Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0532ac15-6330-339b-b716-3745518c2d28.roa
File:                     0532ac15-6330-339b-b716-3745518c2d28.roa (raw, json)
Hash identifier:          umI4PbubElI+EzG0A9c8u0M3ozeCzngAigdiOAAT+gY=
Subject key identifier:   07:6B:7A:65:BF:AB:D6:56:AF:EC:90:A2:B1:11:A9:89:C9:3B:38:EC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858471BA5AD2AAD3EB6C14DA32BC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0532ac15-6330-339b-b716-3745518c2d28.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     63023
IP address blocks:        67.227.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:ad:2a:ad:3e:b6:c1:4d:a3:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=31ea58a8-47f8-41b0-a249-23786e0ee6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:61:5f:cb:b3:48:0c:12:fd:24:c3:3a:c1:
                    5b:1b:a9:f4:33:76:ab:ce:25:ca:50:42:46:d5:08:
                    80:18:0d:b2:20:19:83:56:3a:2f:67:30:42:d2:11:
                    2c:d4:16:b3:ed:3e:6b:71:3b:b4:0f:a4:ac:c4:fd:
                    a5:d1:a0:33:39:7b:c9:fe:6a:06:eb:06:c2:e3:c5:
                    54:cb:69:df:56:dd:93:1d:7e:ca:cc:56:b2:81:31:
                    16:4a:df:2a:b2:c6:01:46:ec:27:33:5c:b7:63:28:
                    6c:b9:0a:90:96:52:d7:13:84:1b:7b:d3:5f:0a:6c:
                    a8:a9:2c:9f:cf:d3:a5:42:67:70:a4:1c:0e:64:80:
                    d2:db:bc:d5:40:0e:d5:cd:04:2e:6c:52:3d:97:da:
                    48:a4:9b:59:a8:cb:af:ce:16:4e:03:4b:fe:f5:cf:
                    c0:0e:ff:37:75:42:ec:87:13:87:d8:9e:af:90:23:
                    95:07:a1:e3:be:4a:c6:c6:f3:ae:f3:36:d7:60:98:
                    47:c4:ed:14:67:ee:2d:32:5d:50:5e:82:62:f0:a2:
                    3f:b0:77:8a:ee:76:c0:5e:d1:4f:48:d2:ce:cd:9a:
                    cc:4a:2a:c8:d1:dc:e0:8c:9a:e2:33:04:51:79:2c:
                    5c:16:7c:45:d9:e2:7f:6c:49:ce:fd:e0:e2:b4:47:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:7A:65:BF:AB:D6:56:AF:EC:90:A2:B1:11:A9:89:C9:3B:38:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0532ac15-6330-339b-b716-3745518c2d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:ea:20:f2:b3:d7:01:7b:19:fa:85:91:78:2e:c7:03:1f:17:
         20:51:0e:f0:c1:4f:0b:44:45:93:52:d8:3e:30:04:83:d9:eb:
         58:3e:a4:b1:2b:21:82:a9:b8:f0:1f:b6:9d:80:7d:6e:c2:10:
         6d:1d:68:d8:85:d5:f5:c3:4c:ca:a9:31:15:c2:e5:5d:53:d5:
         fb:c7:70:73:e8:ec:87:45:7c:c2:af:3a:f6:42:08:2e:f2:3a:
         ad:72:3b:8e:bd:4d:ea:47:75:dc:6d:96:6c:17:42:e0:20:c0:
         a3:e6:f5:e0:ee:4f:9a:1e:7d:35:39:2d:80:ad:a0:3d:75:ed:
         fa:57:f7:50:e6:b6:75:5b:6a:90:86:0d:e5:7b:ec:f8:12:b0:
         84:16:4f:21:28:78:40:fe:9e:4a:64:9c:c4:5e:bc:db:e1:50:
         55:37:30:0d:45:8d:37:3b:6d:40:49:0b:ae:bd:65:dd:83:55:
         15:07:37:9b:47:58:8a:bb:f2:cd:9a:d9:b3:13:fa:fe:51:05:
         e5:ea:04:14:b0:e4:b4:d6:b4:08:da:af:b6:c8:07:96:e9:d9:
         d8:55:45:b5:50:3b:6c:57:ca:60:1d:a0:db:57:0e:0b:6f:9e:
         15:42:17:3a:32:6d:90:07:1a:4f:6b:80:a0:32:b1:2a:cc:39:
         4d:26:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org