Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d744612b-8f67-3f03-acbe-91a2a9cf8102.roa
File:                     d744612b-8f67-3f03-acbe-91a2a9cf8102.roa (raw, json)
Hash identifier:          bHJDucYsNIJE0M23lFEVX2Goxbf4QW1lEeBBUWIHjdw=
Subject key identifier:   33:38:08:98:98:99:48:EA:E6:90:D5:63:9E:24:CB:69:95:BD:53:89
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F43285845E45E7C06920A4B052962B500
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d744612b-8f67-3f03-acbe-91a2a9cf8102.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     396982
IP address blocks:        162.244.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:7c:06:92:0a:4b:05:29:62:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=f8b47fda-96d7-4151-bcb5-36889c7049a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:7a:52:fe:9b:85:bb:c3:17:65:ee:15:20:
                    99:55:86:0e:69:b0:6e:d9:4d:10:9d:04:96:af:b0:
                    00:e2:c0:13:05:1f:7e:0e:09:33:75:52:74:1d:da:
                    84:aa:61:67:d5:29:67:c8:b7:a5:e4:56:59:9e:3b:
                    a3:cb:67:6c:29:e3:31:0f:9e:e6:d8:66:91:2e:7c:
                    62:ee:22:29:76:e9:2f:98:9b:73:a0:1f:d9:77:cc:
                    e8:1b:fc:26:94:50:56:cb:6d:a2:79:ea:93:dc:9e:
                    e2:17:cb:a3:4f:0d:89:0b:02:75:90:a3:46:d3:02:
                    a4:1b:75:8b:de:2c:ec:74:a3:7f:d0:f8:0a:9d:6f:
                    c1:fb:25:26:b0:9c:f7:aa:5c:3d:dd:39:6d:a5:fe:
                    53:8f:52:01:c9:d3:ed:62:62:03:39:ad:c7:4e:28:
                    03:b5:b1:89:1f:fe:a0:bd:05:e3:80:7b:66:b9:45:
                    00:aa:e4:9e:11:11:4f:65:c1:bd:57:ac:7f:65:ca:
                    8e:e6:6b:bf:07:2f:3a:7d:7a:56:80:72:73:62:26:
                    0d:84:fd:29:fd:e6:29:7e:0d:02:13:bb:2e:05:2d:
                    85:2f:dc:93:4a:50:2b:35:07:52:4d:eb:6b:4b:dd:
                    45:e8:ea:79:dc:1f:bf:ae:f9:0a:ae:2e:5c:fd:a6:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:38:08:98:98:99:48:EA:E6:90:D5:63:9E:24:CB:69:95:BD:53:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d744612b-8f67-3f03-acbe-91a2a9cf8102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:2b:f2:ab:64:85:74:70:7f:fc:01:a5:f7:c2:52:35:3f:d4:
         e6:1c:93:33:6e:00:6a:3b:6c:af:1c:01:bc:d4:95:c1:b0:79:
         27:30:3f:bd:d5:3f:70:0f:dd:ef:78:6f:55:f3:4a:9a:56:5f:
         21:51:9c:c9:0d:bd:bf:56:ad:3e:2e:53:99:7f:73:8d:cc:1d:
         a7:dd:55:ab:14:b5:6f:0a:d5:7d:cd:aa:5e:72:7f:13:1e:b0:
         76:eb:6b:99:9a:ce:f4:bc:63:4e:8f:08:ff:01:7c:a0:2e:73:
         0e:1b:b5:59:9c:70:94:9f:f9:2d:4d:4a:fd:19:5c:93:f5:2c:
         b1:c3:57:ab:f8:d2:39:04:14:bc:d3:55:cf:34:8e:ca:9e:33:
         51:70:b4:c2:a6:e9:67:f4:e6:10:de:72:7c:f0:20:9f:a1:84:
         cd:63:e7:27:37:57:a1:42:fd:35:d1:07:cc:21:9a:52:08:7e:
         4b:d5:7f:37:ef:83:21:02:f0:80:09:0c:12:83:00:7c:b9:5e:
         22:75:ff:b6:02:4a:31:29:33:d7:1c:f6:32:a5:59:94:2f:e6:
         25:21:79:16:2f:a0:fc:33:52:c0:a7:05:8e:e2:67:75:d6:86:
         cb:82:9f:6d:b5:84:d7:86:ac:49:0f:bd:d5:b7:87:b1:09:ec:
         f9:82:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:48 2024 by rpki-client on console-ams.rpki-client.org