Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa
File:                     00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa (raw, json)
Hash identifier:          nHaUM/mp2xUFDdLLhFh63lZSHDe7c/D7a4T6RjqozlM=
Subject key identifier:   CE:CE:49:7B:61:C3:E9:89:80:F2:1F:41:2C:53:8E:29:58:F1:6E:4D
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584774FB96DD962F68B61E195400
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     46450
IP address blocks:        64.112.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:96:dd:96:2f:68:b6:1e:19:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=4df83572-c28f-4bc1-b1d2-91e7241fb22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:43:16:f7:6d:67:26:35:1f:cb:09:d2:15:
                    c0:44:99:7e:f9:8c:c7:37:15:2d:d4:f2:68:c8:cf:
                    c6:36:de:4f:20:ad:a1:b1:a9:a6:c3:81:3f:14:15:
                    a6:be:4b:8c:8a:7b:11:94:63:12:8b:e9:1b:99:3a:
                    2c:0e:18:3c:8e:ad:47:4e:25:23:94:ad:09:a9:c8:
                    51:97:0e:d1:04:ef:da:b6:e2:04:18:42:3e:ef:31:
                    1f:9b:81:4c:34:59:31:8b:a3:8a:ff:a9:9e:4d:e0:
                    1d:1a:cd:43:e4:5a:cc:4e:f0:a9:d7:37:24:45:aa:
                    a0:75:c8:af:67:c4:a5:3b:04:1e:85:09:69:c2:e7:
                    c6:12:f4:ed:42:c3:ec:ff:e1:bf:aa:f0:17:11:0a:
                    99:4e:ee:0c:1f:b0:c6:7c:af:5d:fc:b9:a5:43:60:
                    66:bc:da:ff:0c:c9:d8:bb:44:4b:01:ff:be:f7:5c:
                    03:77:bf:fc:5b:6a:95:66:39:12:77:20:57:3e:1a:
                    70:64:a1:7e:36:50:b7:47:97:2a:2e:ec:bf:d3:2e:
                    fb:74:53:94:54:84:5c:c5:25:b1:a3:87:9a:c6:a2:
                    0a:f1:16:24:79:b9:3d:d6:1d:84:0f:cb:d0:90:78:
                    14:7a:1f:fd:b1:61:8a:af:44:06:52:c4:60:88:98:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CE:49:7B:61:C3:E9:89:80:F2:1F:41:2C:53:8E:29:58:F1:6E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:db:e0:a6:c5:1a:14:ab:19:03:9e:70:b6:ed:75:25:b0:54:
         46:9e:a2:35:75:57:dc:5d:9f:67:ae:89:55:56:77:cd:0e:1c:
         dc:18:3a:c9:e9:7b:14:23:8d:83:dd:59:72:38:50:05:de:f3:
         ea:70:19:60:36:65:8f:1b:ea:84:17:fe:3b:fb:a4:8c:83:7d:
         4b:b2:e0:77:94:95:a4:2d:4b:64:ed:2a:05:ae:5a:74:78:68:
         83:1f:e7:64:72:c7:6d:8c:b1:28:3d:7b:15:5f:46:1a:cb:77:
         37:23:ca:e7:db:a6:29:6b:92:f7:8b:75:0d:0e:15:f9:4d:bf:
         4d:7f:7e:40:a8:75:6f:df:70:fd:5f:e2:2d:ac:80:ed:1e:25:
         85:87:8b:b7:c4:fc:d3:9e:1f:75:46:4e:f1:21:9e:fc:4d:a7:
         50:dd:a2:a9:b1:34:27:1a:3c:37:6f:ad:57:16:65:55:12:5e:
         35:11:d7:63:5e:f6:33:4b:39:75:0b:91:e7:89:36:89:99:38:
         a4:54:0d:29:42:45:fa:d1:f7:11:8f:cd:61:5c:bf:75:5f:03:
         ca:00:10:df:1d:90:b8:51:3f:37:90:57:9c:9f:85:e0:3b:74:
         e6:54:21:7b:64:94:80:9e:d8:e1:37:6d:16:48:e2:f7:80:81:
         c3:78:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:48 2024 by rpki-client on console-fra.rpki-client.org