Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa
File:                     a0f559b4-6239-3212-be83-b4c0773d87e3.roa (raw, json)
Hash identifier:          zQmXytAC1LY130mDylGn0h+YhAyI/+6t0UaySsD/3dk=
Subject key identifier:   56:85:C6:00:A8:14:19:74:07:CC:6B:B6:6A:50:D2:CF:10:0E:C5:54
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F4328584596D7082B3DC8A32D681F0200
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa
Signing time:             Thu 18 Apr 2024 18:30:35 +0000
ROA not before:           Thu 18 Apr 2024 18:30:35 +0000
ROA not after:            Wed 17 Jul 2024 18:30:35 +0000
asID:                     398875
IP address blocks:        167.153.247.0/24 maxlen: 24
                          167.153.244.0/24 maxlen: 24
                          167.153.245.0/24 maxlen: 24
                          167.153.246.0/24 maxlen: 24
                          167.153.248.0/24 maxlen: 24
                          167.153.249.0/24 maxlen: 24
                          167.153.250.0/24 maxlen: 24
                          167.153.251.0/24 maxlen: 24
                          167.153.252.0/24 maxlen: 24
                          167.153.248.0/23 maxlen: 23
                          167.153.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:d7:08:2b:3d:c8:a3:2d:68:1f:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: Apr 18 18:30:35 2024 GMT
            Not After : Jul 17 18:30:35 2024 GMT
        Subject: CN=c1346146-b0ab-424d-a2b8-ccd9cc4fcc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:d3:e1:f3:e1:44:c3:1d:02:0e:14:a7:30:
                    42:55:19:59:64:ae:ca:8c:be:b5:0b:27:43:cd:df:
                    b1:7c:5b:90:67:26:06:95:ce:9e:a4:31:58:bb:2c:
                    74:ab:50:39:16:16:2b:9d:c9:a4:9d:6a:27:eb:6f:
                    a7:31:ee:99:55:07:85:4c:a3:72:e9:46:85:7c:95:
                    02:9d:8d:9d:c3:04:15:f1:c3:3f:a1:3c:d7:4e:a6:
                    f0:10:40:1c:19:b6:97:b0:e0:68:38:5b:4a:e3:3f:
                    3d:d3:1f:dd:c7:b1:e5:e8:69:dd:4f:8d:35:85:5b:
                    76:a5:90:4d:c9:0a:ed:14:0f:de:e9:3c:65:84:d5:
                    03:9e:77:60:b0:5c:fb:31:6b:8f:74:7f:10:5a:22:
                    b5:98:a5:71:f2:3b:b7:e3:df:5c:93:3b:29:ba:64:
                    ff:82:57:16:ec:0f:59:71:af:63:07:53:af:b4:5a:
                    87:e4:df:3d:35:82:69:e1:dd:58:eb:fa:67:73:8d:
                    87:0f:98:b8:36:bb:ab:6a:a0:cc:6f:10:e6:42:e5:
                    84:c1:1a:61:28:c7:7a:d1:2b:b2:fb:95:19:a1:59:
                    41:60:9a:b8:ab:46:26:3a:2d:3d:45:ce:ff:67:da:
                    45:40:44:2f:fa:bd:27:41:32:76:fe:7a:b9:aa:a1:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:85:C6:00:A8:14:19:74:07:CC:6B:B6:6A:50:D2:CF:10:0E:C5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.153.244.0-167.153.252.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:ab:7b:98:94:c5:cf:08:ed:68:46:4b:60:be:15:89:7d:
         cc:b0:eb:ce:56:1e:4a:38:40:fb:6f:b9:7d:0d:3f:af:5e:c0:
         87:50:70:45:7b:81:b6:e0:b6:dd:d4:bd:e9:52:3e:43:9d:7b:
         62:66:d6:53:6d:52:6a:37:8d:72:99:26:db:14:57:62:19:17:
         b9:34:85:19:ab:e0:49:28:08:81:22:1f:1e:25:89:44:6c:ca:
         ab:fd:55:65:06:92:8d:31:e6:95:c5:10:67:17:1d:3e:57:c7:
         cf:43:89:c5:b9:8e:a1:7c:f1:86:9e:96:2f:29:2c:7e:f2:b5:
         f3:79:3d:72:19:bb:54:a9:1e:fd:21:4d:b2:aa:f5:fb:75:37:
         88:43:c7:78:2c:ba:dd:d3:cb:d4:2f:22:f8:71:ac:5c:39:49:
         69:00:94:fe:86:94:32:a2:73:77:80:2d:5a:77:b7:35:ca:5e:
         a9:2d:b3:aa:95:68:5c:c7:0b:d8:0a:3c:4c:06:3c:b3:19:9d:
         68:c6:7d:78:a9:98:37:e7:68:8b:e0:40:df:e4:90:85:94:6f:
         62:0c:e5:54:1f:1f:8e:d6:26:c8:0c:1c:4d:b1:2f:73:14:f2:
         15:f0:10:7e:15:d1:40:16:2a:ba:d2:ce:99:dc:fb:cf:63:0f:
         16:df:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:58 2024 by rpki-client on console-fra.rpki-client.org