Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ff89eb67-b375-3931-953d-a4301459b410.roa
File:                     ff89eb67-b375-3931-953d-a4301459b410.roa (raw, json)
Hash identifier:          y1VCDfd95QnloxmYILdcYak4hWaktbdsxGzWiV7AYxI=
Subject key identifier:   41:BF:4B:1E:61:CE:2A:13:66:53:C3:BE:71:E0:5E:BC:DB:0F:E2:F7
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F43285845F51E91EB1DDCB092FA764300
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ff89eb67-b375-3931-953d-a4301459b410.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     2639
IP address blocks:        199.67.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:91:eb:1d:dc:b0:92:fa:76:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=22d04608-ed60-4c23-9ecf-03a04b1870a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:59:14:af:80:84:cc:43:db:b3:c0:1b:c2:
                    87:11:93:7f:04:5d:4e:8b:d1:93:08:9a:40:4e:c4:
                    72:1d:ce:25:15:fe:6a:2c:b2:c6:17:d4:fe:d3:f1:
                    6d:63:52:4e:bd:7e:9b:ad:80:bf:03:36:b0:62:4e:
                    4c:f6:68:f6:25:6f:50:63:e7:34:0c:d2:f9:e3:59:
                    5d:ac:55:9d:24:f3:79:a2:9e:c1:05:c6:59:cc:4d:
                    12:2a:13:13:44:5f:b0:0b:8f:28:8d:c6:bd:b6:66:
                    93:8a:7b:c4:0c:9a:fc:0c:25:49:ef:31:2d:23:52:
                    dd:0e:ef:ca:1b:1b:10:b9:10:65:a7:9c:52:a3:54:
                    d7:80:6a:b6:83:e0:02:55:35:8a:8a:ce:d7:cd:2f:
                    1b:bf:43:19:06:ce:fe:1a:6d:0b:10:d4:bb:d9:76:
                    10:99:81:a1:79:19:2d:b8:b7:9e:3a:87:90:74:a2:
                    73:b1:82:57:39:98:06:d1:8c:1c:2d:a1:3e:a5:74:
                    46:49:df:8a:d1:c5:1b:f8:be:15:6b:2f:8c:61:0b:
                    79:26:63:e4:a0:ac:f4:4a:04:80:2c:a9:69:fd:59:
                    50:29:cf:b7:e3:8f:1b:c8:53:c9:ae:5b:af:10:3e:
                    20:ea:71:a8:15:b2:c1:99:64:63:20:22:0a:27:8b:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BF:4B:1E:61:CE:2A:13:66:53:C3:BE:71:E0:5E:BC:DB:0F:E2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ff89eb67-b375-3931-953d-a4301459b410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.67.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c6:84:40:e7:1b:14:39:3c:82:c4:8a:0b:f4:3d:3c:85:92:
         52:36:d1:e4:11:b8:51:bf:08:3b:35:c8:c1:3e:47:6f:9c:8e:
         10:fd:77:e5:e7:9a:19:69:1a:0b:4e:53:c5:54:e8:f4:b1:f3:
         5a:e8:da:d4:0e:17:16:81:62:66:2d:0c:fa:65:f2:61:e5:76:
         41:77:7b:1e:be:07:5a:31:aa:b7:3d:cb:34:51:91:a2:97:29:
         ef:e2:39:08:21:21:2d:dd:f1:42:cf:68:f0:27:5e:29:bd:b3:
         94:68:f6:c9:43:c1:25:a7:bb:ae:f2:44:2b:a4:d4:e9:35:83:
         60:d0:14:29:8f:90:77:e0:fa:b8:46:b1:a5:bb:af:84:04:ea:
         26:11:d5:b1:ba:d1:0a:d8:07:43:72:b4:de:c0:21:b3:a9:91:
         d9:82:12:89:dc:d4:a5:13:1c:be:e3:63:5c:ee:10:a2:8f:a2:
         e2:f1:9a:38:7f:af:ba:7d:fb:e6:85:b5:5c:d5:64:b2:45:94:
         ad:a5:fc:91:9e:30:a5:a7:7a:76:ca:8e:25:8b:f9:fb:8b:06:
         62:24:f5:6c:cc:6f:b3:02:ab:24:6a:db:ed:98:f2:3d:b6:b5:
         58:00:5f:84:b7:f1:54:67:5f:20:a6:a9:98:f4:3b:fa:70:60:
         65:76:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 07:41:27 2024 by rpki-client on console-fra.rpki-client.org