Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa
File:                     6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa (raw, json)
Hash identifier:          rm2r11+Wp9D5c87uvNi8Hj45+VtC49esINNb9zuahhM=
Subject key identifier:   0A:01:23:95:8B:47:CF:2A:52:7B:A9:14:C3:C8:1A:D4:DB:52:61:F6
Certificate issuer:       /CN=0a403f6b-0f61-4db4-a8ff-0b4adc6a313b
Certificate serial:       010D0C9F432858453CDD5E2D22DEEFB4D8F12D90
Authority key identifier: B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     396982
IP address blocks:        167.234.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:5e:2d:22:de:ef:b4:d8:f1:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a403f6b-0f61-4db4-a8ff-0b4adc6a313b
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=e5692738-d0b5-4feb-8d96-24b01d301e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:1b:5a:50:f8:39:32:5f:27:e1:25:81:7d:
                    a2:62:be:d0:9d:86:cd:00:4b:cf:32:99:f0:0e:51:
                    d5:47:2a:3a:f7:b0:d9:d3:b1:83:ee:53:be:78:88:
                    7e:48:20:38:54:45:bf:41:73:11:97:ec:44:9d:1f:
                    ac:f6:b0:85:d0:ea:6e:20:35:34:47:2a:8a:a0:61:
                    b5:b4:f6:33:c3:b8:9a:3d:b1:d9:85:21:cd:e3:29:
                    a2:88:93:fc:3f:b5:0e:bf:bb:25:2b:a0:04:4a:bb:
                    0e:cf:31:c6:e0:90:af:66:5d:16:c2:3c:77:0e:f1:
                    23:d7:81:f5:ac:d2:d9:42:10:b9:98:3c:92:cb:59:
                    c6:ac:df:53:7a:26:f7:8b:83:e2:16:a0:13:f4:70:
                    11:f4:74:06:f1:79:54:7d:d4:6d:03:5e:5b:30:0e:
                    49:bd:13:ad:72:11:4c:5b:5f:b6:bc:95:7c:aa:74:
                    02:76:05:19:26:40:bd:d3:df:25:b6:05:f8:f2:aa:
                    a9:42:af:ee:ad:5c:c5:c0:cd:b5:75:69:cb:1c:0f:
                    b6:ab:1e:50:76:97:2f:bb:03:ed:0e:04:93:d3:18:
                    1a:88:fd:80:90:e4:c4:cf:16:da:93:5d:34:87:86:
                    95:55:3b:4c:05:7d:25:a0:fc:94:a0:39:db:99:c3:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:01:23:95:8B:47:CF:2A:52:7B:A9:14:C3:C8:1A:D4:DB:52:61:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.crl

            X509v3 Authority Key Identifier:
                keyid:B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:64:6b:18:99:c4:7e:51:74:9f:7d:d5:d8:88:d2:9b:64:42:
         c3:b9:b0:9f:dc:5b:cb:68:3c:06:d3:7d:0d:97:c4:51:e0:0f:
         39:ff:9a:88:ca:8c:e1:30:6a:da:6c:36:a3:dd:06:4e:3a:49:
         43:30:21:70:c6:d0:87:15:db:b8:81:8d:a0:88:69:d2:70:3e:
         1d:22:26:ca:4f:56:57:79:a0:36:2e:50:5f:bf:96:04:45:52:
         25:b6:92:f0:04:a3:21:b4:f6:14:6f:fe:c6:34:06:98:84:ab:
         3e:bf:56:e9:4d:42:54:dc:05:53:8c:46:73:09:78:69:fc:f3:
         99:0e:df:a9:86:dc:ea:86:33:db:8c:04:b6:06:22:06:8b:8d:
         29:89:4a:c6:4f:4c:ec:81:68:77:fa:7d:3d:23:be:fd:cd:1b:
         0f:7d:9c:d5:9d:39:b3:14:21:2b:35:47:ca:b2:1f:ad:a4:42:
         c7:89:cc:dc:92:61:06:70:ed:bb:a0:00:21:05:73:67:57:2c:
         f9:30:e0:b0:31:6a:83:ae:2e:df:f4:a2:80:02:56:11:cc:c5:
         c8:4c:2d:33:d0:0c:d2:9d:31:df:eb:28:d4:55:a4:d2:02:b2:
         e5:53:fc:ce:b8:08:6c:1f:3b:97:72:35:6f:ce:8a:93:9f:4f:
         54:78:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:31:41 2024 by rpki-client on console-fra.rpki-client.org