Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa
File:                     5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa (raw, json)
Hash identifier:          jLqPKgr2o28w5oETdFDtgOZGsjykFcHw9URPcFUJaOw=
Subject key identifier:   44:01:9C:91:87:C1:AE:F7:E4:3F:A4:A0:24:29:BF:85:83:E8:70:FD
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285847A5D6A780890227CB03ED1D40
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     9087
IP address blocks:        162.250.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a7:80:89:02:27:cb:03:ed:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=53baa6b9-e5c5-421c-89a6-6c9061b9f8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:b3:93:e8:e5:88:72:a4:60:ce:47:c1:de:
                    c7:df:cb:06:b7:88:03:52:d8:60:9a:d5:a5:44:c2:
                    56:51:8b:e7:d4:90:5b:26:06:44:79:23:77:f6:bd:
                    1d:54:87:44:24:25:62:1c:e0:d6:36:85:80:9f:0a:
                    11:3d:0a:6b:0b:b6:bc:fe:f3:bd:01:3d:eb:3b:19:
                    46:a7:d8:d9:48:47:d2:37:65:f8:b5:ec:84:22:fd:
                    05:6d:b0:7c:39:9f:89:98:22:44:f4:87:b4:8d:c9:
                    22:ed:d0:4e:94:f4:71:f7:38:be:d0:5d:9c:bf:16:
                    1f:d2:b5:97:af:07:05:9c:e0:44:02:84:7e:37:b6:
                    c1:fe:b7:a5:13:ae:9e:83:e8:d5:12:fa:08:51:b6:
                    a7:1c:14:0f:85:24:5c:9c:df:2b:f1:e7:fa:95:37:
                    8f:00:5c:cc:3d:6f:02:fd:94:3c:fd:e7:10:bb:ce:
                    cf:d2:18:ff:9a:69:cf:ae:96:dd:8a:4d:07:4d:66:
                    e3:67:3c:5f:b4:f5:3b:f3:f3:89:cf:a2:f0:ad:0a:
                    f4:ae:1d:6c:0a:ec:8c:07:1a:96:ce:8e:68:a3:ed:
                    f4:f4:9a:79:d3:32:f4:a8:4a:93:2a:9f:99:34:33:
                    f2:37:45:62:3b:ae:4c:8b:55:05:6f:b7:5c:80:51:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:01:9C:91:87:C1:AE:F7:E4:3F:A4:A0:24:29:BF:85:83:E8:70:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:82:64:40:4c:2e:8e:b8:2f:7c:e0:b8:f1:36:e3:d4:d2:
         90:8d:75:1c:84:3a:68:0a:e6:5d:6a:d2:78:69:4b:4c:4b:fc:
         59:28:92:b4:e4:27:01:a7:83:42:b3:25:f1:55:d6:68:c1:1c:
         7f:70:80:e4:1f:ba:fc:4f:b1:2d:ab:01:9b:70:e7:3e:6b:dc:
         61:52:e9:66:67:0e:b2:96:89:05:c9:dc:96:53:0f:b0:7f:67:
         67:f7:d0:6e:1b:78:d0:e9:00:1e:c4:9e:5d:37:c7:7e:fc:4e:
         5b:8c:d8:e4:1a:ac:e8:9b:ef:9e:34:0a:f2:35:8a:e3:a7:d1:
         ae:7b:9a:df:23:fe:30:c4:7a:b3:ed:1c:f2:15:43:b6:4b:6f:
         1f:64:60:e1:e5:72:10:29:f3:58:af:ec:1c:17:ea:a6:26:c6:
         22:ef:db:a0:fc:3c:15:66:77:42:f5:fb:c5:28:c3:18:80:6f:
         28:c1:c1:f3:ed:49:81:25:7a:46:92:03:7f:97:1f:91:e8:4d:
         55:65:0c:40:72:49:c2:ea:2e:75:aa:e1:a5:14:f9:15:23:9f:
         6f:d2:c2:4d:0a:6f:df:68:2d:7b:1a:83:4b:29:31:1d:b4:11:
         37:fd:3d:e5:32:29:be:43:5a:aa:c9:79:1b:f1:54:b9:cf:50:
         cd:39:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:20 2024 by rpki-client on console-ams.rpki-client.org