Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa
File:                     97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa (raw, json)
Hash identifier:          9XTpriAxMf7m+LnhavNmdG5l8vOcQVwVF3+i+Tkda3g=
Subject key identifier:   D0:47:6A:99:C5:53:EF:A0:03:03:F6:61:B6:64:9F:AE:26:BD:E4:60
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F4328584571E8713CE88046FAF05DED40
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     40555
IP address blocks:        162.211.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:71:3c:e8:80:46:fa:f0:5d:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=9ac600a2-2ad1-441c-ac23-6799dc2fb30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:c9:05:3b:05:04:27:02:2a:1d:9b:43:32:
                    7e:93:b9:2e:f2:68:ab:bf:45:5e:c2:49:f2:b3:02:
                    ae:b7:e3:8c:37:bb:d0:2c:b6:70:13:6c:7c:93:d3:
                    32:b8:dd:7d:af:96:a9:db:de:8f:69:44:38:22:36:
                    ca:83:f6:93:8d:e2:bb:81:25:1b:b2:ba:84:8c:22:
                    00:e8:25:3c:e6:ea:be:18:b6:8b:31:b9:2f:07:cf:
                    9f:98:3b:18:19:e0:6b:36:ef:7c:73:98:57:22:21:
                    06:44:3c:26:3d:5f:9e:e6:44:3a:b8:c3:a4:42:01:
                    a4:cf:84:1d:25:66:8a:eb:13:8b:5c:c8:4f:a4:f0:
                    96:26:2e:ce:ae:e6:f8:f7:69:91:a3:d7:bf:0e:23:
                    ce:b9:5c:7c:a0:e6:c9:e4:7d:e3:61:73:3e:e1:38:
                    25:ee:6f:ff:48:86:35:e9:2d:49:cf:91:52:fd:b8:
                    05:f3:40:9a:53:21:1f:c0:5d:59:da:66:35:a4:3b:
                    2a:fb:3e:de:0f:ff:4c:e2:b3:4f:f4:e8:d6:3b:2c:
                    67:c1:39:6c:ba:d8:f6:bf:e1:8e:8a:fa:40:47:40:
                    e1:bf:92:68:62:13:f9:f4:54:d7:d6:f1:85:05:2c:
                    45:f7:d3:45:a7:c9:e0:46:cd:fb:b2:ac:99:68:57:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:6A:99:C5:53:EF:A0:03:03:F6:61:B6:64:9F:AE:26:BD:E4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:68:3a:a5:c9:fc:b6:58:c8:02:a3:31:bf:7d:6d:55:5f:00:
         a7:93:8b:f0:97:54:a5:fb:6c:5c:b5:29:f1:4b:19:95:27:6c:
         65:8f:2b:7c:32:29:42:9b:46:6d:c6:a5:ff:81:b5:a9:5a:e6:
         db:c5:db:aa:9c:a4:db:74:70:3b:7a:4a:fd:aa:d0:ea:c7:70:
         0b:25:f0:89:db:de:11:66:b9:e1:fc:d9:29:58:d9:67:99:ad:
         3b:94:ab:a4:66:7e:f1:b7:d3:c7:6d:56:71:d8:51:ea:35:7b:
         ce:61:a8:e1:36:8f:94:4e:5d:08:db:40:bb:26:8c:e8:8d:ad:
         b3:b2:a1:2a:7b:f4:31:af:e6:68:13:cc:41:b8:b5:09:99:11:
         8e:0f:1f:ed:60:c3:26:14:25:76:ea:83:44:75:ca:96:de:c8:
         78:58:27:3f:81:be:25:d8:69:2c:17:6c:b3:34:ae:95:fa:a0:
         3b:be:11:f1:fa:01:94:40:bb:1f:99:3c:a0:02:44:df:31:96:
         4a:7f:21:fc:7c:af:98:fb:3b:50:d0:11:a7:7f:41:d5:ff:44:
         f6:86:2c:ab:7f:ee:f8:b9:eb:1f:d9:59:9c:21:21:ac:8d:fb:
         f0:ce:94:e7:e6:93:fc:b9:12:40:59:00:b6:e0:7e:f5:29:1e:
         0e:db:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----