Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa
File:                     1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa (raw, json)
Hash identifier:          q9xohRpP5ZWLyQ8RHd2NO1GFvjqxAPJspkpqjGiOFaE=
Subject key identifier:   03:CB:E9:F8:F4:F5:1F:C6:22:DF:D9:B7:81:D4:5D:72:34:F2:14:15
Certificate issuer:       /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial:       010D0C9F432858459019BA645BFC047D692FBE00
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa
Signing time:             Tue 16 Apr 2024 08:34:19 +0000
ROA not before:           Tue 16 Apr 2024 08:34:19 +0000
ROA not after:            Mon 15 Jul 2024 08:34:19 +0000
asID:                     174
IP address blocks:        167.253.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:19:ba:64:5b:fc:04:7d:69:2f:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
        Validity
            Not Before: Apr 16 08:34:19 2024 GMT
            Not After : Jul 15 08:34:19 2024 GMT
        Subject: CN=cae8a3a0-9d74-492a-8565-b5b9c24b7fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:d0:60:5f:7b:c3:96:62:7d:a3:18:1a:97:
                    ad:79:03:3c:0b:d9:d7:64:b3:25:1f:10:63:fe:5f:
                    5e:8a:25:3a:79:f0:50:11:d2:2a:67:7e:f5:75:55:
                    db:ef:d5:35:cd:7a:c1:04:22:51:f9:f6:61:06:94:
                    f2:9f:17:d5:fb:86:7b:dd:b7:24:36:b0:a3:52:c7:
                    85:53:07:cb:ab:9b:cb:a9:2f:e5:9e:bd:b8:d6:ea:
                    44:ad:8a:3b:be:0f:9f:31:1e:0d:00:8e:fd:ac:c4:
                    a6:ea:a0:15:ac:bd:43:8b:cf:e4:f5:c7:9a:fe:8b:
                    6c:fc:69:f4:1c:f5:56:84:6c:7b:ff:2b:12:6c:e0:
                    9f:44:20:73:7d:24:58:b7:8d:c1:76:4d:ea:4e:98:
                    85:52:fe:ae:c0:88:55:53:b2:60:ad:95:e7:6a:4d:
                    10:75:cb:74:8c:8d:fa:4c:2a:48:75:22:aa:e8:e2:
                    4f:99:9a:13:03:41:9d:7c:1c:26:96:ce:c1:45:3a:
                    30:57:9c:73:ae:10:ff:16:53:bb:71:3b:c3:66:eb:
                    09:37:54:ac:2f:de:ae:3a:b1:30:e8:b1:06:00:48:
                    3d:c5:d3:72:1b:6a:de:20:0b:7b:f3:52:db:de:ff:
                    d2:37:c1:2e:d5:32:2d:62:c3:5a:67:d1:3a:76:66:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:E9:F8:F4:F5:1F:C6:22:DF:D9:B7:81:D4:5D:72:34:F2:14:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl

            X509v3 Authority Key Identifier:
                keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:ec:32:44:34:01:f6:6c:9f:d6:c8:0f:06:5d:43:b2:c1:
         7e:d6:2f:13:ab:49:cc:f3:f8:56:4f:1e:28:c2:e8:3e:0e:36:
         8a:ee:7b:b0:9c:e3:3b:23:16:95:c7:1b:4a:28:46:28:93:f3:
         3e:c2:50:75:8b:e8:24:44:3e:b2:dc:54:5c:fa:c9:b1:7f:8a:
         f2:05:c2:b1:07:0f:61:10:1b:99:5c:89:0f:6a:63:da:e8:26:
         24:13:b7:99:b2:3b:ed:17:b6:a9:38:a1:1e:40:eb:26:20:93:
         4f:5a:99:f6:04:86:de:01:ad:82:fc:47:da:1c:38:3f:c4:8a:
         ba:ac:35:d4:fd:c9:bf:76:8f:42:91:6b:44:5a:77:12:02:d1:
         45:a2:c4:4b:fe:81:d0:3a:91:10:84:97:df:81:47:52:4b:3e:
         34:e0:dd:a8:b1:b0:31:0d:88:e6:8d:d6:c1:17:c2:22:46:90:
         64:48:34:e4:ce:d7:a5:50:87:d5:ae:a3:b4:bf:5e:03:5a:0c:
         dc:41:44:c1:9a:62:00:14:cb:d2:c0:2f:17:cb:3c:1e:d9:1d:
         1c:2a:b7:2c:37:28:02:f6:9d:59:01:9a:16:16:00:9b:18:97:
         48:d6:ac:a3:03:ff:3a:79:1b:fa:dc:d3:48:59:3d:a8:60:d1:
         77:5b:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:29:50 2024 by rpki-client on console-ams.rpki-client.org