Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa
File:                     2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa (raw, json)
Hash identifier:          C7u9i27xvG+7GNcc/6yBi/peFSin+vI4EkWUEBapB+s=
Subject key identifier:   FF:E8:27:B9:EB:1A:DE:30:C5:DE:E9:5D:7F:CA:BC:EA:22:CB:9A:E7
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285845734DAFE7F969FCB130810140
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     396955
IP address blocks:        163.253.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:af:e7:f9:69:fc:b1:30:81:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=6575f6b3-92e3-4ad1-89ef-0331f5cd9648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:c3:aa:11:14:34:10:42:03:fd:be:82:3e:
                    6c:dc:a6:97:cf:07:b8:99:27:17:6c:91:03:23:74:
                    e5:0b:f5:8a:e8:26:71:27:73:5a:bf:72:64:40:64:
                    99:7c:c6:39:ab:cb:c2:f3:b1:d9:94:76:3c:75:40:
                    29:46:81:99:cd:09:40:cc:f3:5b:8b:a5:9f:66:32:
                    2c:2a:d0:1a:dd:a6:80:88:e7:c9:12:5c:de:08:df:
                    ba:b5:fc:d8:41:eb:35:46:bf:be:f3:8a:26:07:93:
                    58:8a:ff:d6:8b:4d:96:00:46:93:9a:a0:e4:c0:b7:
                    ef:55:40:ca:bb:d2:a1:d0:90:99:4c:57:82:d7:78:
                    9a:db:57:72:0c:e9:56:3e:8a:e2:4f:da:ad:e6:6f:
                    4a:db:ae:1e:f3:43:5b:0e:17:88:13:3f:49:43:e0:
                    c0:82:52:3e:8b:11:e4:b7:17:bb:06:0b:93:d4:9c:
                    31:87:8c:0a:4d:80:d9:3a:25:67:0a:43:83:58:1d:
                    3c:ed:4e:61:4d:33:7c:f8:41:f4:cd:52:fe:9c:e8:
                    b7:12:b1:c0:84:88:30:cb:73:1b:4f:62:41:13:69:
                    e3:03:54:f2:b3:79:ae:68:3b:d8:9e:50:c8:55:93:
                    c8:b1:90:df:12:02:6b:91:43:53:59:44:6f:07:fd:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E8:27:B9:EB:1A:DE:30:C5:DE:E9:5D:7F:CA:BC:EA:22:CB:9A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:95:37:ba:89:e9:ec:3f:81:23:31:00:75:43:03:25:3f:89:
         ef:29:09:c1:72:19:00:07:c3:c1:93:d1:b6:d2:8d:a5:7b:e9:
         0f:b8:84:09:46:72:5f:ef:7d:a9:c0:bf:ee:dd:95:b4:69:8a:
         e3:9d:06:11:7d:29:35:34:a1:f8:ef:6d:4e:ea:a5:98:9e:23:
         35:f5:ca:08:b1:36:6e:9b:5c:c3:87:9c:9a:3c:96:98:f4:95:
         7f:33:b2:3f:57:85:ec:3d:29:be:16:16:cb:9a:98:75:db:17:
         ee:82:f2:bd:d9:99:4e:9d:ce:ad:5d:eb:6d:14:51:08:bc:56:
         83:0e:56:5d:e3:38:e6:3e:df:35:16:c6:40:bf:25:f0:08:9e:
         47:fc:1c:4c:79:90:c9:18:7d:c3:8c:18:bf:59:97:28:fd:10:
         fd:e1:ad:6b:d2:36:c4:cc:6d:42:48:1c:24:f7:fc:2d:cd:76:
         bb:6d:0c:09:df:42:a0:2e:2b:55:41:a0:d3:72:77:0c:70:2e:
         64:e1:3c:30:49:a0:30:56:27:77:8c:f9:a1:fc:52:60:d7:d1:
         d8:79:ec:69:92:02:59:1d:e1:c7:d5:0d:cf:92:5c:4f:d1:b8:
         12:0c:2f:9b:e2:d4:82:12:71:2a:04:1b:1c:07:80:e9:97:2c:
         8b:cc:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org