Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa
File:                     5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa (raw, json)
Hash identifier:          4TQBUQpquWge8s+dGNir5i6T+abU+YIWpFPZKM5NULo=
Subject key identifier:   C8:46:C3:E2:4E:11:07:53:73:2E:91:35:DE:3C:DD:C9:DF:BE:EA:BF
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285847EBBF7A5E8CFADD8FA545FC80
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     16433
IP address blocks:        162.251.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7a:5e:8c:fa:dd:8f:a5:45:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=72929b1d-849c-40ae-9423-407d168229f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:20:e1:53:a5:1c:cd:d9:e8:e5:82:ef:df:
                    0a:19:0f:1a:c9:32:1c:f5:3b:02:e8:e1:59:6e:a7:
                    61:34:4c:0c:80:b3:41:19:b2:fa:8f:79:e9:66:11:
                    be:98:39:36:59:5e:ea:5a:57:b3:a2:42:db:b4:89:
                    d2:ab:1c:88:df:bb:eb:b6:57:57:40:13:85:ae:df:
                    7e:22:0c:74:42:bb:68:fb:d8:55:0a:70:84:1b:b2:
                    36:87:7f:16:d7:8f:c7:df:c8:bc:43:cd:0d:12:60:
                    52:94:2e:24:33:21:e5:a4:6e:b5:9d:aa:1f:8a:e2:
                    b8:0f:c4:df:2c:db:67:d5:c1:45:52:3c:40:bf:d3:
                    71:4c:0f:8d:66:b0:48:ea:c3:72:ce:0a:bb:de:d1:
                    e9:8f:6d:3a:30:12:38:5a:85:d1:b7:b9:5c:bd:6c:
                    cc:fc:28:3d:9d:22:13:3f:a6:e8:c1:c2:26:46:90:
                    43:0c:ec:fc:39:70:0e:b1:50:ed:80:38:c0:a2:37:
                    78:b1:9c:43:22:39:b3:97:d4:78:23:ce:f7:6c:c7:
                    18:f8:93:11:2b:93:f7:41:9e:82:53:2d:a2:01:3d:
                    02:5a:0c:8c:26:1f:d3:ae:b6:6f:d9:43:99:ed:fc:
                    b7:7a:56:65:9c:96:47:00:9d:03:32:f3:24:ef:0c:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:46:C3:E2:4E:11:07:53:73:2E:91:35:DE:3C:DD:C9:DF:BE:EA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:db:e8:2c:9b:53:c2:bc:a4:57:ae:be:d3:0f:98:eb:52:28:
         14:3c:cc:34:96:33:5d:35:d5:11:df:75:8d:c2:7b:b6:76:fc:
         a2:f0:14:14:31:b8:af:48:39:cd:ec:bf:db:8a:2d:b8:33:09:
         fe:ab:5e:52:db:c7:56:57:f8:6c:ce:84:98:f6:ec:31:e9:17:
         3f:f7:7d:52:00:c2:ff:55:dc:54:49:b4:a8:f7:18:11:d6:ef:
         6e:33:35:83:ff:d5:29:7e:43:aa:9b:2f:8c:f7:4c:9e:d3:71:
         94:49:71:23:72:8a:a3:33:9f:62:7f:cd:78:a4:44:60:46:39:
         fd:c3:60:80:f2:01:36:e5:d9:41:01:87:83:d0:ae:fa:8c:ad:
         2a:02:14:0e:21:1b:bf:6b:b5:cd:5d:92:04:8b:78:80:d9:70:
         9a:62:f3:e4:74:76:d0:22:1a:8e:ae:78:b8:cd:71:fc:03:b1:
         9c:1e:30:91:f0:9f:e8:18:ad:92:98:ed:ac:a3:9f:42:5d:81:
         e1:8b:ba:45:61:1d:a3:bb:bf:25:2c:2b:8e:99:b3:ed:69:13:
         08:fd:da:d8:97:35:5b:29:4d:58:92:5b:a8:e6:e3:0e:77:58:
         4e:c7:f5:3a:2d:85:54:4a:4b:f0:05:40:c2:09:c1:43:33:2f:
         2c:af:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:22:48 2024 by rpki-client on console-ams.rpki-client.org