Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa
File:                     0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa (raw, json)
Hash identifier:          5oH5MWQlR4blbQmZgabCHBuhvQY2O69va5QWkluzjI0=
Subject key identifier:   43:27:22:65:A3:86:E5:95:C8:9D:EB:E3:A3:03:D9:CB:3D:C5:D0:E2
Certificate issuer:       /CN=801cf9d8-8773-413d-855b-20e5fb7f350d
Certificate serial:       010D0C9F432858460E3EB9A07CDEA2E71542DC80
Authority key identifier: 3B:14:4E:C7:E3:61:F3:86:50:6B:5F:C7:8F:13:9E:48:5A:07:49:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa
Signing time:             Fri 31 May 2024 13:00:36 +0000
ROA not before:           Fri 31 May 2024 13:00:36 +0000
ROA not after:            Thu 29 Aug 2024 13:00:36 +0000
asID:                     53925
IP address blocks:        67.159.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0e:3e:b9:a0:7c:de:a2:e7:15:42:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801cf9d8-8773-413d-855b-20e5fb7f350d
        Validity
            Not Before: May 31 13:00:36 2024 GMT
            Not After : Aug 29 13:00:36 2024 GMT
        Subject: CN=b00357b6-0cf0-4878-8b3c-a787b8e86f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:51:c6:09:9a:79:71:66:7f:b2:30:79:71:
                    ac:b0:6c:b7:1d:0b:20:cc:18:d7:0f:c6:fd:6e:ff:
                    be:aa:ab:69:09:63:12:57:97:b3:26:33:77:6b:7f:
                    8c:c7:96:73:ae:cb:70:91:91:03:3f:83:94:28:e7:
                    e8:d2:8e:b0:61:8d:a5:45:e2:25:84:7f:13:2c:f4:
                    a3:4e:19:9c:cf:81:04:20:69:44:db:e4:6d:1d:e2:
                    e7:34:c9:a3:dc:03:ce:fe:dc:a3:31:a9:54:29:2e:
                    00:0f:04:49:79:c7:fb:5d:43:bc:a9:1e:c1:94:e8:
                    5c:46:b9:ee:47:32:c6:94:88:20:b1:c4:32:cb:1b:
                    d5:a7:31:96:8a:f2:13:66:fa:2c:12:86:27:6a:34:
                    0d:d2:69:f3:98:d5:61:ce:d2:9a:a9:b4:d9:23:28:
                    48:77:dd:8b:67:0a:30:63:7f:dd:ce:82:38:1f:68:
                    b6:8b:12:34:6d:87:d4:6b:c7:dd:87:1f:79:22:27:
                    f1:71:bc:b7:40:7c:11:97:73:f2:c2:7b:07:f5:7c:
                    cd:43:60:c1:28:db:93:0e:45:5e:6d:ee:48:89:ea:
                    a4:84:df:ca:91:b5:1c:b1:75:2e:c9:18:9d:40:ec:
                    16:26:ad:45:0e:30:5f:14:96:b2:98:fd:36:15:05:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:22:65:A3:86:E5:95:C8:9D:EB:E3:A3:03:D9:CB:3D:C5:D0:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/0c06f84b-049a-3cab-aef0-440b3b8d87ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d/801cf9d8-8773-413d-855b-20e5fb7f350d.crl

            X509v3 Authority Key Identifier:
                keyid:3B:14:4E:C7:E3:61:F3:86:50:6B:5F:C7:8F:13:9E:48:5A:07:49:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/801cf9d8-8773-413d-855b-20e5fb7f350d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:c3:9b:78:cc:82:ee:38:57:6e:e0:dd:da:10:23:ff:1e:
         62:4d:93:87:5d:c4:cf:1a:f2:e8:ad:6b:3f:6b:89:66:54:2b:
         4c:48:3f:16:cb:ce:e9:e0:a0:4f:95:1d:13:c1:b7:af:49:92:
         00:c5:ba:89:bc:4e:3c:f0:00:5a:e8:2a:92:5d:2d:eb:f2:82:
         e9:2c:00:55:fd:b2:b5:ee:3c:ff:e9:42:26:28:18:1c:dd:9a:
         e5:23:a1:c4:e2:68:9f:9f:db:ed:00:9a:8f:7f:19:73:ef:a2:
         8d:54:d8:76:45:78:84:07:c7:d0:e2:b9:f1:12:e1:85:8a:11:
         67:e3:59:c4:e3:a1:75:71:28:9d:58:61:19:35:db:90:79:b7:
         a6:9b:60:c6:8b:b0:d5:28:20:7d:e9:88:c0:f1:0a:03:af:24:
         6d:6a:49:06:71:59:c3:18:a3:4d:94:83:4a:60:52:34:5e:77:
         65:6b:71:99:b8:c6:2e:3c:e1:79:4e:ad:71:af:64:07:ec:93:
         23:cf:83:72:e7:32:50:17:64:9d:c5:57:8e:1f:50:5e:99:23:
         7f:da:5e:2f:f3:48:61:e6:95:0a:13:28:07:a3:6a:ef:cc:f3:
         8e:a6:e5:af:ef:81:b0:d4:a4:9e:5d:97:15:d4:ae:cf:0c:bd:
         fb:30:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:49 2024 by rpki-client on console-fra.rpki-client.org