Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/22bd5b52-a295-3b0a-908c-aa07472087d5.roa
File:                     22bd5b52-a295-3b0a-908c-aa07472087d5.roa (raw, json)
Hash identifier:          idFkFOsTDIu1msYaZAZbfdO8vbw/rAdACzmKm/NuGbk=
Subject key identifier:   22:5A:BA:48:92:11:CC:A2:18:50:97:D3:09:84:89:AB:CB:40:1D:03
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F432858468C169A8D6CBBD9660106CC00
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/22bd5b52-a295-3b0a-908c-aa07472087d5.roa
Signing time:             Sun 14 Jul 2024 12:00:00 +0000
ROA not before:           Sun 14 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        162.210.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8c:16:9a:8d:6c:bb:d9:66:01:06:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 14 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=d14c4a6a-7b8d-405d-865e-4abe207992bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:c4:c0:39:6f:df:15:f1:d7:59:59:bf:5e:
                    eb:1b:81:78:5c:52:de:a9:fa:a2:91:26:e9:af:f8:
                    74:21:4e:5e:2d:2d:05:cb:f4:78:c9:86:90:3a:73:
                    62:9a:b1:39:1f:8e:55:b7:c5:aa:23:8e:95:37:25:
                    d6:64:95:82:2e:f5:ad:13:84:b9:d1:df:8a:a8:1a:
                    19:0c:4a:2e:29:a7:48:ca:e0:c9:50:7b:e3:3e:c3:
                    d6:03:c8:a7:4b:09:65:f9:fb:94:54:cc:7a:78:f5:
                    f0:70:a8:cb:1b:ed:0f:72:8e:20:df:4c:30:70:d7:
                    26:2e:99:54:29:1e:1f:01:1f:8c:2d:59:ce:d3:ab:
                    8f:dd:48:77:35:51:27:89:b7:c4:d6:1a:eb:18:46:
                    44:a2:1b:d3:36:de:71:87:14:ef:a3:12:04:8a:0b:
                    f3:23:ff:ad:8c:07:31:ae:70:3d:f2:ee:95:16:c8:
                    38:23:7b:7e:3a:1f:74:70:bf:c2:84:50:a1:99:60:
                    1b:6a:75:82:64:35:2b:a9:48:25:59:d2:1d:0c:70:
                    46:e8:29:9f:ed:56:24:91:39:a8:19:0d:ff:6e:d6:
                    d5:a1:64:6b:4b:44:44:11:9b:16:8f:d9:bd:49:66:
                    d1:3e:a2:be:be:fd:0f:b0:84:a5:cb:6a:eb:fc:25:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:BA:48:92:11:CC:A2:18:50:97:D3:09:84:89:AB:CB:40:1D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/22bd5b52-a295-3b0a-908c-aa07472087d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:42:ae:f1:33:df:d9:b8:7c:d8:89:bc:e5:f2:b2:44:aa:fa:
         bb:d7:c6:af:8b:9b:97:b6:20:3a:e5:29:38:eb:02:b6:d8:ef:
         c0:0f:c8:8c:e4:ec:5a:2e:dc:cc:5e:60:f2:50:9a:3a:8c:e7:
         44:c4:74:6a:a9:1c:ae:0d:88:4e:aa:10:ba:9c:85:b5:fd:75:
         31:41:49:5e:51:cd:72:d3:20:fc:1d:89:05:5f:22:66:e3:81:
         fb:8c:43:b0:fe:69:d9:4a:0a:81:44:c5:d1:1a:43:2a:ec:af:
         d4:3f:4a:68:3b:bd:91:2f:6e:47:be:87:c4:35:42:61:de:43:
         9e:66:39:49:7d:97:eb:c0:f6:21:8f:30:55:87:31:f0:32:3d:
         27:8f:37:05:90:67:08:a1:2e:7e:e0:29:f6:22:04:a8:9e:26:
         79:20:e2:d2:3d:be:83:c3:88:7e:ad:f4:44:4c:78:70:40:0a:
         5e:05:ca:5b:c2:9a:ae:f3:b4:88:5a:45:b5:f4:63:4c:04:3f:
         bd:1b:cc:55:7b:55:36:f5:b0:68:fd:a3:ae:c1:9c:3d:62:51:
         0b:f0:ce:67:f3:aa:41:8e:07:7e:3d:a9:77:76:ff:06:26:9c:
         62:dd:67:03:2f:e8:94:51:e4:77:7b:2e:c2:9a:3a:3d:62:5c:
         fd:20:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:16 2025 by rpki-client