Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa
File:                     aa088a9e-e7b3-355e-a7d9-845158b85a72.roa (raw, json)
Hash identifier:          sTeseEXLS/2ZiR/28tKsdFuiN1Yj42nVVd0hM7k2rnY=
Subject key identifier:   BC:80:37:AB:9A:93:FF:50:D2:24:68:1E:B1:37:36:CE:9C:E0:0A:7E
Certificate issuer:       /CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c
Certificate serial:       010D0C9F43285845734DB40D6A3B7AAAFE492880
Authority key identifier: D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        162.221.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b4:0d:6a:3b:7a:aa:fe:49:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=6f790d40-4e4d-4d42-b904-2a93df000444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:24:82:fd:17:5c:85:cc:7a:43:be:c3:85:3d:
                    13:07:bc:58:75:40:c7:c6:ac:63:1a:92:5e:09:bd:
                    3d:01:ab:25:ab:78:5b:79:58:4c:a5:c6:bf:21:66:
                    27:26:9e:0a:41:f4:74:64:60:ae:49:94:c9:b3:b3:
                    02:a0:8e:a9:fd:0a:c0:16:38:15:8c:75:3d:88:a5:
                    c5:b9:fa:16:60:a4:a4:96:b9:99:3d:24:c2:24:3a:
                    f9:50:83:d0:05:1a:20:8b:ff:d7:af:b8:c4:a8:c4:
                    ec:f2:7d:fc:fc:51:9b:c2:34:9f:28:07:2f:e6:7c:
                    02:f6:d9:86:fb:e6:e4:b2:31:b0:2b:2b:63:f2:da:
                    98:08:d3:5e:64:9c:81:0f:a8:af:26:b3:8b:32:ff:
                    aa:79:26:6b:f0:9a:db:64:a5:36:ee:71:fc:ca:e9:
                    dc:65:24:07:5e:41:a3:85:6d:c3:3e:a0:d4:a8:9e:
                    c8:12:d3:99:a6:36:a4:19:c0:8e:6c:af:ff:29:1f:
                    81:c3:03:bb:d5:ae:67:86:13:da:fe:2e:d6:b1:b0:
                    d4:29:c8:9f:2b:e5:51:73:ed:9c:7c:52:6f:41:34:
                    e0:0a:e7:7f:90:1e:a3:de:9a:13:4d:b0:09:fe:30:
                    5c:36:a4:17:ea:b7:c8:73:bf:bb:26:50:b8:ce:1a:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:80:37:AB:9A:93:FF:50:D2:24:68:1E:B1:37:36:CE:9C:E0:0A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.crl

            X509v3 Authority Key Identifier:
                keyid:D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:f8:ac:b2:b2:0d:7d:a6:2b:00:9f:1a:0a:5f:a0:be:2c:e5:
         e4:0e:fe:9b:1f:65:26:5f:70:a8:b6:2e:36:1a:cb:63:83:d5:
         30:28:94:ac:b1:b9:6e:4a:dc:2d:33:80:02:02:76:ba:58:0b:
         09:ac:d1:ab:af:e7:be:c0:c8:e1:00:bb:2a:26:49:fa:86:33:
         5c:7d:ba:1b:09:12:77:e2:79:2d:33:7a:40:7f:06:67:e8:0b:
         71:6c:82:06:34:59:d1:e7:b2:fa:ca:e9:45:f1:36:c5:2d:c4:
         01:8d:fc:c2:45:66:95:a6:98:23:9b:4c:59:60:e1:6a:ac:ca:
         67:29:37:cc:fe:69:21:94:4f:b6:0a:2e:86:dd:2b:55:4d:99:
         9c:0b:ce:70:50:ef:cb:3e:40:0e:22:e7:f9:ef:37:f5:0f:72:
         9d:09:c9:04:42:53:51:ce:b9:42:5a:c4:d9:ad:9f:42:9d:e6:
         c6:55:25:b6:14:b9:83:0f:c7:96:41:a7:aa:45:10:7b:01:5e:
         cf:ef:94:ae:3e:f6:a6:aa:fd:40:df:3e:53:c0:f4:9c:c6:55:
         5b:01:99:51:a1:06:05:49:88:60:49:61:7a:f6:7b:90:2e:49:
         48:03:b8:cb:8f:eb:fb:2a:28:47:a9:1b:ef:33:17:a8:c4:bf:
         4c:1d:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:29 2024 by rpki-client on console-fra.rpki-client.org