01-4a3c-434b-810c-208ce2c7dd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:46:2f:69:f7:c1:bb:8f:93:05:6d:9b:65:
                    bb:f1:ab:4a:c2:0a:13:42:91:ca:1f:b8:71:0a:fd:
                    40:10:5d:05:8e:36:af:1a:66:1a:86:05:cd:6c:43:
                    11:95:9e:a0:be:76:b0:e3:5c:b6:1b:09:de:26:3f:
                    3e:b1:ea:5f:36:01:14:b3:6f:3d:af:ab:d6:18:46:
                    34:af:42:45:e7:15:c6:86:d1:dd:e3:1d:b8:33:74:
                    28:8c:60:e9:da:29:5a:b7:e6:79:03:96:c8:d8:2d:
                    43:c0:a1:ab:ac:b2:95:9b:ef:b3:18:2d:37:82:bb:
                    32:75:3b:fa:b8:79:cc:b0:51:48:f3:96:1f:61:fa:
                    4a:22:af:93:0b:02:2b:49:53:11:73:92:d8:fe:db:
                    c8:81:9a:1b:df:a6:f2:24:5d:6f:c8:33:85:d5:ee:
                    f5:92:9a:43:bf:8e:e8:3c:aa:fa:9e:ec:b8:8b:7f:
                    41:e0:07:05:71:f4:ac:29:fd:29:e2:86:d1:92:d3:
                    92:f9:15:ae:0c:3c:40:1d:7b:fc:b2:06:9b:93:8d:
                    db:70:92:0c:11:ab:36:c5:89:a6:16:67:ea:43:49:
                    65:ba:ce:32:e8:32:2d:71:97:fc:eb:d2:5a:a2:6d:
                    02:6d:ec:5a:85:db:5f:3e:c8:53:97:1f:22:3c:1c:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E3:6E:23:01:A9:69:5D:19:95:D2:47:B7:7F:2E:F8:C3:4F:42:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/485b245a-e6e4-3551-b9b0-cdd124cb0285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ba:17:a0:48:fc:c4:36:13:7c:4d:35:3a:00:51:f4:02:82:
         11:61:a2:e8:5d:a7:96:96:f3:ab:0c:ed:aa:42:b8:eb:df:1b:
         7d:3d:c7:ee:c6:e4:55:85:0b:14:44:f3:60:c0:23:9f:a7:04:
         a7:7a:0e:b4:79:84:98:6c:5f:f9:24:80:5d:04:78:8a:0c:b2:
         39:ac:34:4c:b7:54:21:a8:9b:b7:b9:55:b3:ca:b0:c0:38:6c:
         1e:4b:fb:03:75:11:fa:3a:b2:10:cc:ea:d6:bd:5f:49:8b:c0:
         38:1c:9b:05:f4:53:f2:fe:2a:41:50:36:69:21:b4:2e:c5:6a:
         1e:f4:48:5d:55:e3:9e:ba:66:99:cc:64:a2:01:d3:0f:02:2d:
         3a:c4:6c:04:14:c1:3f:48:c6:93:aa:bb:4b:eb:52:80:55:36:
         31:f9:77:6d:e0:4f:7e:80:e8:03:fe:86:ac:05:94:4c:4b:0c:
         c5:cf:05:6b:7d:2d:83:47:d6:a9:25:03:70:78:b4:b1:a8:7e:
         fc:32:01:62:a5:b8:8e:63:78:72:6f:ba:0c:e7:f0:12:20:9a:
         d1:56:70:33:e9:16:22:0e:42:17:12:13:76:22:a1:6a:1f:0f:
         c7:c2:ec:9e:43:9a:ea:f4:94:15:fb:ff:7c:8c:26:35:0d:f2:
         1b:ee:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:21:32 2024 by rpki-client on console-ams.rpki-client.org