Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
File:                     1568ffa4-448a-3377-932d-fa759841f527.roa (raw, json)
Hash identifier:          2F5wOKJi1W6DkK2ht9CoWOe//SMoZhUAOjLd+mSJxAI=
Subject key identifier:   ED:3D:EC:BD:81:87:4D:D5:BE:26:AB:B4:B5:2A:AA:7B:75:37:98:DC
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F432858457FDDE06E727CF1B8F7EFD540
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     36445
IP address blocks:        205.178.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e0:6e:72:7c:f1:b8:f7:ef:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=6b7f4c88-0bd3-4edc-92b0-886e7ca32237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1d:27:d4:c1:6a:32:a6:97:1b:78:ff:d6:a0:
                    26:2b:79:24:b6:82:6f:11:d7:5d:05:90:dc:3e:2f:
                    49:28:5d:45:c5:69:9e:2f:67:46:cc:6c:74:34:b0:
                    e6:2f:3d:5e:15:d3:a1:67:ff:12:91:34:d6:b6:fa:
                    de:67:fd:19:c3:1e:6a:ac:41:48:fb:ad:19:8b:a4:
                    4b:51:96:1f:f7:1e:25:c5:f8:89:14:92:9e:e8:0a:
                    81:41:94:4e:e4:14:e5:47:42:e7:2e:3c:cd:c2:9c:
                    19:37:bb:47:26:6f:42:ae:1d:37:62:6d:b7:2e:cb:
                    4b:a0:b5:36:ab:26:f1:dd:73:24:17:fa:c8:aa:3d:
                    73:bd:f6:74:b8:97:34:a2:88:dd:52:02:cd:be:c8:
                    91:00:9e:ea:ab:df:f9:51:4d:91:78:16:1e:93:ec:
                    53:fd:95:c3:18:da:c1:96:4c:c6:08:94:d3:28:bb:
                    f0:0b:1d:3f:66:f3:5a:67:50:82:72:f6:a1:d0:1f:
                    cc:b5:81:c3:77:3d:ce:0a:24:f4:5b:47:0f:d1:0c:
                    20:02:cf:de:4f:43:3d:55:b1:10:91:71:60:24:f6:
                    21:97:f9:5a:94:de:90:66:cd:d4:fd:72:47:13:c0:
                    1a:17:0a:72:74:f5:45:4b:24:73:1c:7a:b4:75:72:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3D:EC:BD:81:87:4D:D5:BE:26:AB:B4:B5:2A:AA:7B:75:37:98:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/1568ffa4-448a-3377-932d-fa759841f527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:15:5d:71:0c:0c:36:44:af:3a:27:2e:f2:e4:92:10:1a:
         fe:f7:ff:32:e7:e4:71:f6:32:eb:1d:67:41:06:61:44:bc:3f:
         32:9f:d1:8c:41:98:3b:ef:8b:55:fc:d3:7a:90:98:1f:3b:f1:
         a2:8b:61:8a:c2:84:d5:e6:66:55:15:96:5e:0c:1e:29:79:c5:
         f7:85:49:45:78:e8:d3:85:04:09:24:c7:aa:25:ae:5f:6c:22:
         06:39:c7:ee:3d:79:b1:c1:f7:f6:4a:5e:48:6b:be:9f:bf:e0:
         c7:92:45:44:88:3d:e0:68:0d:f6:e3:9d:ac:17:a9:be:ea:48:
         b3:e3:9f:4f:82:6b:3d:6e:23:3f:9f:8f:45:07:95:9c:70:df:
         37:d1:ce:3b:cc:62:be:04:05:d0:ab:32:3f:37:31:4a:69:eb:
         ee:60:68:3c:c5:4c:bb:fc:80:e4:eb:bf:1b:4a:8b:02:39:f3:
         84:ee:3e:5c:d5:e7:f4:d5:7d:84:01:a9:ab:b3:6c:3a:88:c1:
         8a:bf:98:82:bf:69:cf:ae:13:34:04:19:e1:8e:db:95:3b:6c:
         db:51:a6:77:e8:99:3f:e0:f9:3e:4f:e6:22:4d:a3:0f:37:9e:
         ee:88:da:8c:66:3e:14:f3:0c:f5:bc:b9:5c:f5:00:74:59:9f:
         f8:6a:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:35 2024 by rpki-client on console-fra.rpki-client.org