Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6fd23c1-d1ec-33e7-b968-64397e2efd3a.roa
File:                     e6fd23c1-d1ec-33e7-b968-64397e2efd3a.roa (raw, json)
Hash identifier:          fRe4ZfSTxhmykOymISo18gct7OBvYSIuJmarmxKLua0=
Subject key identifier:   A7:03:46:A3:F8:E6:D5:37:BF:A7:D7:B6:FC:C2:EE:EC:8D:53:3A:88
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847C8D9D5C6737F76BB086D4920
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6fd23c1-d1ec-33e7-b968-64397e2efd3a.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     11164
IP address blocks:        163.253.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:d5:c6:73:7f:76:bb:08:6d:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=9bcc0587-a9c4-46a5-adf1-4dd2b9211d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:6b:51:3f:95:f9:6f:fc:11:92:4f:1d:e4:
                    44:0f:14:bd:82:df:83:7c:ad:b4:b1:8e:77:7f:46:
                    b6:de:41:d6:10:52:55:14:da:47:72:90:87:af:89:
                    7d:7b:6e:3c:bf:16:a4:57:c9:e2:7d:32:91:10:db:
                    1a:5e:29:73:c1:64:ca:e8:29:04:b3:ca:3b:9c:05:
                    a8:cc:df:8e:b8:5d:41:9e:75:fd:2b:27:86:77:5a:
                    80:bb:41:88:dd:0e:dd:85:3c:d8:5d:23:3f:87:0e:
                    29:c1:b4:4b:19:b1:a4:f3:4d:cb:9b:69:24:65:39:
                    9a:3b:42:58:0b:e0:61:2f:d5:a9:37:ea:3f:75:de:
                    08:04:75:b3:2c:58:dc:77:45:76:cd:8a:6a:4e:1f:
                    09:ae:7e:88:74:3b:c1:ab:26:df:ac:80:f4:e5:7b:
                    65:b1:85:cf:2f:5f:c6:93:ad:7c:9d:d4:a5:df:38:
                    93:43:d9:4b:af:9a:26:7d:0a:c6:a9:96:77:3e:8c:
                    5c:15:74:1a:f3:2b:87:a3:69:6e:69:1f:4d:03:8b:
                    65:5b:90:17:00:14:3e:bd:6d:47:72:ee:e9:66:65:
                    e5:bd:47:3f:0a:66:1f:9d:14:6b:83:2d:00:0f:c6:
                    c8:34:49:4d:4a:e2:71:51:cb:e9:fb:9e:b9:a3:a4:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:46:A3:F8:E6:D5:37:BF:A7:D7:B6:FC:C2:EE:EC:8D:53:3A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6fd23c1-d1ec-33e7-b968-64397e2efd3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:9d:fd:20:c6:aa:cb:66:a5:a2:a3:dc:7d:61:c6:69:3c:
         ca:1b:a8:1b:58:60:b7:ec:91:e2:ee:7a:14:68:25:e6:b1:b1:
         06:02:44:ea:9e:a3:c4:0f:4e:cb:fb:c0:ca:82:8d:5e:b5:68:
         26:7e:34:ff:34:b2:56:11:4e:80:9a:1c:df:06:c5:c3:1a:e2:
         79:d1:b5:5e:13:3e:38:76:de:4c:11:c7:f5:0c:a4:ef:d6:cb:
         5b:52:05:47:ac:54:72:f8:dc:f4:4b:27:74:71:cb:12:95:97:
         40:29:19:27:47:19:23:40:48:94:b3:06:75:1a:0a:9a:4c:99:
         5a:e7:75:7b:ed:e4:50:af:12:bc:1b:66:cc:20:c0:38:94:66:
         a3:27:a3:9e:ad:ff:ce:c9:33:f4:65:78:36:2c:84:6a:10:ed:
         80:75:21:b5:4b:a9:aa:c2:c7:0f:d4:c7:3a:ee:70:e8:fd:47:
         8e:b6:68:67:96:92:8a:d1:7b:1e:1f:6b:93:8f:7e:c9:e7:20:
         02:f7:cb:8d:21:72:67:ec:58:b4:e7:7f:9b:80:27:50:03:9e:
         89:a3:d8:4c:df:d2:15:59:7a:29:b2:a5:b0:d8:1c:cf:4e:a2:
         5b:2f:75:a3:48:3f:2a:49:2a:1e:57:27:0e:f1:0b:e0:a5:f1:
         14:36:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:46 2024 by rpki-client on console-fra.rpki-client.org