Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/bef02c78-0231-32b7-b086-419b62258641.roa
File:                     bef02c78-0231-32b7-b086-419b62258641.roa (raw, json)
Hash identifier:          v6zQbYX+Pgp+rFnhpDIpijc/ui9qjvQ7+qIijmFBdgQ=
Subject key identifier:   41:ED:A8:4A:03:7C:3C:51:08:C3:A8:21:56:F4:A8:58:76:49:23:D2
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F43285845E45E804F413F68E4C9ED9400
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/bef02c78-0231-32b7-b086-419b62258641.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     396982
IP address blocks:        162.244.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:80:4f:41:3f:68:e4:c9:ed:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=123106ee-9554-41d8-ad98-b19f1b05acbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:40:e9:da:0d:ed:28:b6:d7:51:04:ca:06:
                    3f:57:ae:bd:1b:ac:9c:c1:26:52:d6:fd:98:b2:fe:
                    2b:d6:ed:2c:85:f7:72:16:a5:6f:4f:a0:f5:42:17:
                    ba:b9:c5:60:75:66:50:6e:5f:1f:82:03:45:75:b5:
                    73:fd:a1:7e:bf:2e:67:88:b6:21:94:18:fc:66:28:
                    a1:f1:b3:0b:d0:5c:a6:ea:2a:0e:c2:ac:19:79:1b:
                    43:ac:64:f5:40:f6:34:6f:e4:c0:30:15:78:de:61:
                    fb:26:e9:c0:c5:dd:d8:c4:5a:f4:f6:41:34:8e:5a:
                    c4:f5:11:52:ae:9a:86:fa:7d:42:e3:ae:25:9e:50:
                    29:10:dd:d2:80:0f:91:f9:92:e4:00:75:b1:0c:e5:
                    41:37:74:27:f0:73:9b:7b:2f:14:57:9d:7e:31:db:
                    e9:ea:71:63:1a:54:5d:c6:68:8c:b9:d5:da:40:ba:
                    9f:8f:1b:6b:60:c2:88:ec:64:36:1c:aa:16:31:8c:
                    0c:3f:97:f2:a9:44:0a:29:9c:9e:78:b1:f9:0f:3c:
                    36:05:93:f5:30:94:00:46:d3:2d:ba:fc:27:ec:e7:
                    9e:27:29:a5:f1:ff:f6:53:c9:b4:34:42:cf:20:f8:
                    1b:84:f3:11:4f:3d:d2:10:42:cc:79:cd:19:68:3f:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:ED:A8:4A:03:7C:3C:51:08:C3:A8:21:56:F4:A8:58:76:49:23:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/bef02c78-0231-32b7-b086-419b62258641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:a5:8a:60:d6:89:70:fd:35:f6:76:1e:e3:88:cd:73:ac:
         a6:c3:4b:c2:4c:67:e0:0c:a9:67:4a:02:c3:15:a5:0a:a3:cd:
         a6:54:64:51:41:e8:fd:31:7e:9d:5f:36:75:ec:78:49:56:b3:
         ee:5c:20:6c:71:26:d7:38:99:1d:87:73:29:2a:ec:af:8c:da:
         b9:8d:1f:8e:f8:a8:bb:51:49:84:d4:96:ff:59:96:85:23:4e:
         33:53:fc:20:eb:83:3d:87:6b:a7:00:59:3d:08:eb:ff:74:38:
         3b:5f:35:47:d2:4d:84:db:e9:8d:af:0a:7b:d2:46:4c:4a:5e:
         01:1a:bd:17:c5:a4:18:a8:8d:af:7a:d2:78:78:f1:a4:7c:ab:
         4c:09:b0:e4:5b:ed:1c:86:9a:d5:cf:c3:40:29:1b:23:49:e7:
         ce:2e:84:eb:bf:0a:ec:b2:f2:4b:76:15:f1:09:38:26:ab:93:
         0e:ec:35:23:39:a5:dc:ae:a8:53:8b:ea:bf:b1:2d:9f:e6:63:
         f2:38:21:26:ed:87:5b:8c:4a:81:4d:6a:0b:33:c2:b8:f5:8a:
         40:15:06:0c:ca:dd:74:cb:d2:20:81:8d:f6:9b:ec:45:46:f9:
         02:70:e4:7e:0c:0c:b1:7b:8c:38:8f:dc:bc:74:2b:20:a5:f8:
         bc:9c:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 07:21:43 2024 by rpki-client on console-ams.rpki-client.org