Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/e157a092-8e79-32f4-a337-609a52ee2fb5.roa
File:                     e157a092-8e79-32f4-a337-609a52ee2fb5.roa (raw, json)
Hash identifier:          cPe7lgqF9Z0/f7NKXctUXNA4OiqTTV8AJ1de/z2xIik=
Subject key identifier:   78:81:55:ED:A3:71:32:B8:A1:6C:3A:E2:12:C2:32:A3:87:D3:9B:FE
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F43285845BEAE1614A05D1EF6BB814580
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/e157a092-8e79-32f4-a337-609a52ee2fb5.roa
Signing time:             Fri 03 May 2024 01:00:24 +0000
ROA not before:           Fri 03 May 2024 01:00:24 +0000
ROA not after:            Thu 01 Aug 2024 01:00:24 +0000
asID:                     398159
IP address blocks:        162.244.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:ae:16:14:a0:5d:1e:f6:bb:81:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: May  3 01:00:24 2024 GMT
            Not After : Aug  1 01:00:24 2024 GMT
        Subject: CN=28cfba3a-f924-451b-ba16-77fe6a5c6f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:76:2d:7a:88:84:2f:8e:66:9d:0b:38:9a:
                    59:00:f3:6d:b8:d7:5d:c6:24:b1:23:b2:5a:e1:69:
                    65:c1:27:6a:b1:f1:04:0a:3e:61:ca:4e:f2:83:2e:
                    9a:c7:3b:48:90:42:e8:a7:e4:e9:64:b0:16:4c:18:
                    bd:fe:3a:19:e4:d4:42:2a:3f:84:e3:7b:49:c1:55:
                    ae:99:64:04:84:c9:85:af:21:9c:26:fb:d7:af:05:
                    c5:72:67:eb:d5:a0:86:50:59:c2:63:77:68:84:a2:
                    4e:d8:7a:5b:31:a3:b4:f4:e8:d1:25:80:53:d0:e3:
                    16:13:cd:ea:ed:53:b0:82:9d:69:d2:76:8b:c4:76:
                    62:47:d3:1c:2c:8c:57:a9:f9:65:fd:2c:15:3e:f9:
                    74:00:a6:b1:95:98:fb:20:2e:84:67:0a:64:91:c1:
                    5f:ac:f4:a7:93:8f:b9:c4:70:63:65:6b:1b:c5:64:
                    1b:e1:0d:21:8f:33:2c:30:21:82:0d:9e:41:7e:21:
                    4d:51:4e:ea:d6:eb:6d:18:2a:59:ff:15:09:3c:1b:
                    62:f4:17:3c:66:80:e9:1b:6e:46:09:0a:3f:75:24:
                    1f:10:51:46:4a:31:5a:b1:4d:c3:88:65:11:31:98:
                    e2:e6:bd:25:82:d5:ff:9d:e2:14:e2:d1:ce:fd:a4:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:81:55:ED:A3:71:32:B8:A1:6C:3A:E2:12:C2:32:A3:87:D3:9B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/e157a092-8e79-32f4-a337-609a52ee2fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:10:b8:77:7c:81:fe:dc:89:8a:0f:c7:34:fa:7e:f1:2d:
         3b:27:3c:26:1c:08:d9:51:74:ad:89:f0:71:45:5b:6d:d6:26:
         7d:72:0b:e6:1c:43:01:31:25:1d:54:a8:0b:ae:34:d8:ec:d0:
         87:39:7c:c5:da:74:9f:93:c5:34:27:84:0e:89:cf:22:9e:ca:
         60:be:62:bd:fc:c9:05:20:c4:ba:4b:ac:0c:a7:94:8c:6b:e3:
         30:75:a3:8e:58:ed:c3:c9:e3:48:f6:f8:8b:22:64:ab:56:94:
         9d:ab:23:49:74:c5:14:82:ad:fc:e7:c9:eb:78:d5:11:eb:f2:
         4e:aa:dd:34:00:a9:dc:50:8c:8e:67:f2:f5:80:2d:1b:10:e4:
         da:b7:87:64:fb:e8:81:b8:82:0a:0c:a1:b3:b8:93:9f:c4:c8:
         08:66:03:71:3e:3f:f7:94:96:3e:ce:0a:16:62:b3:64:33:38:
         db:75:da:05:e1:86:f8:08:49:6e:03:37:f7:09:2e:10:d9:21:
         72:c8:05:7a:c7:a0:1c:e6:d5:ed:c3:22:85:ae:50:56:d7:b2:
         48:21:6b:44:13:89:ae:a7:69:62:9e:e1:98:4a:4d:37:ea:40:
         ee:df:10:75:f8:8a:02:10:e8:3b:8f:7b:34:16:ca:58:32:f8:
         b5:2b:0b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:56 2024 by rpki-client on console-fra.rpki-client.org