Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
File:                     c38a686c-1237-3b63-8f94-0581beb86b44.roa (raw, json)
Hash identifier:          pOrhbkrJ+eEAFEIXzALcpDbM7QAq3t7MrXnT6Jx6Oug=
Subject key identifier:   4E:BE:F0:F2:40:17:F4:86:83:13:19:70:DA:F7:BE:80:13:8E:18:8D
Certificate issuer:       /CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
Certificate serial:       010D0C9F4328584561285380700FFF690AF59200
Authority key identifier: B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     13543
IP address blocks:        162.253.96.0/22 maxlen: 24
                          2620:f4:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:53:80:70:0f:ff:69:0a:f5:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=1a641389-cc19-497f-872e-60b4ae34a4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:6d:f1:21:21:a7:f1:d8:d3:df:c8:49:19:
                    99:83:52:fa:a8:11:99:7a:ea:99:13:41:80:6d:81:
                    80:4a:f0:d0:fa:ed:04:1d:b9:83:48:7b:fa:20:06:
                    eb:0c:e1:aa:9c:4c:80:a2:fb:70:aa:bd:bc:98:fb:
                    5f:ca:45:b8:1b:63:14:9c:52:32:b5:c5:98:87:03:
                    41:2d:b7:4d:19:68:c2:99:12:1a:29:27:2e:67:02:
                    10:20:5a:71:7b:34:a4:e7:37:60:9c:33:18:12:c9:
                    0c:a3:4c:b5:c9:4e:b6:9f:d7:86:ab:b6:2d:d0:99:
                    da:16:b0:85:82:34:dc:fc:ed:c2:54:7d:0f:0e:e4:
                    b8:4c:57:7a:31:b1:2c:22:ab:64:5c:68:de:d1:fd:
                    82:c5:05:b9:ff:03:41:c9:5a:fe:21:fb:75:96:9b:
                    05:1a:7b:88:3f:3d:b1:b1:97:bc:cf:fb:a4:9f:69:
                    30:d5:61:42:25:14:e8:cc:04:74:e7:87:ae:8d:48:
                    5d:99:72:96:80:d5:36:a4:34:1f:8b:03:ee:d6:dd:
                    30:32:1b:8d:cb:0f:4c:08:b7:d5:d4:c3:a5:3e:9c:
                    37:35:07:87:f2:ec:97:2c:3a:eb:6d:7b:fc:57:c9:
                    17:9a:0d:05:95:cd:cc:38:10:2f:45:83:64:67:54:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BE:F0:F2:40:17:F4:86:83:13:19:70:DA:F7:BE:80:13:8E:18:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl

            X509v3 Authority Key Identifier:
                keyid:B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.96.0/22
                IPv6:
                  2620:f4:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:f3:4d:0f:ce:a6:e5:9e:4d:d9:10:71:1d:62:aa:17:92:
         81:d8:a0:93:aa:08:08:bd:ca:10:96:59:d6:3e:d4:90:f0:82:
         39:97:77:e8:2e:f9:dc:19:21:0f:f2:5a:9f:2e:31:2b:66:55:
         82:d8:4a:a0:69:e4:83:3e:aa:d5:ef:7c:2c:5d:7e:7a:0d:98:
         51:9d:d6:f1:b2:ef:7e:3e:6a:94:5a:9e:9a:d0:b8:c8:a3:12:
         02:81:e9:05:91:2a:0e:9e:a1:ef:64:f0:0a:44:44:5f:cd:52:
         34:a8:92:ed:2b:d2:1a:c8:1b:54:ef:c4:c9:88:f1:54:d4:cf:
         ff:8e:2f:5f:09:97:b1:36:c9:93:7f:d3:fc:c1:89:30:90:e4:
         37:03:7d:85:04:22:d5:50:65:95:79:48:a2:93:3d:5d:06:b1:
         76:bc:78:85:a7:b0:a8:d3:65:b5:9b:ec:cb:d0:cb:4c:31:39:
         f6:c1:36:d1:35:62:28:e5:a7:2b:ee:f3:b0:e6:67:f0:25:a4:
         49:08:49:f8:3a:fb:8d:57:54:ab:14:ee:25:0c:e2:26:b4:a5:
         14:79:2d:bf:3b:85:6c:ea:e4:47:6f:0d:04:76:58:cd:17:65:
         9e:ff:1e:56:04:b9:c2:51:20:6d:90:da:f2:cd:6a:65:6d:46:
         dd:e9:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 07:21:36 2024 by rpki-client on console-ams.rpki-client.org