Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa
File:                     2a5c7778-1786-3e6f-8890-b24491b369bb.roa (raw, json)
Hash identifier:          cYYxZuOCqaeB3fEogNurADcNCz8ojaDZzOUjkJjsF+8=
Subject key identifier:   92:27:AE:27:EA:B4:99:BF:CF:53:5E:18:51:8C:CB:D9:C3:0D:D9:50
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F43285847314705112363D03CEDACCC40
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa
Signing time:             Thu 12 Sep 2024 18:57:39 +0000
ROA not before:           Thu 12 Sep 2024 18:57:39 +0000
ROA not after:            Wed 11 Dec 2024 19:57:39 +0000
asID:                     22504
IP address blocks:        162.118.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:47:05:11:23:63:d0:3c:ed:ac:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: Sep 12 18:57:39 2024 GMT
            Not After : Dec 11 19:57:39 2024 GMT
        Subject: CN=96e2800e-d323-4ac9-bd1e-632bc8e40971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:f6:e3:92:81:1f:63:13:77:7a:9b:f2:b7:
                    89:cd:6d:5a:4e:8b:9b:c5:9a:9e:d3:78:c3:f7:87:
                    44:d5:ae:26:b5:aa:ce:fd:b9:fc:96:95:5d:14:85:
                    74:79:aa:16:26:e9:4b:b5:e5:ef:92:ce:a8:14:1f:
                    a7:4d:8c:5e:9d:8c:94:de:82:a4:19:d9:28:a5:1c:
                    7d:29:0b:b0:26:6a:b6:b2:90:f9:cf:71:c8:8f:23:
                    6d:06:e9:e2:c5:ab:b8:24:64:49:b1:51:26:11:d4:
                    47:f0:c1:1d:96:0f:d5:77:4d:67:af:ef:1a:07:00:
                    7b:ea:1a:2d:2e:23:18:27:c4:c1:58:ba:88:a2:c5:
                    89:55:4e:7d:8e:ab:cc:0d:8b:5d:24:05:57:59:e7:
                    71:c9:31:d3:2f:72:ea:be:12:dd:1c:05:1f:95:3c:
                    ef:03:7b:19:3f:2a:fe:6c:7a:0f:76:74:f3:f7:6c:
                    b7:9b:7b:b9:90:13:3c:b8:46:d0:12:f8:02:05:c3:
                    2a:5a:9d:a7:9d:05:a4:70:b4:ea:ba:37:8d:89:e2:
                    35:03:1d:83:30:9d:14:40:73:f7:cc:b6:96:4e:15:
                    fb:27:c9:04:18:42:71:b5:dd:4c:b3:17:54:e0:2f:
                    c8:88:cb:2c:4b:e6:19:27:5a:dd:71:3a:d7:6d:44:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:AE:27:EA:B4:99:BF:CF:53:5E:18:51:8C:CB:D9:C3:0D:D9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:43:07:08:7f:ce:00:6d:d2:db:d3:f7:3f:03:3f:48:72:
         22:0a:67:1e:2f:f3:e0:04:db:12:a2:40:4f:a7:5f:c1:b2:06:
         84:38:bb:73:c9:26:63:33:f1:30:95:88:e3:78:80:d8:15:fa:
         3a:c2:10:53:1f:65:e1:6d:3d:be:11:da:d5:64:bb:17:e5:14:
         bb:8a:00:b7:ab:a2:3b:f2:f6:51:9c:73:d9:d7:23:52:11:5d:
         d4:67:57:96:23:0a:5e:a3:3e:b7:0e:c7:90:1c:ae:23:0f:29:
         96:6e:b8:8d:8a:0e:d8:2b:d0:9a:f2:70:1a:35:e9:e1:97:cf:
         58:9e:57:84:88:71:48:57:4d:f0:b3:e2:e3:3a:74:61:35:6f:
         b7:36:38:82:83:ed:20:3c:75:93:2a:13:85:80:3d:b3:b8:87:
         f3:7e:3e:3c:d5:b6:93:3c:a3:74:85:6b:49:fc:ea:26:53:02:
         58:8a:84:12:29:ed:0d:22:5a:a9:a1:34:e7:b4:04:30:3d:0d:
         53:b5:04:15:3d:ba:28:34:7f:b6:04:0b:75:14:ba:19:c4:4d:
         d3:f0:d8:51:be:a2:69:2f:f4:11:f5:0e:81:94:ec:34:3a:7c:
         01:b6:79:b4:ed:59:54:32:ef:29:18:c4:54:24:64:13:44:d5:
         45:10:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org