Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c652111-b7fc-3727-95af-88b64f888095.roa
File:                     0c652111-b7fc-3727-95af-88b64f888095.roa (raw, json)
Hash identifier:          nvQzWnA+QM7UrqlDXi8yok8Tf5wwpzBT/UBiYVm/chE=
Subject key identifier:   48:C8:A8:F8:2F:90:2D:73:02:33:D0:9A:87:42:9C:73:C4:BF:A2:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847521619CA3699A8727DCE5A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c652111-b7fc-3727-95af-88b64f888095.roa
Signing time:             Tue 24 Sep 2024 13:00:40 +0000
ROA not before:           Tue 24 Sep 2024 13:00:40 +0000
ROA not after:            Mon 23 Dec 2024 14:00:40 +0000
asID:                     16625
IP address blocks:        173.222.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:16:19:ca:36:99:a8:72:7d:ce:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:40 2024 GMT
            Not After : Dec 23 14:00:40 2024 GMT
        Subject: CN=6540c6dd-fc2a-4ccb-8b54-bcb2e03d151b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:ba:50:cb:46:0b:39:77:dd:0f:d1:e3:a1:
                    9e:6b:2a:c1:4c:41:2c:fc:6a:5b:9c:a2:13:1e:ba:
                    19:96:c6:c6:f1:36:aa:1c:e6:07:59:0d:90:bb:ac:
                    ce:96:6d:b4:2b:ee:3e:f4:62:64:2d:4c:d8:19:37:
                    80:a2:01:8c:fe:cb:61:96:fe:ca:40:43:93:bf:b5:
                    88:14:b4:9b:8e:6f:87:a3:01:7d:bf:8f:13:af:80:
                    43:2f:95:e8:eb:f1:fb:c0:f5:5d:95:56:d5:6c:a2:
                    d7:19:5b:af:41:22:64:03:62:96:c2:19:02:39:f2:
                    0a:5f:e2:6b:91:a6:4f:f7:93:fe:57:f4:b5:50:66:
                    eb:36:54:31:55:57:bf:16:22:81:ad:8a:cf:f6:1e:
                    12:ab:dd:dc:cf:55:4e:15:14:a2:89:84:a3:f9:15:
                    ee:99:dd:a9:2c:a0:f6:7c:e6:0d:ee:49:df:9d:9b:
                    cd:4d:6f:0f:15:18:49:fa:22:49:f6:39:50:e6:0e:
                    96:46:d0:61:96:e7:27:6a:39:ae:46:8b:f3:20:26:
                    47:b3:0a:c5:92:73:4f:ef:ba:76:06:cd:12:11:be:
                    67:a8:16:23:41:8a:3e:e4:b6:a5:2b:7d:ac:0f:22:
                    c9:95:c3:69:ba:9e:65:6b:f0:3c:5c:23:49:58:8d:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C8:A8:F8:2F:90:2D:73:02:33:D0:9A:87:42:9C:73:C4:BF:A2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c652111-b7fc-3727-95af-88b64f888095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e3:b3:68:45:88:73:92:64:8a:5d:dc:3e:66:5c:5e:03:ad:
         8e:93:21:a2:a2:fa:2e:f0:18:b4:bc:b4:26:96:e0:96:18:be:
         8a:67:a8:f2:3f:8a:b9:3e:0c:00:59:5b:a9:44:ea:e8:e6:53:
         61:50:d2:98:45:d1:76:67:b1:7e:c8:11:e0:e4:52:d2:c8:f2:
         67:35:bc:77:db:4f:a1:31:2d:0f:93:d1:b7:36:a5:9a:9b:e7:
         13:b6:5d:1e:74:a5:40:24:c8:e0:29:20:bd:e5:de:9c:ce:a5:
         1c:d4:50:08:73:0f:ef:1e:4f:ea:83:c5:f6:21:dd:c6:82:8b:
         a5:e2:30:5b:bc:f3:65:2b:ae:01:58:47:f7:8d:29:21:d4:02:
         0e:c3:74:e5:ff:e4:41:89:5f:57:ae:85:de:16:55:19:57:48:
         a0:da:5f:dd:07:6f:1f:b1:3a:7c:cb:b9:36:72:3d:b6:cc:4e:
         4d:89:d4:53:3b:82:47:47:90:4d:0f:63:66:09:d5:59:a7:4a:
         b7:be:3e:c3:b8:32:17:6a:b2:86:69:b3:09:2f:c4:1a:32:7b:
         8f:7b:07:bb:55:d2:7c:c0:0d:cb:e6:8d:bf:50:e2:1c:20:66:
         0b:6f:69:fa:0b:bd:50:52:f9:99:04:59:6b:b8:2d:ff:62:7e:
         e6:29:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:24 2024 by rpki-client on console-fra.rpki-client.org