Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
File:                     ca96c743-26b4-3af6-9b1c-895a1d32be10.roa (raw, json)
Hash identifier:          5sjzO/bB6SR60C9gBCJgXdurOFPtUZl2R//RDh8kAsA=
Subject key identifier:   87:0B:0E:B9:B5:49:0D:DB:86:A9:8E:D8:0C:CB:93:E4:3B:64:A8:9F
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F432858478456700E1A1433A532BB1F40
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     13807
IP address blocks:        162.221.232.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:70:0e:1a:14:33:a5:32:bb:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=ae080e20-ee58-43d2-ae8b-7f16b638ad00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:3b:1d:46:65:22:56:56:01:f9:8e:5b:ae:
                    ce:0f:9a:75:85:76:8d:04:3d:02:d4:24:54:15:aa:
                    bd:37:12:3a:fb:7b:7b:2c:a6:66:02:6f:53:f0:41:
                    6d:ed:33:34:6a:7c:54:41:8a:48:47:4e:63:94:44:
                    76:8f:8e:3e:44:14:b8:88:69:17:e4:01:fc:e8:33:
                    62:a3:21:fb:67:e3:f6:31:c5:56:a9:e2:00:67:ad:
                    96:b7:eb:66:f0:4a:50:ac:e9:ba:95:05:d9:d3:e8:
                    21:b2:db:5d:b3:eb:67:d5:5e:13:3d:b9:06:bd:3b:
                    88:4c:db:a5:bd:b3:5e:dd:5e:a3:9b:70:61:e0:d8:
                    3b:f8:f8:71:6e:28:a9:2c:a0:02:23:3e:42:c8:7a:
                    87:f1:74:59:e2:5d:ef:d0:33:5d:84:b8:fa:e6:15:
                    14:41:59:e5:8a:1e:eb:71:20:f9:00:86:bd:be:09:
                    59:07:45:09:4b:b9:a4:70:6d:13:63:0b:8a:c7:4a:
                    60:cf:35:46:f4:44:5f:c8:12:a3:46:b7:b0:81:84:
                    9d:aa:72:bc:3b:90:00:74:4e:5d:14:44:4c:86:e7:
                    a5:8d:15:0f:bc:b3:d9:71:bc:74:c8:bc:59:ee:64:
                    fc:b0:73:62:40:63:aa:01:af:13:12:d8:f5:96:cc:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:0E:B9:B5:49:0D:DB:86:A9:8E:D8:0C:CB:93:E4:3B:64:A8:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:12:26:47:41:e5:2f:b3:af:f4:bf:da:f5:f5:b3:e8:4f:87:
         df:00:a9:a5:03:51:b0:0e:3a:ca:ed:0d:67:14:3e:7a:e6:68:
         33:4c:ff:bc:55:27:4f:90:6d:d9:c8:d6:36:23:ba:ce:8e:e5:
         0d:ba:3e:a7:f3:da:ea:9b:4b:d8:4d:16:74:d5:bf:af:aa:54:
         04:0e:b4:8a:87:ba:95:86:64:09:cf:2a:ab:90:72:38:4d:1e:
         ca:b0:34:c2:b2:6d:9f:d6:00:83:bd:d2:52:f4:60:74:4e:a6:
         8c:d1:13:a3:75:a7:39:79:f4:2c:7a:9f:6b:94:0d:e0:f5:48:
         87:31:76:c4:83:48:70:46:20:48:73:72:93:2d:1f:6b:05:8d:
         b1:49:6d:25:b1:0e:69:35:be:e4:cd:36:3c:1b:48:7f:a2:56:
         4c:29:01:76:2d:4b:72:7c:68:ca:63:c3:1c:9a:61:af:1e:4d:
         42:da:14:de:2a:b7:c8:4e:5b:e3:44:d0:86:45:59:b9:be:48:
         02:d9:c1:df:ab:bc:f6:3a:51:87:2e:43:26:cd:a3:9d:93:34:
         6b:59:90:b0:51:1e:34:be:66:c2:a7:10:5e:f5:18:21:79:37:
         6d:0c:5b:8a:6a:75:b3:8a:cf:c6:05:e6:14:98:75:4a:4f:40:
         16:80:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:44 2024 by rpki-client on console-fra.rpki-client.org