Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa
File:                     2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa (raw, json)
Hash identifier:          EZbbKaHq1PFle8Bpq082toQyY6/fDF5KvO9rxs9AHwA=
Subject key identifier:   14:02:EE:8A:3B:4D:74:C0:CE:37:55:02:FC:57:CD:12:49:6C:E7:F7
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F432858478CB68D5895FDB69EF9BE0D00
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     54004
IP address blocks:        144.168.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8d:58:95:fd:b6:9e:f9:be:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=77837e4c-7bc3-4a6a-9066-257bbbf65909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:8b:48:87:6d:b6:3c:ba:7e:bd:7a:1a:db:
                    72:67:33:61:7c:1d:21:86:b2:35:4a:dc:2d:79:d0:
                    9c:7d:1f:60:66:f6:16:47:de:ef:75:69:68:6a:72:
                    37:34:32:81:57:8a:8a:c1:bd:93:08:80:23:7e:a7:
                    3b:c6:a0:65:ea:2c:5f:da:89:4f:74:1e:d3:b6:d3:
                    2b:7d:da:7c:fe:a0:52:83:9d:83:60:5c:e1:4e:85:
                    94:7c:f7:6a:df:a8:be:58:d4:c3:b4:da:cb:c0:0c:
                    a0:62:79:64:0d:14:dc:f4:95:d8:3d:be:92:f4:e8:
                    6a:56:16:7e:cf:fa:ef:13:5d:b3:1c:f0:72:40:43:
                    8d:bf:03:95:e3:86:4f:64:8d:4a:bc:c1:e6:e0:5b:
                    0f:9b:62:f9:e0:a9:24:d3:67:d8:de:2d:e3:a4:1b:
                    39:b0:c0:1e:ab:f4:a7:9e:51:6b:0b:c4:bb:97:15:
                    22:ea:fc:bf:38:25:48:4c:83:09:74:f1:d3:ac:1b:
                    e8:e7:da:30:3d:31:2d:a4:29:01:f4:d0:da:9d:28:
                    54:8d:5d:cb:2e:bb:b1:ef:54:92:65:c8:7b:92:44:
                    2c:11:5a:f5:e7:b6:a7:4e:40:93:e8:72:21:1c:70:
                    44:5a:d3:59:5b:40:75:d4:39:77:01:e2:93:9d:2c:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:EE:8A:3B:4D:74:C0:CE:37:55:02:FC:57:CD:12:49:6C:E7:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2c0d3416-83c1-37ae-bf01-19ef30f4146c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:f9:77:73:7d:4c:f9:be:2f:f8:c7:24:38:f5:e8:4e:5a:86:
         54:3e:e8:75:42:d8:18:0e:7c:cd:78:04:00:6a:32:51:fc:72:
         06:1a:aa:cf:ee:1d:1b:69:1d:5b:aa:cc:07:01:cb:c1:ba:54:
         2a:0a:74:80:7b:79:ee:63:c1:09:18:2d:02:d3:90:cd:46:e0:
         7e:28:e4:fd:55:a8:58:d0:08:0c:e4:4d:9b:c4:49:22:a7:ae:
         3d:47:22:e2:d2:11:cb:3c:44:73:f9:7c:e9:a1:66:13:7c:c5:
         13:9a:28:2e:ef:59:4c:8c:9c:b4:42:19:9b:c6:8e:be:54:ee:
         3a:e2:45:48:5e:5b:4c:a7:27:d1:5f:ea:5b:66:80:32:f0:46:
         42:f4:d0:c5:87:5b:49:3c:91:72:a5:51:51:1b:99:f4:d7:18:
         23:7a:69:07:11:d2:63:42:6b:3d:c3:a1:41:18:24:8a:a6:3b:
         77:f2:47:5f:1e:eb:8f:19:08:26:e9:af:de:f2:a1:b6:a4:dc:
         3b:b7:1f:59:65:87:58:76:15:b4:ad:f3:f0:92:5d:9f:32:b7:
         86:bc:26:0d:80:4e:72:ff:6b:bd:e1:3d:52:2a:f1:51:10:e2:
         d5:c2:94:c0:4f:6d:db:92:5d:84:da:04:08:5c:78:4e:f7:bf:
         ae:f3:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:03 2024 by rpki-client on console-ams.rpki-client.org