Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
File:                     7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (raw, json)
Hash identifier:          n97XH8yLGu3FnM2pgB32ZzwffGchSvlnWN3uVGg+icQ=
Subject key identifier:   D6:C1:D4:D3:88:92:4C:84:52:0D:70:37:58:CE:86:6A:F2:9A:4A:1C
Certificate issuer:       /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
Certificate serial:       010D0C9F4328584731FB9B906364CE76EBA6BE80
Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     996
IP address blocks:        167.253.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9b:90:63:64:ce:76:eb:a6:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=992aa2a0-efdc-4b9c-9f2a-4fa821ec5ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:b7:96:3a:f0:4a:23:79:d3:58:5d:6f:b0:
                    f5:a5:86:50:8e:40:b8:8c:66:8a:74:21:e5:01:06:
                    8b:b1:e9:db:43:88:37:1a:e6:94:2a:3f:3f:9a:84:
                    36:ea:75:9a:ec:3e:a4:3c:23:88:01:53:44:b9:14:
                    6b:e0:35:34:0c:6e:24:f2:2d:d3:7a:52:61:e9:cd:
                    80:e6:f9:ea:b8:72:0b:5b:ed:6f:a3:df:d4:e3:5b:
                    1e:5e:69:b8:0b:6b:c7:93:46:6c:fb:a1:99:a5:c4:
                    08:b0:89:09:69:66:fa:f7:1d:ea:76:6c:ba:8a:77:
                    63:00:87:b4:a9:17:40:3e:53:fc:04:a3:a6:fe:6d:
                    65:d7:31:d3:df:76:1b:ae:b6:e3:a2:30:d8:82:ac:
                    97:b4:a5:18:26:f1:a5:2c:1c:ed:f8:79:80:f9:8a:
                    81:16:22:8f:14:0a:42:9e:99:bd:86:65:ee:fa:92:
                    31:47:73:5a:88:de:58:08:19:99:7f:14:a8:3d:84:
                    06:15:e7:1b:64:ae:43:19:ee:49:bd:53:39:c6:39:
                    2b:35:ea:8d:ab:e5:b4:69:31:e7:66:16:d2:ce:4b:
                    eb:fc:b9:cb:d0:88:04:49:7f:6e:d3:12:0d:1e:4d:
                    28:cb:59:0d:d1:a1:6a:1c:79:51:47:18:f7:72:d6:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C1:D4:D3:88:92:4C:84:52:0D:70:37:58:CE:86:6A:F2:9A:4A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl

            X509v3 Authority Key Identifier:
                keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:97:9c:32:cf:02:0d:84:0c:01:1e:5b:b3:2d:bb:e7:d4:0f:
         03:4e:20:df:0f:7f:d4:82:aa:b7:82:77:8d:98:40:70:8d:ef:
         3d:5c:22:dd:b4:60:8b:95:43:31:07:ea:28:84:c9:04:85:d5:
         00:3a:2c:aa:fa:d7:9a:cc:7b:b2:d4:2a:4a:c1:8c:8f:97:2b:
         b8:1c:94:50:8d:27:5c:98:6b:4f:cf:e8:5d:e6:1b:98:f4:6f:
         cf:11:21:64:aa:29:87:8b:9b:e8:2e:f9:b0:af:ac:0b:6c:f6:
         66:53:89:09:da:39:46:0c:a8:f7:76:52:a1:74:25:5f:09:70:
         1a:ac:4d:2c:b9:4c:25:17:ce:6f:48:15:04:93:36:77:16:73:
         22:f9:d4:bf:66:f0:55:55:b3:7c:35:02:02:4f:b1:dc:d2:b1:
         48:af:3a:ff:9c:e0:65:0c:39:3f:ce:19:c0:d5:1a:3e:13:65:
         3f:9b:64:1c:aa:fd:c6:5e:53:2a:d1:83:dc:8e:37:be:d0:bf:
         b4:d6:86:87:11:43:03:77:58:66:4c:6f:b2:f4:9b:81:2f:2f:
         97:b9:7f:e3:1c:47:dc:91:e3:45:f3:ea:16:51:6c:36:a7:b5:
         e5:ef:f3:d8:c4:cd:da:3b:f3:ea:50:81:f3:31:c0:75:e2:f4:
         cc:69:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:17 2024 by rpki-client on console-fra.rpki-client.org