Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/d5314af6-ab6b-35fd-b0ba-8be46e805dd3.roa
File:                     d5314af6-ab6b-35fd-b0ba-8be46e805dd3.roa (raw, json)
Hash identifier:          engxMqiBSm3r0T2tRPtV2sxuWnrM2LBqI9e5ebGCSjs=
Subject key identifier:   A4:82:4D:99:8A:53:6E:C5:DE:16:A7:45:79:BB:65:EC:A4:1D:CD:88
Certificate issuer:       /CN=443c13af-c88b-4f08-a006-7d4f68f4fbaf
Certificate serial:       010D0C9F43285847ED24B98421D9109259189600
Authority key identifier: 16:91:90:8A:7C:C6:2B:D2:E6:59:62:0F:CD:64:2A:90:A7:21:90:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/d5314af6-ab6b-35fd-b0ba-8be46e805dd3.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     29802
IP address blocks:        155.254.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:b9:84:21:d9:10:92:59:18:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443c13af-c88b-4f08-a006-7d4f68f4fbaf
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=57027cb1-7015-4114-961a-4e370374a542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:26:4e:e5:a7:09:67:d2:26:86:4d:bb:4f:
                    3d:06:f1:2e:f1:c4:4a:cd:38:89:a8:b4:97:24:03:
                    24:08:ee:ea:61:16:54:ac:c9:3d:eb:05:3a:c8:b0:
                    06:18:e6:06:10:9a:46:1b:26:ee:eb:c7:c4:2e:a7:
                    fa:8d:ce:46:3c:5b:fb:a9:a4:29:28:90:df:26:0c:
                    6d:e3:80:e1:f8:f5:8f:1b:c6:22:c0:bd:01:43:3b:
                    be:45:38:d9:57:16:d5:d7:1f:7d:62:e7:36:8a:fa:
                    f7:59:50:33:6a:61:fc:f1:6c:0f:39:d5:b9:f2:0e:
                    73:92:3b:0a:24:c0:e8:22:cd:43:8a:31:63:77:34:
                    20:06:f2:c8:24:67:b6:63:d4:7c:95:9f:1b:3f:a0:
                    e3:d2:4b:94:2e:35:2c:13:6b:93:49:07:96:df:be:
                    8e:65:4b:5a:31:1c:b8:1e:19:0f:68:06:0b:8f:73:
                    3a:fe:71:39:e2:f6:f1:5e:c6:ac:a3:27:36:c3:8a:
                    3d:c7:db:49:b2:36:d8:30:bd:be:50:3f:d4:0c:34:
                    32:89:80:29:33:da:2e:de:8e:9d:6f:ab:ae:84:47:
                    46:fa:05:e0:70:28:5a:75:6c:62:a9:3f:9b:91:7a:
                    37:4d:f9:a7:35:c6:c3:ac:41:d5:02:88:d0:35:7a:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:82:4D:99:8A:53:6E:C5:DE:16:A7:45:79:BB:65:EC:A4:1D:CD:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/d5314af6-ab6b-35fd-b0ba-8be46e805dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.crl

            X509v3 Authority Key Identifier:
                keyid:16:91:90:8A:7C:C6:2B:D2:E6:59:62:0F:CD:64:2A:90:A7:21:90:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:34:a7:07:af:a9:2f:dd:e4:04:a2:7b:e1:d8:d1:81:ab:8f:
         4b:de:06:cb:f7:6a:17:44:7c:d7:6c:3f:00:15:e2:1f:93:c2:
         bc:49:d6:55:fd:cb:ae:73:f3:7e:dd:41:d2:09:04:99:20:3c:
         2f:24:bf:a8:c3:57:75:01:13:bf:77:6c:81:7a:70:e2:2d:18:
         ee:62:e8:83:6d:87:49:c9:9c:18:65:f5:0a:f8:e2:46:64:d8:
         42:bd:7e:3d:67:f0:3d:50:d8:ea:90:fc:39:2a:7d:a5:68:62:
         43:f1:1a:b7:7b:28:5c:69:84:12:8a:a4:07:25:35:f4:9e:7d:
         4a:9a:f9:8e:54:5b:f5:9a:91:c7:ba:2d:02:33:fc:79:2c:66:
         c5:74:ac:53:3f:9f:a5:03:3f:bf:15:30:78:a9:f6:cf:b0:17:
         57:e1:ab:d2:2e:b8:73:04:7d:62:b2:4f:47:56:5a:36:6d:9a:
         eb:e7:b5:63:b1:9e:b4:64:ca:fc:31:8c:cc:ae:c5:fe:dc:b9:
         fb:5f:c2:87:c1:1c:40:06:15:04:11:a5:4d:2e:dc:dd:e4:8f:
         49:1d:85:b7:70:c9:71:24:c0:68:ee:e5:59:65:c8:40:a3:d5:
         82:ed:98:c2:51:70:bb:99:83:8d:7e:bb:87:09:ea:36:5d:80:
         fd:f5:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:53 2024 by rpki-client on console-fra.rpki-client.org