Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/c9daf6f2-73c2-3487-bf63-df6125d549f8.roa
File:                     c9daf6f2-73c2-3487-bf63-df6125d549f8.roa (raw, json)
Hash identifier:          ZxBCxNcwOSde9V/rVn3XXZOzOBi+fbLibQ9jeAEMwq4=
Subject key identifier:   27:BB:D6:40:A8:AE:CF:D7:B8:94:72:3D:0A:1C:FA:AB:E7:D1:6F:AE
Certificate issuer:       /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial:       010D0C9F43285845682D8CEB9D8EF338D8E52A80
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/c9daf6f2-73c2-3487-bf63-df6125d549f8.roa
Signing time:             Tue 02 Apr 2024 01:21:55 +0000
ROA not before:           Tue 02 Apr 2024 01:21:55 +0000
ROA not after:            Mon 01 Jul 2024 01:21:55 +0000
asID:                     397162
IP address blocks:        162.221.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:2d:8c:eb:9d:8e:f3:38:d8:e5:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
        Validity
            Not Before: Apr  2 01:21:55 2024 GMT
            Not After : Jul  1 01:21:55 2024 GMT
        Subject: CN=45171d3e-e5d5-4637-9f9d-2513c48671e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:04:2f:33:d8:33:eb:b5:be:04:d9:30:bb:
                    32:e3:9c:3e:f2:9e:50:e5:f8:94:44:d2:49:57:c8:
                    e8:5c:99:22:bf:67:a1:10:83:84:f0:77:ea:9a:6e:
                    01:32:e2:df:5a:2e:20:b6:5c:06:09:e7:a1:4a:1e:
                    09:80:d4:be:d8:45:2d:86:14:e7:30:70:fa:64:8b:
                    e3:4a:c5:32:ab:97:d7:35:09:06:ce:bc:48:f1:ef:
                    e8:aa:1c:e2:db:65:58:0c:93:7d:5f:19:d8:78:62:
                    be:df:27:d6:fe:b8:23:6a:e6:09:52:1b:71:5e:5b:
                    69:66:8e:40:bd:96:6f:5e:85:74:7f:31:66:a6:e8:
                    65:4e:2f:2f:21:57:1c:a7:4b:75:49:2e:89:18:3f:
                    7a:bc:5b:ce:59:92:ac:fd:97:62:b8:e3:c5:de:b2:
                    1a:a9:82:5b:4d:16:0b:14:77:c0:83:49:d7:28:54:
                    82:e2:f7:28:9a:17:4c:e2:c4:99:e0:9b:48:24:51:
                    d2:69:4d:69:7f:4c:d8:6c:29:ba:fd:f3:29:e7:78:
                    b7:f9:d2:6c:ee:42:e9:09:d8:d5:30:bd:9a:3f:0c:
                    ea:ff:ac:89:b5:f0:9f:9c:53:7f:9b:05:ba:63:0e:
                    0f:fd:60:27:f8:bc:12:5d:16:5b:9c:0f:f9:ac:cd:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BB:D6:40:A8:AE:CF:D7:B8:94:72:3D:0A:1C:FA:AB:E7:D1:6F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/c9daf6f2-73c2-3487-bf63-df6125d549f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl

            X509v3 Authority Key Identifier:
                keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:9b:96:e6:ef:be:35:94:1b:95:1c:7e:09:90:9e:aa:02:29:
         b8:31:8f:1e:47:51:cd:41:8a:94:70:5d:23:b6:ae:1d:74:80:
         42:26:a2:1c:94:61:31:0c:d2:cd:fd:1a:81:a6:eb:e0:78:dc:
         ad:84:65:c0:d7:5b:8c:99:ee:ed:a6:bb:8d:92:44:d9:9e:da:
         e7:89:ea:31:59:15:01:24:d6:ff:2a:a4:30:ee:b7:63:cf:70:
         35:e2:dc:19:8b:05:cb:42:13:21:d0:bf:c5:89:5f:63:94:0e:
         bf:66:0f:a4:64:fd:84:f0:c4:ef:c3:92:f3:cc:7f:fe:6a:55:
         77:c1:34:36:21:ec:9e:df:a2:09:40:e1:0f:e3:b3:01:83:b7:
         67:99:30:ac:67:3c:8b:05:f6:9f:72:99:42:04:ff:de:10:cf:
         29:f1:df:8f:40:94:4e:0d:98:0a:9e:79:56:86:29:75:dd:30:
         56:aa:e5:2f:6c:55:f3:49:8c:65:6b:3b:00:c1:8f:d6:f6:84:
         dd:3d:1c:8d:c5:da:0e:dc:d2:7d:11:ac:29:96:8f:09:4e:54:
         23:14:ea:6b:34:86:48:f8:fa:0f:63:cf:62:74:61:79:f5:be:
         80:60:9c:0e:32:5e:f3:27:23:63:f3:ed:ea:46:98:5b:89:ec:
         1a:b7:b1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:44:57 2024 by rpki-client on console-fra.rpki-client.org