Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/a242d7cc-2230-359a-84d5-260d1b1ae300.roa
File:                     a242d7cc-2230-359a-84d5-260d1b1ae300.roa (raw, json)
Hash identifier:          kuXk+AMzwzRokjZXc6FSqNiGD0Gz+6Ha+5yZ0QVpDDo=
Subject key identifier:   F7:E8:10:5C:9F:4D:11:CE:41:19:7A:E4:DC:A2:D3:39:B5:36:BD:ED
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F432858472835FB02900547EB2A0B8D80
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/a242d7cc-2230-359a-84d5-260d1b1ae300.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     46632
IP address blocks:        162.254.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:fb:02:90:05:47:eb:2a:0b:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=bd6aa375-cc49-4abd-9c29-365084fb9356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:f6:84:73:0c:c8:20:99:ba:7d:11:7c:82:
                    a5:c1:86:bb:f8:10:57:47:b3:73:1d:fe:1f:87:30:
                    d5:e9:6f:b8:08:de:f7:45:00:41:de:7c:a5:7d:da:
                    b1:ac:48:c2:d0:ef:0c:ea:9f:57:1f:c8:ff:1c:e5:
                    5e:e6:45:15:b5:fd:24:03:d3:c8:69:a1:af:79:89:
                    26:eb:d4:c0:fc:d2:94:90:26:81:e1:58:3b:a5:74:
                    9b:96:34:5a:45:22:45:12:e0:a0:cb:30:ed:bf:9d:
                    26:26:15:d3:92:f7:67:ba:b3:58:f2:8e:5b:0c:86:
                    d9:b0:b9:3e:94:92:81:34:42:89:af:12:92:93:a9:
                    62:a7:c4:30:c2:fe:0a:22:10:7f:44:ea:d6:9d:84:
                    6b:cf:0a:23:0b:49:cf:d5:a8:07:fb:5e:a3:f3:f3:
                    8e:38:e8:25:7a:a7:dd:f1:a6:cd:49:3d:f6:0a:aa:
                    48:a5:99:85:2e:66:97:a6:70:2b:c9:3e:1d:bd:fe:
                    f3:db:c5:9a:73:95:e3:6e:11:29:d9:5e:dc:86:c7:
                    d9:a1:0f:f6:12:44:d2:08:28:67:37:9d:7d:7f:ee:
                    24:ca:fd:fc:c5:24:93:84:00:b1:10:08:92:28:d3:
                    d9:d1:39:67:22:c3:8e:15:82:6c:d4:21:df:e0:2a:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E8:10:5C:9F:4D:11:CE:41:19:7A:E4:DC:A2:D3:39:B5:36:BD:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/a242d7cc-2230-359a-84d5-260d1b1ae300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:46:7b:ed:f1:9e:d6:9f:5a:2d:8e:93:d4:e9:d0:5d:51:
         a7:b6:c3:fb:87:2c:da:69:df:4d:5a:1f:d7:66:b1:ae:30:d7:
         f1:cf:92:69:68:7c:a6:91:b5:2b:61:b7:91:47:b4:17:1a:d5:
         86:1b:2f:58:0a:60:34:db:71:a5:cf:df:62:5b:e4:a3:45:b3:
         c3:c6:fc:2b:99:cb:17:8f:c6:17:c3:1f:2c:52:8a:b7:0a:69:
         11:ee:a5:58:21:0d:31:83:cb:21:34:93:c9:1b:d9:2c:08:1e:
         70:a0:b6:30:20:9d:dd:0f:70:d6:a1:eb:63:ec:93:1d:d8:c2:
         c9:29:8a:cd:67:2d:ef:d3:fd:48:76:5d:36:1e:d1:5f:d7:15:
         4c:42:d2:5e:cc:d7:cb:b7:b4:bd:f4:f7:80:7c:28:ed:e8:85:
         45:2e:c6:66:a8:e1:3e:00:23:17:9e:fc:04:3a:a7:2a:a8:62:
         f4:90:d9:ee:d7:f5:6e:21:9a:28:66:fd:0b:14:97:e4:a9:ab:
         43:f3:6b:6e:df:5e:4d:2b:15:69:1c:ac:d8:c6:34:f5:84:aa:
         e7:e5:66:50:57:cd:10:85:2e:56:bc:c1:fc:cb:9d:01:3f:2b:
         ec:cb:47:49:22:3e:60:f6:4b:40:f1:a9:d3:8d:12:8b:ec:a9:
         9f:10:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:17 2024 by rpki-client on console-ams.rpki-client.org