Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa
File:                     d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa (raw, json)
Hash identifier:          pqFuAWB9eOPb8jO34HQMSLaulrqBxrGixdQuTxAgCZ8=
Subject key identifier:   AE:41:A2:D4:B9:41:0D:EF:8B:62:61:C6:5F:29:CA:58:74:61:8D:BE
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858451CE03514FC3534056D8C8D00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     396961
IP address blocks:        163.253.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:35:14:fc:35:34:05:6d:8c:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=3c5218b2-543e-443a-b257-143f06a937fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:c2:e0:97:8b:98:cb:97:94:c8:ae:e5:75:
                    39:af:e8:cb:c8:b5:69:1f:9b:0a:e6:04:2f:30:5e:
                    2a:a3:89:0e:44:07:1e:db:fd:82:f7:be:11:fb:43:
                    d5:81:bc:f5:6c:84:2b:4e:44:e1:a7:58:63:5f:40:
                    c0:98:fb:0b:b0:f7:19:b2:4d:7d:8e:1a:e5:a5:00:
                    61:c6:98:78:2c:ce:53:6d:f5:5a:a2:24:0f:54:35:
                    79:f6:0b:a2:f1:c1:c0:f5:63:84:a6:58:ee:41:cb:
                    5f:fd:cf:f0:eb:ef:82:57:0b:d5:77:bc:fe:11:e6:
                    8a:e1:3b:f5:89:0b:b5:9f:d8:f4:3d:60:00:7d:48:
                    6f:3f:09:89:96:70:69:8e:6f:17:98:cc:90:80:b8:
                    fd:ef:ba:92:99:b8:24:49:b8:67:70:96:58:39:42:
                    ee:2f:b1:8b:e0:b9:4e:9a:56:c4:2c:af:ee:df:9a:
                    30:17:6b:49:68:fd:db:e7:8c:c8:ec:84:63:5f:46:
                    03:73:89:0f:a8:56:ca:61:50:1c:a7:22:12:93:78:
                    26:a4:fa:dc:d1:cb:33:23:8f:13:ec:f5:58:87:e1:
                    8a:83:ec:e6:14:8f:8f:7c:37:ce:9f:5e:80:95:4f:
                    b5:3e:b5:70:b5:d6:01:40:2e:72:b6:5c:32:c8:70:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:41:A2:D4:B9:41:0D:EF:8B:62:61:C6:5F:29:CA:58:74:61:8D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:4a:72:e2:51:74:8a:eb:31:81:61:a1:73:1f:66:07:df:9c:
         58:d5:c5:54:6a:a9:a7:9f:75:e4:cb:e0:a9:22:da:9f:cb:ab:
         f5:60:e7:fc:f0:ce:39:49:c9:64:f7:dc:e9:7f:1d:0b:8e:fa:
         db:49:ac:ff:f0:0e:69:18:4e:cc:cf:14:40:39:4e:11:b1:79:
         a5:a9:20:3b:18:65:d4:d1:9e:66:55:17:03:a7:81:dd:79:e6:
         ca:3b:20:cc:f0:4c:1f:ed:54:b0:03:be:fa:b5:8b:bd:5d:a6:
         28:71:48:2c:f1:7b:c0:43:b6:57:5d:ae:ac:10:01:ed:7c:26:
         96:7f:92:f2:df:5f:7b:4d:af:f7:48:56:e3:81:fa:99:e4:fb:
         c4:98:9f:36:ec:f9:bd:a9:da:57:97:46:0d:6b:14:bc:3c:d9:
         28:67:f7:55:f1:2e:a4:e6:68:7e:3b:9f:9c:da:e6:a8:17:3b:
         a3:70:ce:0a:52:5c:cf:f1:a5:91:97:5b:da:25:2f:e2:1f:90:
         94:a1:af:ab:6f:cc:34:33:fd:04:42:18:db:49:0b:0d:6f:8f:
         56:ea:39:4f:32:22:e1:3d:ab:93:1d:72:d9:f5:33:59:ad:57:
         91:fd:80:1e:55:8f:4a:19:b0:ff:eb:ce:e9:95:63:5c:fb:51:
         e8:fd:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:02:55 2024 by rpki-client on console-fra.rpki-client.org