Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa
File:                     871747a9-a8a9-3210-938c-b2f4e50362f3.roa (raw, json)
Hash identifier:          N/qoRc86OMnfyXPfzL4tfZGkqbcf2+/sdo7NjHtG6EQ=
Subject key identifier:   F8:5A:FB:1D:4B:C7:60:73:6D:5B:6E:DA:65:4D:DD:BD:11:A8:72:53
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED007057A2CA8624664DE00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        162.222.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:07:05:7a:2c:a8:62:46:64:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=b67dc20b-94d0-461b-b892-14b2a3252def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:6c:29:b0:f1:c2:90:1c:83:fc:89:13:b1:
                    68:62:36:82:58:2d:ec:8a:65:c6:73:55:82:d8:32:
                    c3:fb:a6:c2:79:08:55:d5:e1:ed:bb:63:ab:0a:18:
                    d4:aa:ee:54:ea:35:8e:4b:9f:67:26:ad:d4:d4:30:
                    9f:e9:55:db:c5:58:e2:3a:9a:d4:22:5d:2e:2f:5d:
                    9f:8b:7a:69:4a:51:b6:9a:74:c7:1a:29:66:4c:b0:
                    7c:f7:d5:3e:2b:1a:ee:f3:e5:43:ea:8a:4d:f7:c3:
                    03:2a:15:ee:f1:6a:b0:11:27:e3:1f:90:c1:28:60:
                    bf:ba:fb:60:6c:6e:83:3c:c3:15:f4:f1:29:76:0f:
                    ba:5a:f8:36:ec:93:51:4a:0c:32:22:2f:39:31:ba:
                    92:94:f4:9b:4e:9c:c5:6c:20:e7:f3:0b:3b:d8:6f:
                    a6:65:dd:b4:39:01:d2:46:16:95:e6:e3:9d:71:63:
                    d4:ba:8e:ab:25:63:72:f2:ed:0c:22:0a:1e:e5:66:
                    f1:5d:eb:bc:19:d6:ef:f9:45:c3:16:51:e8:d0:d9:
                    9f:24:5c:61:44:50:f6:8f:ac:ca:f1:c6:f0:af:e5:
                    90:e2:2f:ed:bf:90:64:4f:07:d8:67:eb:50:85:51:
                    69:7c:e3:d2:ae:ec:bb:b8:06:7c:48:a6:d1:c5:a9:
                    69:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5A:FB:1D:4B:C7:60:73:6D:5B:6E:DA:65:4D:DD:BD:11:A8:72:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/871747a9-a8a9-3210-938c-b2f4e50362f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:80:00:11:77:9b:25:5d:c6:46:3d:ac:18:89:45:12:9b:c2:
         22:43:dd:f8:33:a3:46:80:d6:d9:e8:9e:98:68:54:6e:6f:37:
         e9:84:3c:16:c0:a8:c2:e0:ff:49:a8:e1:79:af:73:86:21:6e:
         2a:7f:79:33:8d:db:fc:c3:e0:fe:a4:f0:30:65:7f:fa:e3:5e:
         f8:91:1f:27:8f:20:5a:bb:4c:26:34:ce:ac:43:b4:ab:2d:2e:
         7c:bb:ef:ed:ce:22:ce:d7:b2:83:9a:92:d0:ad:65:64:6a:85:
         db:08:9e:09:27:ee:e1:43:d5:9b:1a:5b:70:31:df:6c:0e:04:
         1d:9d:69:a5:df:c7:0f:b5:9f:f2:e6:9e:1b:5b:70:c8:a8:ba:
         ce:f8:4b:6e:94:96:02:61:59:ab:38:17:5c:f6:71:46:7e:b8:
         00:d2:c9:a9:78:82:ee:97:10:68:ef:1f:b3:61:7a:ee:57:13:
         cf:84:d4:0f:b6:12:20:ad:2e:43:73:fb:45:dd:ff:3b:73:5b:
         e8:69:11:2c:af:26:02:37:6c:2b:68:93:b2:67:ed:42:1f:8c:
         cb:a0:aa:ff:56:06:db:34:d4:3f:c2:eb:d0:79:0d:a9:48:82:
         79:0c:74:88:75:6f:68:9b:6b:8c:2c:55:fc:b0:bd:88:7c:73:
         65:24:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:02 2024 by rpki-client on console-ams.rpki-client.org