Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa
File:                     7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa (raw, json)
Hash identifier:          nEHdSknQDxU9ddmJNEP6tdh9Mvba1iNnKw80oU7jsW0=
Subject key identifier:   E2:F6:94:6D:B8:5F:4D:76:AD:CC:14:35:A9:56:18:C1:DA:97:4B:9F
Certificate issuer:       /CN=d3f01860-198d-4531-89a3-a4dc5f296657
Certificate serial:       010D0C9F432858453A12A86BD1D491E4D0702D00
Authority key identifier: A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        67.158.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:a8:6b:d1:d4:91:e4:d0:70:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f01860-198d-4531-89a3-a4dc5f296657
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=d548f736-dd98-431e-9ec8-3faabab2d030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:fc:f8:ab:d5:98:1c:6c:2d:af:06:e2:61:
                    16:e0:87:6c:3b:16:d7:5e:27:44:34:9c:6f:b2:aa:
                    a4:e4:c3:6b:b9:e2:bc:d5:d9:70:27:0e:12:2a:a6:
                    06:10:8f:09:bb:bd:cf:c6:a8:79:b3:15:11:cd:0a:
                    6a:b4:b5:d8:fa:3a:ec:34:4e:e9:30:62:7a:83:5e:
                    46:05:f5:4f:ee:67:c9:d0:9d:de:1a:ee:cc:b2:33:
                    43:c1:f0:b0:a7:0e:95:2f:22:b8:11:2d:35:89:7f:
                    d8:96:e8:a7:98:7d:a8:87:ee:8c:5a:e9:64:ae:48:
                    aa:6b:70:d1:f5:ac:93:f7:6a:9c:0b:0c:e2:12:67:
                    9b:83:2a:51:73:4e:ea:3d:82:5d:63:e3:14:b8:29:
                    12:03:81:02:86:12:2b:d6:89:b9:dc:1e:d0:2e:ff:
                    95:3d:bd:05:6e:60:29:ce:8a:eb:50:fd:c3:30:56:
                    e4:8b:2d:7a:23:a5:8c:59:b1:d1:fa:c1:97:b3:98:
                    2c:ca:57:82:25:1c:56:c8:9f:d4:b8:e0:0c:2b:b5:
                    ec:29:bb:16:11:f6:d3:6b:f5:7a:72:08:eb:e7:dc:
                    0a:a4:46:03:21:95:ff:65:bb:a7:76:2d:7e:de:24:
                    8e:8d:2f:81:20:dd:76:18:fc:f2:8e:e4:c6:47:4a:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F6:94:6D:B8:5F:4D:76:AD:CC:14:35:A9:56:18:C1:DA:97:4B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl

            X509v3 Authority Key Identifier:
                keyid:A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:d5:f5:01:ab:de:6b:be:b9:a3:b5:84:c5:2f:c5:d6:ce:1e:
         f1:4c:79:38:78:90:03:83:ba:24:04:6c:fc:3b:fa:80:03:22:
         a9:74:fb:41:91:ef:b3:99:ba:92:c0:d9:c9:84:21:da:9a:86:
         fa:a9:1d:b4:b5:ad:b7:3c:9a:4f:68:28:9a:2b:77:eb:cd:8f:
         95:ca:37:77:73:cb:78:2b:de:5b:c0:be:91:6d:3f:08:54:16:
         eb:9e:7c:f4:3e:a9:30:7f:50:3a:1e:96:e8:3f:a3:50:33:50:
         c6:0b:7f:3e:90:92:19:61:7a:35:ea:66:77:bc:59:b0:ef:df:
         d5:93:04:57:b1:e0:25:5e:b3:63:ee:ea:7a:9f:88:af:ef:95:
         81:6a:e9:7e:74:71:f8:c0:6a:55:a2:1f:2a:a5:4d:25:22:63:
         f5:26:13:32:7b:8c:53:32:4d:d9:04:f2:df:e3:fa:f6:8a:a6:
         86:6d:54:e1:59:c0:eb:41:be:fc:ad:c6:42:64:79:44:5e:99:
         ca:1c:d1:94:25:41:d6:49:ba:aa:2f:3e:f1:17:e5:f6:0c:5b:
         e8:df:52:48:5d:26:ed:30:f4:72:1a:16:d8:dc:6d:28:57:6c:
         d3:bf:11:a3:c7:13:d8:9d:96:77:06:47:61:84:d9:cc:39:05:
         a3:9d:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:35:24 2024 by rpki-client on console-fra.rpki-client.org