Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/8fa2ab40-daf4-3671-8d07-470ed5ade611.roa
File:                     8fa2ab40-daf4-3671-8d07-470ed5ade611.roa (raw, json)
Hash identifier:          DXxXt+b9EF3S66mLPBkQyiVl10x6yD1kG/Zap7IYQzk=
Subject key identifier:   6F:A4:C5:58:98:8F:2F:F2:B9:4D:6D:F0:AD:5A:D6:48:30:9A:4D:24
Certificate issuer:       /CN=d3f01860-198d-4531-89a3-a4dc5f296657
Certificate serial:       010D0C9F43285847D999F3C1511D151230BFDC00
Authority key identifier: A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/8fa2ab40-daf4-3671-8d07-470ed5ade611.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     14618
IP address blocks:        67.158.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f3:c1:51:1d:15:12:30:bf:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f01860-198d-4531-89a3-a4dc5f296657
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=28c529e4-25d2-4a0e-8dc0-b40c39451744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:14:2a:44:d5:54:42:37:72:b6:c9:29:f8:a6:
                    d8:33:86:0e:20:31:dd:96:b6:7b:00:3d:1e:ed:e9:
                    f3:b0:e1:4f:ce:77:a7:3f:d1:55:5f:8b:91:11:43:
                    4e:e7:0c:83:d1:fd:00:c7:16:84:47:ce:d6:f6:a2:
                    25:e6:c2:ac:e0:a2:6b:5e:99:ef:ab:eb:22:78:5e:
                    0e:9b:61:86:cb:72:e8:ac:72:fd:68:eb:aa:8d:f8:
                    12:9c:fb:4e:f0:1f:ec:c5:8b:f2:14:4b:a0:51:cf:
                    d2:8f:50:00:7e:e0:62:39:4b:be:12:7f:d6:bc:ab:
                    68:fc:76:3d:3a:fa:d1:e9:53:7e:c7:d5:f8:62:3b:
                    cb:d0:59:9f:7b:20:4a:62:36:be:b0:63:9f:12:a1:
                    9e:27:f0:5c:a8:06:b0:8e:f7:d7:f1:54:bc:4e:7b:
                    ba:91:af:af:e6:9f:4b:d5:66:64:9e:71:a9:0a:5f:
                    7b:fb:3c:97:f8:10:20:02:2e:a8:e5:90:a7:96:28:
                    38:67:db:0e:b4:08:bc:53:b4:db:b0:d4:09:96:a3:
                    cc:00:17:92:92:bd:09:04:f2:34:94:97:0a:83:e9:
                    27:1b:5c:1a:91:32:76:45:2f:98:bb:18:d9:13:1e:
                    86:79:19:c7:7f:0d:8e:14:12:54:62:bc:36:72:73:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:C5:58:98:8F:2F:F2:B9:4D:6D:F0:AD:5A:D6:48:30:9A:4D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/8fa2ab40-daf4-3671-8d07-470ed5ade611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl

            X509v3 Authority Key Identifier:
                keyid:A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:e5:77:bb:3d:82:dd:db:93:2c:f6:7c:3e:89:87:4a:0f:
         de:d7:fc:92:bd:55:d4:78:99:51:79:3e:41:63:2e:fa:54:27:
         73:35:c6:ff:7f:07:91:58:fb:13:91:5d:ee:10:1b:98:cc:84:
         61:d7:4b:62:d8:85:ba:a8:fa:8f:5d:f9:b7:65:45:b3:5b:41:
         83:12:be:7d:f9:61:3f:fb:62:e8:51:21:ca:a2:a4:6d:e1:c4:
         5c:0c:ce:c6:ef:42:ee:0f:a2:5c:e8:23:e0:aa:ac:b3:f1:46:
         2b:a0:3d:e1:05:0d:70:cc:8c:54:22:ea:aa:ce:40:c5:56:3b:
         a0:e3:53:10:5e:81:69:56:3e:be:82:4a:09:fd:fe:19:44:64:
         e8:ab:13:5d:28:8a:8c:4a:21:2e:f4:3b:62:c2:67:ed:b5:0f:
         16:97:dc:bb:dc:1a:66:c2:96:61:3f:0d:96:6a:8b:70:9e:22:
         8c:93:f3:47:a3:41:57:fd:d3:08:a2:e1:4d:fa:19:72:44:c1:
         71:bd:59:a6:96:49:27:c0:d6:55:21:d4:d5:de:7f:83:1b:28:
         4b:11:f6:c5:c4:ff:29:eb:6c:e3:e3:5f:00:5e:ba:8c:12:75:
         8c:d6:a1:f0:8f:81:2d:5f:ff:88:a0:87:47:be:2f:48:79:55:
         a8:e1:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:47 2024 by rpki-client on console-fra.rpki-client.org