Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa
File:                     791354d3-b69a-3f80-9895-25a56bac7468.roa (raw, json)
Hash identifier:          Q1Eha2/Y3Ub21Ygp2vOkra8rZFgnvZKpwl4n0wRLyMQ=
Subject key identifier:   65:22:2E:E9:5E:0D:4A:51:8C:6F:8E:0D:1C:88:1F:E8:DE:B4:89:54
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285844F19AB082EE0135C9059A7960
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     399091
IP address blocks:        198.22.208.0/22 maxlen: 22
                          162.218.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:b0:82:ee:01:35:c9:05:9a:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=0fa44c8c-79e8-4397-835b-eeb074f21459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:b1:05:26:da:44:ba:78:99:7b:0a:cb:a7:
                    8c:2f:cb:07:57:03:15:fb:fd:e0:e7:f5:c9:c1:71:
                    9b:bd:b0:0d:37:a5:0f:00:a0:5f:0b:b2:ec:6b:11:
                    db:8f:67:04:f9:a4:b5:88:d9:9b:8e:00:27:4e:17:
                    91:ec:f1:0b:af:4b:3b:b3:22:f8:54:e2:2c:63:f2:
                    8a:47:0d:95:db:74:12:3e:ff:43:c6:50:0d:f5:7f:
                    86:c0:d4:f5:86:cd:d9:4d:1e:d0:f7:66:d7:90:3d:
                    f4:e7:5b:f5:1f:16:f6:dc:78:e5:82:41:cd:93:f7:
                    ff:09:21:2c:51:bc:c1:cf:35:37:b4:e8:17:ff:49:
                    01:cb:45:ff:b9:3e:a7:30:c6:1b:20:ed:06:0b:9b:
                    9e:b5:13:44:2e:5c:88:6b:a3:09:71:3b:a5:3e:e8:
                    86:34:ad:0b:30:22:d1:26:cc:52:97:d4:11:91:b7:
                    35:ae:45:47:c9:7d:ae:6f:d4:71:65:a6:0b:86:93:
                    24:e6:2a:af:74:04:00:39:d8:49:ee:81:57:6e:9e:
                    47:05:12:52:ba:db:7a:61:94:5b:68:a8:2c:32:76:
                    3c:ed:84:71:99:c1:74:eb:32:79:a3:c8:5c:62:f8:
                    01:eb:7c:a2:cf:00:92:93:f9:d4:c8:1e:4f:02:51:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:2E:E9:5E:0D:4A:51:8C:6F:8E:0D:1C:88:1F:E8:DE:B4:89:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.8.0/22
                  198.22.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:74:f9:72:62:52:4d:c7:26:c3:d5:a7:2b:6c:6c:2d:29:
         33:b4:9a:97:fb:8f:ee:17:95:93:07:76:db:33:5c:0c:85:9a:
         2e:06:70:63:b4:33:ee:95:8c:6b:7c:79:b9:05:f7:23:0b:30:
         ce:c3:46:0f:b5:43:f4:d4:89:4d:74:86:4a:0f:f4:e4:1b:6e:
         83:d6:dd:fc:15:b2:7b:9e:26:45:a8:21:43:cd:eb:5e:b7:8f:
         88:65:45:cb:8a:8c:b9:81:21:ac:36:2c:9d:d1:80:36:8d:66:
         20:aa:ca:b1:6f:7e:71:31:62:6a:5b:72:06:82:54:8e:17:aa:
         08:a2:31:73:1d:be:f2:e3:bd:a2:4f:23:33:34:b6:8a:20:c0:
         5b:32:18:a8:22:8d:2f:5b:75:6c:cf:9b:56:66:86:88:39:1a:
         54:5d:72:58:62:ce:73:a7:35:86:8b:ce:5b:6f:39:82:32:58:
         06:52:07:84:75:77:96:9c:08:24:f5:34:86:72:64:bd:58:74:
         93:7d:52:62:45:30:06:09:8e:ea:27:84:d3:3e:e0:9f:e4:ec:
         96:e2:ba:02:78:0c:64:bd:a3:be:c1:39:5b:e8:ef:21:86:d7:
         26:17:be:a1:b8:ca:02:da:1c:11:a0:47:eb:36:44:a7:44:86:
         a2:60:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:38 2024 by rpki-client on console-ams.rpki-client.org