Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/f63f43b9-1451-3329-8551-da5f7e93cc14.roa
File:                     f63f43b9-1451-3329-8551-da5f7e93cc14.roa (raw, json)
Hash identifier:          rS227AQf0UjtoZnTjHXwIh3GAhRcg6HVZ3I+HPAL4tc=
Subject key identifier:   5A:88:56:F0:92:4F:3B:9D:25:A9:AC:20:E1:5D:74:A6:76:74:7B:D0
Certificate issuer:       /CN=a5114e69-a8e9-416a-a99b-8144e07664ce
Certificate serial:       010D0C9F43285845D371EDB627E13F1EFD2B9800
Authority key identifier: 7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/f63f43b9-1451-3329-8551-da5f7e93cc14.roa
Signing time:             Fri 10 May 2024 11:31:11 +0000
ROA not before:           Fri 10 May 2024 11:31:11 +0000
ROA not after:            Thu 08 Aug 2024 11:31:11 +0000
asID:                     53356
IP address blocks:        167.253.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:71:ed:b6:27:e1:3f:1e:fd:2b:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5114e69-a8e9-416a-a99b-8144e07664ce
        Validity
            Not Before: May 10 11:31:11 2024 GMT
            Not After : Aug  8 11:31:11 2024 GMT
        Subject: CN=fd811c30-bd97-4f35-9148-2d3cc004c09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:7b:14:49:f1:4b:eb:61:71:95:99:28:2b:
                    cf:0e:47:4e:64:c3:a4:72:a8:39:4b:e9:e9:13:8b:
                    da:af:6f:27:46:3c:6b:2b:b5:db:75:c7:3d:7a:33:
                    a2:06:b2:f3:d0:e6:94:d2:4b:6b:1b:21:db:07:d7:
                    65:78:29:28:8a:0c:04:49:27:b5:1f:1c:60:f9:32:
                    54:7f:60:90:6b:9c:0b:08:69:13:6e:5e:86:b7:c9:
                    dd:f6:27:e8:f1:e8:8f:25:ac:eb:53:6d:95:dd:fc:
                    a4:fb:2a:4d:25:2a:8e:a7:76:00:63:62:67:c3:7c:
                    db:f9:ae:53:12:25:89:ea:ed:10:d4:4d:b0:53:3b:
                    85:20:59:75:90:7c:ce:9e:77:6d:e5:ef:78:7a:4b:
                    4f:c7:0a:f9:78:cd:e8:cb:a1:af:59:2c:64:8a:a5:
                    97:34:61:2c:65:58:5b:d3:87:0f:5f:1e:da:54:3f:
                    44:7c:a1:4c:d2:c6:0f:ed:c1:d4:70:a6:8b:98:98:
                    d2:40:83:7f:7d:63:05:71:5c:84:43:2a:68:00:4b:
                    15:f0:de:62:56:d2:95:60:9f:1f:7a:4d:a4:84:69:
                    d4:fe:03:a2:d5:a3:6d:71:58:33:37:0d:e7:c7:51:
                    21:dc:66:4f:36:bc:11:3e:38:07:91:12:83:1f:b2:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:88:56:F0:92:4F:3B:9D:25:A9:AC:20:E1:5D:74:A6:76:74:7B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/f63f43b9-1451-3329-8551-da5f7e93cc14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.crl

            X509v3 Authority Key Identifier:
                keyid:7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:ae:81:7c:45:55:c4:b9:a5:0d:99:bf:97:a2:ac:63:d7:
         97:64:17:a7:0c:a4:22:95:34:0d:74:06:a5:09:17:ac:ed:d8:
         6a:83:f8:68:13:cb:41:79:b2:13:2a:25:c7:ca:a5:22:5e:94:
         99:9a:ce:da:f3:f9:8a:cd:c9:0b:de:9e:b1:56:95:a1:91:a1:
         f0:5f:f6:5d:30:54:81:76:14:3f:de:b2:56:73:14:13:f9:34:
         cf:ee:0e:02:09:7c:90:45:03:b6:69:91:31:58:16:13:aa:0b:
         76:f8:2e:de:ca:26:7f:72:65:9b:0f:6b:47:9b:04:18:b6:d4:
         32:6a:94:d0:c0:ac:3f:8e:6a:f5:14:90:8a:0c:2a:76:a6:4c:
         db:8c:9e:4e:9a:f8:d9:5f:af:03:17:ef:6c:54:8e:92:66:9c:
         21:98:9d:01:90:14:f4:2c:e3:5f:a8:aa:24:56:b0:bd:18:d6:
         aa:ce:5f:c4:47:17:d5:be:96:b1:4f:2d:1e:59:39:e5:d6:ee:
         c6:3b:97:b8:c4:01:47:c7:83:0a:62:da:01:2c:10:5a:88:0b:
         c2:82:5f:0a:db:f6:e0:15:5c:dc:ae:99:67:63:f2:e3:92:43:
         17:9c:4c:b5:67:75:84:0e:b3:4c:4b:83:56:a5:4a:3f:b6:fd:
         69:24:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:44 2024 by rpki-client on console-ams.rpki-client.org