Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa
File:                     AS27267.roa (raw, json)
Hash identifier:          /sD7qLYWB6sN7DeOVYLZe+56ceXp6b4BNXCDhvH59eM=
Subject key identifier:   89:19:B2:74:F5:02:06:95:19:7B:9C:83:AE:EC:83:45:5D:FC:09:39
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       5384C591BA0B888BC6881FD471A8081A3656DD42
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa
Signing time:             Mon 02 Oct 2023 21:55:37 +0000
ROA not before:           Mon 02 Oct 2023 21:50:37 +0000
ROA not after:            Mon 30 Sep 2024 21:55:37 +0000
asID:                     27267
IP address blocks:        199.38.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 08:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:84:c5:91:ba:0b:88:8b:c6:88:1f:d4:71:a8:08:1a:36:56:dd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct  2 21:50:37 2023 GMT
            Not After : Sep 30 21:55:37 2024 GMT
        Subject: CN=8919B274F5020695197B9C83AEEC83455DFC0939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:1e:2f:b9:d0:04:45:b4:6f:a8:fb:5a:a5:
                    61:5b:a6:a8:a2:2c:fd:91:68:22:3b:20:2b:02:5e:
                    6f:4e:c8:cc:e0:df:79:16:0c:59:4c:5f:fc:bb:20:
                    16:22:00:16:f9:3d:85:92:b3:d0:68:13:9e:8a:67:
                    8c:8f:ba:dc:8f:69:8f:a1:93:c1:4a:f4:f0:e3:93:
                    aa:49:24:4d:a0:a2:7b:04:0c:88:ed:a7:0a:8f:10:
                    ae:e8:88:9a:74:5d:c4:80:0e:8e:df:19:76:ff:93:
                    8c:7d:c6:6b:aa:2a:88:d1:ed:64:1a:c7:a6:7f:6e:
                    91:9c:35:bb:7e:ed:58:a3:08:c0:69:83:d6:ec:d7:
                    da:79:83:03:cc:f6:b4:8d:73:19:13:c8:53:50:29:
                    56:dc:2e:13:68:d6:c3:c6:0f:d1:4e:f8:1d:cb:4a:
                    b4:22:cc:af:b1:b3:65:9b:6e:a2:ec:40:46:64:3b:
                    ba:22:ca:25:c7:0e:9a:c0:87:99:6c:f8:e6:ac:b5:
                    0b:e2:be:f0:eb:dd:d5:95:ed:7e:e5:22:85:e4:dd:
                    46:5f:b0:b7:74:fd:cb:d4:04:a0:4a:8c:56:11:0c:
                    0f:d0:bf:17:3e:2d:8e:66:53:d9:20:c6:d8:52:57:
                    b6:73:e7:45:f6:c5:03:36:ec:b5:5a:d3:1a:ec:e6:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:B2:74:F5:02:06:95:19:7B:9C:83:AE:EC:83:45:5D:FC:09:39
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:fa:e6:54:84:5e:14:6e:72:61:af:37:b1:ae:be:93:60:86:
         2e:64:43:58:1f:9f:4f:2e:13:64:0d:11:91:f3:3c:d5:76:f4:
         f0:ba:43:ec:b2:09:e9:34:13:64:b6:4f:56:18:b1:96:b2:89:
         63:30:58:64:cc:da:4b:0d:d4:14:2f:7f:fe:e3:c4:87:f2:d6:
         94:eb:8e:3d:4f:3c:7e:a1:df:16:b4:12:c4:bb:30:d3:45:19:
         f0:7a:6b:b5:72:19:44:57:82:9b:1c:98:b0:a4:16:70:f9:b0:
         db:1a:dd:aa:c8:f7:b4:18:d2:f2:af:82:57:76:22:7d:3b:2a:
         a9:ec:70:b4:a1:a6:92:23:d6:bf:04:18:f9:a7:ba:d2:87:91:
         f8:bd:3d:15:63:19:4b:80:64:d1:92:da:ef:19:31:81:2d:84:
         18:e2:6b:5b:24:b6:88:5f:6f:b1:7b:83:e7:cd:35:67:fa:ab:
         68:e3:a6:d6:5c:5b:13:d7:ae:dc:43:9d:be:58:fd:c6:11:15:
         61:a4:ee:24:7a:6e:78:6c:97:e0:20:1b:86:c4:89:c0:c5:4c:
         2c:6e:ce:3f:29:a7:e5:3a:10:2e:83:14:e1:83:45:0a:1b:74:
         3d:76:af:15:bc:b1:2e:a9:e2:d5:b3:6d:ad:c7:f6:d1:a1:87:
         bb:08:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 07:43:08 2024 by rpki-client on console-fra.rpki-client.org