Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa
File:                     481e6446-0bc6-31ec-845c-a168a1f29c35.roa (raw, json)
Hash identifier:          kCK7u5u7qWBZlTRxSwHoFdaaShb1y5IR1/vxuO5F3po=
Subject key identifier:   BA:CD:DB:AB:F5:9E:F0:C8:1A:55:FE:0A:64:D8:7A:17:74:69:AA:72
Certificate issuer:       /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Certificate serial:       010D0C9F43285847A1A67F0FF56DB9A4EA57B480
Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa
Signing time:             Wed 23 Oct 2024 01:00:32 +0000
ROA not before:           Wed 23 Oct 2024 01:00:32 +0000
ROA not after:            Tue 21 Jan 2025 02:00:32 +0000
asID:                     25769
IP address blocks:        216.122.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:a6:7f:0f:f5:6d:b9:a4:ea:57:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
        Validity
            Not Before: Oct 23 01:00:32 2024 GMT
            Not After : Jan 21 02:00:32 2025 GMT
        Subject: CN=bff92aea-d14a-412e-b7ee-ba1e46197b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:f1:b2:fa:fe:e9:d4:d4:ab:46:fb:a8:42:
                    d4:25:2b:cc:fa:9e:d5:92:3f:61:6e:05:9a:07:6b:
                    70:8a:b6:db:0a:a4:84:24:fe:6a:92:f7:55:c7:6a:
                    bb:96:0e:af:73:06:0d:98:2a:dd:fc:fd:f5:94:96:
                    a2:fe:46:9f:52:b1:c2:13:77:7b:ee:be:d8:3b:e5:
                    63:59:1c:9b:a4:1b:91:d8:5a:92:b1:86:d3:e4:2f:
                    62:8e:71:5d:04:3b:28:ca:24:c3:d4:14:30:43:c8:
                    e6:3d:15:54:24:e4:f8:29:a3:bb:7d:a8:2a:c9:8c:
                    0c:c6:51:37:d0:28:5a:e5:91:5c:56:09:7c:c0:4b:
                    ee:7c:72:35:3d:07:ae:e5:b0:90:54:a7:d3:d9:d5:
                    39:b8:1e:f6:4f:19:ce:bc:e8:ff:a1:8c:73:16:33:
                    df:37:c1:61:28:76:b1:23:63:80:fa:fe:58:73:9f:
                    10:98:cb:1a:d7:b6:9f:a6:02:d8:72:dc:e2:9b:d3:
                    b9:9e:8b:2f:d2:4e:e4:fc:ba:43:92:0e:30:6f:3f:
                    b1:f1:68:d0:1c:88:b9:fd:96:ae:64:db:10:89:0b:
                    51:a7:91:63:b2:16:fe:89:84:9f:e2:14:3d:f3:67:
                    7e:53:20:35:b3:1b:e3:a9:e5:9a:33:46:18:97:2c:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:DB:AB:F5:9E:F0:C8:1A:55:FE:0A:64:D8:7A:17:74:69:AA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl

            X509v3 Authority Key Identifier:
                keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:fd:56:a4:e7:80:4f:ba:c9:77:85:f8:a2:2d:d0:98:0f:
         8a:d5:ed:31:00:53:af:a1:06:fb:a4:ab:d2:e6:1d:6f:ea:20:
         0c:ab:fa:5a:cc:81:0d:d9:0e:5b:ef:e3:bb:21:f5:ab:32:7c:
         62:2d:5f:d7:ac:f0:da:46:d4:de:96:0d:94:dc:0a:cb:0e:7e:
         42:03:37:f1:f7:51:c9:c6:b5:99:f7:8d:56:10:dd:28:8a:66:
         00:3c:46:00:b0:ed:e7:73:c1:c8:db:23:cc:5d:2b:92:ec:fb:
         c8:2b:75:ca:71:14:fd:96:41:90:0b:64:c8:31:58:df:9f:de:
         e7:45:a9:48:13:7b:68:57:e9:be:bd:c1:9e:d5:03:ee:36:69:
         c6:75:8e:d8:84:89:94:a6:bb:11:3c:20:01:0c:01:b8:70:01:
         bb:bf:16:3a:35:f0:26:2b:b7:20:76:f9:df:aa:c7:36:14:13:
         1a:c5:88:73:83:63:97:6a:c8:cd:ce:ed:f7:7a:bc:ed:d1:0a:
         fb:09:d5:78:c9:55:8c:15:4d:60:28:23:b0:1c:b8:9d:40:e2:
         4c:51:9f:aa:6e:ad:c1:69:39:88:22:17:e0:c0:c1:81:15:9b:
         50:c5:1e:a5:e5:aa:c4:65:dc:b2:9c:e9:a2:39:94:ae:74:15:
         58:29:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org