Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/b0cfff18-e3a4-3d2c-b796-bbc994905446.roa
File:                     b0cfff18-e3a4-3d2c-b796-bbc994905446.roa (raw, json)
Hash identifier:          KCSGavvS42Dicuzq9/TPCem3dKAwJidbEo8lIhgZfg8=
Subject key identifier:   1B:95:74:F8:4F:1D:71:55:DC:5F:2B:5D:22:35:A5:75:50:BE:23:19
Certificate issuer:       /CN=1b03e342-d588-4239-8704-6688d01760d9
Certificate serial:       010D0C9F43285844A904D9A99F8770004C6EA500
Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/b0cfff18-e3a4-3d2c-b796-bbc994905446.roa
Signing time:             Wed 24 Jan 2024 14:00:30 +0000
ROA not before:           Wed 24 Jan 2024 14:00:30 +0000
ROA not after:            Tue 23 Apr 2024 13:00:30 +0000
asID:                     397031
IP address blocks:        162.248.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a9:04:d9:a9:9f:87:70:00:4c:6e:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9
        Validity
            Not Before: Jan 24 14:00:30 2024 GMT
            Not After : Apr 23 13:00:30 2024 GMT
        Subject: CN=6cad3ede-7abd-4ad4-9bee-824c35e0ba79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:a4:c1:69:12:a2:80:20:0b:90:df:78:58:
                    e9:84:d0:54:98:d6:c7:f1:63:93:cb:fc:78:f8:a1:
                    b0:39:5f:b0:b0:f3:95:d2:b6:da:93:e7:2d:95:84:
                    67:da:61:fb:a2:9a:12:66:f4:b5:3a:fd:2c:d9:c4:
                    bb:97:1a:74:5e:fb:09:8a:84:f9:6d:9b:86:1c:26:
                    db:ed:e9:51:7e:9a:5b:a6:40:60:ec:e1:8d:ba:9b:
                    5f:e3:d0:42:99:2a:61:48:33:80:7d:b5:60:18:1a:
                    d1:aa:44:72:2c:fd:fb:c6:9c:e4:48:5a:2a:65:cd:
                    a7:88:1c:87:ac:93:f5:90:76:5d:bf:b3:12:c7:f1:
                    23:82:20:e8:0a:c9:7a:2a:b3:05:8c:81:e0:3f:75:
                    f8:4c:62:9c:74:99:6a:84:c0:fa:38:b4:03:16:fa:
                    fb:b3:e2:5b:86:59:45:d8:ed:43:3a:1e:f5:47:03:
                    21:b4:e7:49:2e:6d:5e:ba:71:26:6b:2a:d5:2d:e0:
                    eb:cc:74:03:bc:4b:fd:e8:11:2e:e9:83:1f:3e:0f:
                    a4:d7:c1:e2:c5:07:0e:2f:68:82:63:89:37:8e:f6:
                    dd:8f:b5:03:c6:ab:fe:76:cc:e0:a3:95:35:c0:3a:
                    2e:65:d0:5d:47:1c:96:0a:be:8d:d1:db:0a:97:6e:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:74:F8:4F:1D:71:55:DC:5F:2B:5D:22:35:A5:75:50:BE:23:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/b0cfff18-e3a4-3d2c-b796-bbc994905446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl

            X509v3 Authority Key Identifier:
                keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ac:ec:ad:6a:5f:af:a6:59:23:1a:80:ba:5c:26:1f:04:3d:
         b6:47:ec:ad:25:49:ad:5f:eb:23:7a:45:4e:40:b8:c7:df:21:
         1d:a3:22:98:f8:c6:2a:59:dc:8d:ee:c1:5c:b0:59:c4:1b:63:
         82:02:32:b1:c3:15:b8:31:fe:f0:28:7c:fe:ac:e3:2e:6f:f3:
         22:e8:8a:a0:b1:d7:d7:09:cd:90:3a:a2:5b:1a:eb:ca:e6:7a:
         ee:4b:9a:1b:14:3a:78:fd:d3:06:0e:60:fd:5a:b3:f4:5f:b5:
         11:3c:95:5c:7b:1f:3a:68:03:f1:40:a4:c2:74:70:bb:4d:8b:
         2c:e8:68:92:4b:a6:fe:f4:1e:4c:2e:9d:8c:4e:69:57:64:88:
         26:6c:4f:fd:9b:53:a4:4c:99:69:8f:5f:02:c8:5a:55:6c:1c:
         0f:f8:de:ee:33:a8:f7:83:1e:37:b6:71:59:7b:6c:6a:90:8c:
         6d:fd:22:76:73:98:b1:00:ed:0a:b9:f2:ef:ef:02:3d:e0:4e:
         11:38:7b:c8:a2:57:50:e2:cd:7d:5b:bf:16:f2:83:a8:f4:f6:
         4c:65:64:68:e3:7e:ed:72:b6:cb:43:c6:9f:55:fc:6f:13:12:
         47:cb:f5:d5:99:94:f0:b8:83:b6:51:3d:a0:27:d6:44:b1:2d:
         89:e3:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:00:53 2024 by rpki-client on console-fra.rpki-client.org