Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/f93a2998-9199-3839-92a4-56532cf3dff9.roa
File:                     f93a2998-9199-3839-92a4-56532cf3dff9.roa (raw, json)
Hash identifier:          nN2UVM7gX++ypa74Hnp80zgumbFFLKP122+UGJRLhHo=
Subject key identifier:   83:BF:B9:E4:84:5D:29:E8:D1:47:96:24:AF:CC:E7:35:C2:34:CC:85
Certificate issuer:       /CN=50554af3-8108-491d-84e4-240f4874833a
Certificate serial:       010D0C9F43285847A04148DDD2A4FEF6DE5A1200
Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/f93a2998-9199-3839-92a4-56532cf3dff9.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     3561
IP address blocks:        185.123.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:48:dd:d2:a4:fe:f6:de:5a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50554af3-8108-491d-84e4-240f4874833a
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=2b4c1418-9cd1-431d-8302-97e6b63f089d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:7c:8b:7b:be:0c:b9:82:54:72:81:83:83:
                    e3:02:af:23:5b:72:35:7e:28:57:3d:b9:e2:9e:38:
                    02:08:8e:14:c7:d0:c7:1e:87:e2:f3:61:b9:5f:56:
                    a4:05:66:78:7b:96:01:aa:ce:df:99:7a:f8:71:39:
                    34:59:41:dc:af:c6:41:18:68:3c:68:7f:b3:26:ad:
                    8c:ff:b7:87:d5:cf:f2:14:53:bf:36:6f:c8:55:d3:
                    b9:c8:b5:90:a3:f4:a6:58:6b:79:19:de:76:86:01:
                    a5:62:c6:43:75:e8:c8:89:c3:46:36:61:12:dd:a5:
                    7c:dd:9b:4e:19:e4:6e:c2:a2:a9:4a:79:46:cd:f0:
                    c5:ab:9b:d2:07:c8:aa:3a:12:3b:ce:00:16:f7:d4:
                    97:30:d4:dd:98:a9:12:d1:b7:75:ae:76:00:f0:09:
                    f9:c0:f2:cb:2c:13:41:a6:61:ee:0e:58:f0:79:0c:
                    1d:6b:2f:88:7e:b8:f2:d1:ac:33:b4:a9:2a:e0:58:
                    5a:da:04:36:19:26:61:a2:8c:e4:58:b1:25:7c:5d:
                    8b:16:ce:8b:6b:a0:e2:8b:45:e9:58:30:e5:8f:f4:
                    44:48:7a:ad:32:15:5c:2b:19:b7:32:d7:89:ec:18:
                    63:cd:4f:85:2a:93:68:3b:28:3b:b1:27:3f:bd:57:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:B9:E4:84:5D:29:E8:D1:47:96:24:AF:CC:E7:35:C2:34:CC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/f93a2998-9199-3839-92a4-56532cf3dff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl

            X509v3 Authority Key Identifier:
                keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:2c:4a:2e:bd:79:8a:95:bf:e1:e4:fe:4c:ec:d6:99:f7:
         d7:3a:1a:74:ce:56:77:c6:75:59:2f:08:db:ae:85:8e:82:24:
         c0:d3:e7:e7:67:18:20:34:f7:40:ca:9a:8f:ee:c4:cb:66:c9:
         13:ce:4f:53:e8:28:16:0a:f7:8a:b7:17:10:74:6c:31:0c:6b:
         a8:c1:0e:0b:40:0f:03:33:8f:fd:d7:ab:d8:08:21:93:61:b6:
         a2:e2:8c:5b:a7:3a:27:9d:51:09:98:a1:75:f2:9c:3b:f1:1c:
         6c:4f:36:3f:3a:bc:3a:f3:0a:a5:10:ee:0a:0c:3e:73:f4:db:
         14:45:0b:34:7f:51:39:a1:6e:20:ce:d6:db:6f:c7:50:1a:66:
         73:d3:b0:89:2c:f8:9d:54:90:dd:26:ff:bf:77:5c:0a:26:4d:
         8b:91:b9:07:0b:d6:77:5b:6d:56:d0:ae:b2:7b:f0:cf:a2:cb:
         3d:2f:5d:34:32:be:53:d7:c4:63:d9:8c:5b:9c:af:2e:c7:b1:
         99:fb:92:52:b2:eb:5d:7a:a5:4d:90:0e:67:0b:3b:15:bf:da:
         9a:73:cd:38:97:a3:15:b3:9f:32:a3:7c:7e:0d:dc:c3:fb:be:
         79:6b:6f:0d:3e:b9:f8:52:f5:b3:2f:1e:5f:ae:e4:2e:fd:5e:
         4c:4c:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org