Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa
File:                     09a930bb-55eb-3fda-8b57-c185efb5138d.roa (raw, json)
Hash identifier:          kWmW3wR4MqkD8EC1++TmdawQeK0obvwVfypg+VAIzNA=
Subject key identifier:   DE:1E:54:74:24:4E:35:67:42:4E:93:1C:7F:9B:CA:E7:9C:9D:A9:F8
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F43285848035C3881937C310FCF2C0FC0
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa
Signing time:             Wed 27 Nov 2024 01:00:08 +0000
ROA not before:           Wed 27 Nov 2024 01:00:08 +0000
ROA not after:            Tue 25 Feb 2025 01:00:08 +0000
asID:                     22418
IP address blocks:        192.157.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:5c:38:81:93:7c:31:0f:cf:2c:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Nov 27 01:00:08 2024 GMT
            Not After : Feb 25 01:00:08 2025 GMT
        Subject: CN=84d142a5-90d6-4e1e-842d-f917ede024a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:a1:b8:98:7a:4d:59:1d:be:74:0f:b9:d6:
                    b4:a8:27:3c:b8:44:e6:e0:9d:be:6a:93:76:0a:80:
                    ab:8c:f6:05:d2:98:71:97:f8:de:cb:d7:34:8d:91:
                    62:52:db:19:4f:43:b5:7c:77:e2:2e:6c:5a:e1:0e:
                    3c:88:d5:ba:31:a1:3d:75:5b:b1:6d:f1:f5:31:d9:
                    91:6c:24:13:6b:21:37:40:a8:be:97:fa:dd:5d:f6:
                    17:3d:c2:be:5b:31:42:27:e6:37:a5:69:df:1e:22:
                    f2:d7:2c:30:00:e2:f9:84:2c:12:3b:f6:fe:92:01:
                    86:9e:88:02:fe:99:1e:ed:6f:68:3a:ac:26:6b:da:
                    8f:a0:2f:92:0d:d5:e2:77:c3:00:9b:b8:84:f1:78:
                    c5:81:15:e0:39:cc:c1:06:bf:f1:02:a7:ca:47:88:
                    2b:bd:b6:cf:27:a3:00:5b:c7:d1:ea:eb:cc:09:52:
                    46:fe:94:39:ff:c2:e3:98:8a:56:32:87:5c:fb:d0:
                    b4:27:b9:ad:ed:d9:5a:88:e5:7e:21:6e:53:11:56:
                    2c:d2:28:92:a7:d7:46:bc:70:44:00:df:83:7c:ba:
                    80:45:d0:cb:f6:57:cf:95:cb:84:16:29:35:c7:b0:
                    7d:f7:4e:49:5b:2e:57:e5:de:80:b5:ab:e0:b1:d2:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:54:74:24:4E:35:67:42:4E:93:1C:7F:9B:CA:E7:9C:9D:A9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:6b:ff:be:30:17:c7:e1:d0:90:38:56:10:37:e6:57:22:d5:
         76:ea:76:cc:7c:bf:1c:64:76:40:73:2d:63:12:bf:88:02:99:
         a6:70:41:42:fc:25:17:c6:52:aa:7e:f5:79:d7:9f:68:5b:d6:
         93:06:e2:99:e8:56:fc:4e:2c:02:a5:14:d9:09:59:0f:08:71:
         6e:8e:9c:be:6b:69:cb:65:e0:c2:92:51:49:4b:34:fd:c3:53:
         64:19:17:e8:64:4b:14:87:93:ba:ba:c9:4e:0f:97:30:37:10:
         60:e5:0d:5d:98:89:c1:8c:d2:45:62:87:17:31:ff:3a:12:d2:
         df:a9:e8:0e:e3:3d:d7:e4:fa:41:a0:3f:1e:7f:60:e4:0a:6c:
         aa:50:b5:4b:df:1a:b8:a9:9c:69:34:3b:49:91:45:19:0f:07:
         de:5b:78:e6:a5:cc:a6:96:2b:b3:24:5d:e0:37:96:83:4e:53:
         ab:18:14:8d:f3:99:bc:c8:ef:91:e7:18:c6:14:4a:71:5d:43:
         65:ac:c4:56:86:32:00:49:ed:1b:81:76:40:dc:dc:27:73:29:
         a1:57:ef:4f:51:76:b6:93:01:99:9f:57:c4:7b:57:1c:e0:86:
         37:9d:01:f0:8f:f8:e8:91:7e:ef:84:3e:d6:91:c3:5f:98:eb:
         7e:c9:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org