Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/e30a2c99-2d12-3f0e-983a-8640316f494d.roa
File:                     e30a2c99-2d12-3f0e-983a-8640316f494d.roa (raw, json)
Hash identifier:          R9Vp/wbjmiDof9mcFXPjGh6aBqVl92opw4HPp4SCeYg=
Subject key identifier:   B2:F0:6A:5C:E0:08:62:5B:D3:41:89:2F:05:7F:12:2C:E8:5F:F8:4D
Certificate issuer:       /CN=0e34178a-a601-47ba-9896-03297e54462c
Certificate serial:       010D0C9F43285845BEAB5DD0AC73C40865D701C0
Authority key identifier: 4B:7A:47:90:42:38:80:31:24:0E:FF:4B:B7:E6:36:11:FE:98:85:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/e30a2c99-2d12-3f0e-983a-8640316f494d.roa
Signing time:             Fri 03 May 2024 00:54:57 +0000
ROA not before:           Fri 03 May 2024 00:54:57 +0000
ROA not after:            Thu 01 Aug 2024 00:54:57 +0000
asID:                     7029
IP address blocks:        167.253.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/0e34178a-a601-47ba-9896-03297e54462c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/0e34178a-a601-47ba-9896-03297e54462c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:ab:5d:d0:ac:73:c4:08:65:d7:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e34178a-a601-47ba-9896-03297e54462c
        Validity
            Not Before: May  3 00:54:57 2024 GMT
            Not After : Aug  1 00:54:57 2024 GMT
        Subject: CN=320a4468-3cfc-4011-ae14-e2f5b60a1020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:eb:d8:29:00:1f:a9:89:fb:1a:d3:e6:f3:
                    09:e8:0e:85:4d:e6:df:e7:20:51:0e:f4:be:ae:ad:
                    75:cb:b5:a2:a3:df:ea:5f:a4:80:35:cd:b3:76:90:
                    91:97:22:d8:6e:ba:fc:3a:14:84:59:f5:45:85:4b:
                    6a:15:a4:10:29:d1:85:a9:43:a8:4c:6d:21:6f:7d:
                    85:20:4f:7d:4c:f5:44:7b:42:ee:78:75:fc:b0:09:
                    8f:00:f2:b3:05:db:39:7f:b8:dd:8a:1c:c2:2d:64:
                    eb:1c:2e:ef:33:75:a9:e6:1b:07:4c:60:ed:63:99:
                    b6:41:e0:65:e5:db:3e:b2:e6:52:60:4c:bc:dd:40:
                    c9:a8:6d:84:a2:27:87:82:4e:d5:f1:68:f5:3d:37:
                    e3:48:bb:a8:70:6a:c8:6c:55:5f:f2:b7:e9:09:2c:
                    02:b9:03:e1:b2:8c:80:cd:f8:f9:41:11:9d:0c:0d:
                    c1:f1:31:73:c8:1a:2c:ed:2a:b5:2e:cc:b0:2c:69:
                    a9:9c:3a:86:7b:52:85:84:53:0f:6f:79:2d:bc:aa:
                    17:7e:eb:47:8f:16:a1:cc:6c:4d:53:4b:3c:da:c2:
                    37:9b:f7:dc:28:cf:19:ad:96:56:a8:02:ca:2e:09:
                    3d:65:a2:12:f2:89:40:c1:f2:29:67:73:ba:33:b8:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:6A:5C:E0:08:62:5B:D3:41:89:2F:05:7F:12:2C:E8:5F:F8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/e30a2c99-2d12-3f0e-983a-8640316f494d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c/0e34178a-a601-47ba-9896-03297e54462c.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7A:47:90:42:38:80:31:24:0E:FF:4B:B7:E6:36:11:FE:98:85:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e34178a-a601-47ba-9896-03297e54462c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:23:66:01:5b:d7:35:b5:15:78:52:36:07:0c:4c:83:f9:8d:
         9b:43:67:78:12:32:9d:3d:fc:9a:06:26:1c:a1:a8:c2:7a:7d:
         40:39:87:6d:79:e9:ef:ce:bc:d5:17:28:bf:c9:32:01:67:29:
         ef:03:98:06:70:97:1a:b5:5f:0f:f4:e7:e2:ab:8b:6f:b3:17:
         3e:5b:86:96:f9:70:13:3d:a8:ee:46:f8:cf:72:42:38:d1:81:
         f6:41:fd:8b:bf:c6:b3:9d:4b:41:bc:dc:33:82:32:c9:b3:21:
         df:7c:b8:40:1a:9f:84:6b:77:25:73:74:01:65:5d:d9:29:05:
         80:6c:1c:44:4f:92:78:4e:56:1b:52:40:9a:81:ca:9e:cf:b6:
         10:e1:9f:70:a7:c3:65:07:b8:c3:fa:97:25:cc:f3:f5:d7:3e:
         52:4b:26:d9:bd:ff:db:a1:ad:94:11:c6:73:4e:4f:a1:f3:11:
         d4:14:ca:89:e2:cb:ab:3e:e8:97:d6:8b:73:c6:7d:8a:26:25:
         53:2a:d6:6f:b2:35:9c:fb:53:41:90:78:cb:c5:01:94:d7:2b:
         7a:1d:a9:22:f5:80:da:10:29:c7:3f:da:84:ed:ef:13:14:59:
         66:4b:24:55:79:61:7a:36:71:ca:a8:8f:a8:ab:b9:69:75:4a:
         5e:11:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:41 2024 by rpki-client on console-ams.rpki-client.org