Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
File:                     65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa (raw, json)
Hash identifier:          gOSCnerVNuKFLz9X35H98T144jJNtUFTo3uPsMPycj4=
Subject key identifier:   68:3F:39:9C:1F:FE:54:41:C8:1E:0E:79:DA:D3:3A:D4:8F:B4:E8:FC
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F432858475BDB632936A23B185140A380
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     6079
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:63:29:36:a2:3b:18:51:40:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=548d7a02-a6cd-4c1d-a0d0-271c8d0ad432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:9e:98:53:26:56:f7:77:29:81:2c:f7:c9:
                    33:d5:c0:39:23:27:84:65:fa:4b:ae:9c:ea:3a:05:
                    33:5c:1d:4e:fa:bd:0e:04:19:e3:78:ae:c6:77:db:
                    62:a9:ac:65:2b:50:a8:73:29:87:86:c4:73:6f:2d:
                    b1:91:38:e8:09:4a:c0:53:5f:f4:35:ec:68:b7:7b:
                    cd:66:b8:2a:c2:fe:1c:b5:52:e0:1e:75:d4:82:53:
                    f8:61:02:97:03:93:64:cf:79:ac:5d:8c:d9:ab:a9:
                    30:41:e1:f3:0a:37:79:6f:ce:53:0e:4e:bd:11:d3:
                    78:3a:db:95:4b:97:ec:bf:9f:ab:4c:5a:34:c7:e8:
                    87:2a:b4:d2:4e:b9:8d:1b:f1:c2:87:f6:cd:3e:58:
                    fe:b3:52:16:87:d2:e1:e7:65:61:43:24:4e:3e:d2:
                    05:dd:58:bd:57:89:7b:98:be:6a:67:ba:c2:b6:9f:
                    a7:a6:6c:28:ff:11:0a:7d:96:20:f6:e0:60:1e:6a:
                    b3:a6:86:54:21:25:87:69:f3:79:eb:23:36:99:6e:
                    f6:02:e4:3b:94:e6:9a:6a:42:44:4b:b0:8f:b8:cf:
                    da:14:05:21:69:ae:f2:31:f0:6d:23:69:d5:05:5a:
                    e5:38:31:c3:51:c4:4e:d9:a1:26:53:10:5f:19:e4:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:39:9C:1F:FE:54:41:C8:1E:0E:79:DA:D3:3A:D4:8F:B4:E8:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:65:7e:01:5c:25:f6:f2:23:e0:c0:da:5d:17:68:7a:25:b0:
         22:99:6c:4f:98:81:d7:28:7e:22:53:22:74:79:78:12:98:b0:
         ec:b8:a4:f6:2e:f8:e0:85:ef:60:de:ec:be:d1:fd:ba:ce:34:
         17:b4:07:5c:55:59:4c:d6:19:79:a7:67:f4:b9:a6:5d:34:d5:
         7f:78:5d:6e:c6:7b:4e:81:b5:7a:40:84:fb:23:83:e1:8f:66:
         75:bf:ae:c1:bf:27:6f:41:b0:80:a0:ad:10:ba:9e:00:43:8c:
         5c:65:cd:df:39:cb:7a:5e:3e:c0:7f:59:79:42:f2:a7:83:a6:
         3a:c2:48:d1:4d:01:f1:9f:a1:66:0e:00:57:3e:1a:f4:4c:82:
         ee:6f:bc:8b:0f:d1:ae:45:32:6f:fc:d5:0c:52:58:62:bc:fa:
         e5:27:93:6e:30:13:05:97:80:3a:7c:1d:77:50:35:17:8c:ca:
         64:8c:ef:6c:c7:45:72:b2:ed:03:0a:f6:ff:b5:45:ea:99:31:
         35:3a:df:83:9a:4a:72:7d:27:a8:bb:a9:e3:bd:ff:db:1e:91:
         ee:ea:9d:21:d4:ef:f4:8e:da:85:55:2d:3e:9e:d4:ea:d0:cc:
         76:ed:42:6d:28:6f:ed:a2:a6:16:10:9f:ff:6e:ad:3c:5a:20:
         2f:81:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:34 2024 by rpki-client on console-ams.rpki-client.org