Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa
File:                     cc14649a-e604-33da-b145-eed98529505d.roa (raw, json)
Hash identifier:          zrWl1dZ6kmlDqInpym8FBiy6/Oee1PhJgvQ5fzgQkeo=
Subject key identifier:   A8:D8:06:D5:60:0C:A7:9C:CC:71:57:E3:D7:A0:BD:48:FB:DC:7C:3E
Certificate issuer:       /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Certificate serial:       010D0C9F43285847CB14A9A711D8D40F839978D0
Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa
Signing time:             Wed 06 Nov 2024 21:10:41 +0000
ROA not before:           Wed 06 Nov 2024 21:10:41 +0000
ROA not after:            Tue 04 Feb 2025 21:10:41 +0000
asID:                     395494
IP address blocks:        167.253.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cb:14:a9:a7:11:d8:d4:0f:83:99:78:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
        Validity
            Not Before: Nov  6 21:10:41 2024 GMT
            Not After : Feb  4 21:10:41 2025 GMT
        Subject: CN=b9091d60-a1a8-42a3-8167-2b6d39ffe023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:a0:c4:cc:0d:7c:ab:7a:e0:a0:7b:45:44:
                    81:11:62:78:b8:83:94:04:be:9d:df:7b:9e:01:62:
                    4d:d9:83:41:f8:87:c9:98:c3:05:24:b9:57:1c:86:
                    66:0f:ef:f4:fc:4a:8a:14:51:1e:1d:9e:de:b1:2d:
                    2a:9b:e2:63:b8:c7:2b:e1:e0:61:4b:c4:a9:3e:13:
                    b6:a9:89:0d:c5:85:0d:80:65:5e:87:50:fc:c4:3e:
                    84:b4:5b:4f:c9:75:28:09:26:99:ed:47:ce:68:2d:
                    f8:58:d6:5d:b6:04:cd:71:fb:24:31:59:fc:ba:3d:
                    31:ce:b1:2a:a2:e0:fb:c5:e8:28:de:c4:03:7a:f1:
                    e6:e9:c9:ec:c1:30:7c:57:cb:40:8f:31:28:4b:86:
                    28:9e:db:f8:74:35:ca:d4:10:14:54:de:2e:29:04:
                    ed:61:2a:4c:d2:fb:f0:c9:d0:73:43:c3:7b:19:df:
                    4b:72:68:6f:03:b4:5f:95:9c:a4:b1:a9:e7:c9:85:
                    72:bc:19:0c:2d:f7:84:e3:96:63:c4:8f:1a:a3:ed:
                    d9:76:4b:35:5d:25:36:0a:a2:1c:5d:31:13:13:4f:
                    4d:73:f2:fd:72:d1:3c:fa:38:a2:de:bd:91:88:1a:
                    d8:a2:da:dc:09:ba:39:49:f8:9d:9c:27:4b:08:de:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:06:D5:60:0C:A7:9C:CC:71:57:E3:D7:A0:BD:48:FB:DC:7C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl

            X509v3 Authority Key Identifier:
                keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:85:6f:82:e8:7e:34:20:9c:ea:e4:77:12:3d:9c:df:8d:8d:
         4e:a5:ce:07:02:9f:fd:2f:c5:4b:3a:f2:89:50:46:4d:77:52:
         1f:33:69:c9:d3:08:bf:c2:cf:db:87:cf:4e:34:87:0a:b8:48:
         c0:df:04:72:26:4e:dc:5c:f6:8f:5a:47:a7:74:ad:d1:04:01:
         28:58:67:df:6a:37:13:8d:32:f6:53:16:76:60:b7:3b:11:b7:
         e8:0d:7d:12:77:f0:07:2a:88:9c:f3:db:74:9c:62:14:a5:7c:
         37:51:c4:ee:e5:f6:7c:4d:f9:1e:fe:20:d4:d6:d4:fb:28:2d:
         f3:ae:3a:31:74:c5:1d:1c:f5:c7:17:52:80:d7:7c:9e:fb:d0:
         ef:d2:6e:20:4d:89:5d:fb:fd:0b:96:47:6f:37:fc:82:fa:e1:
         6c:ac:54:7e:6e:22:c3:92:7a:29:7c:79:c7:29:d3:dd:4f:db:
         01:0d:4d:9b:9c:7d:90:0f:fb:2f:1c:2d:5f:3e:47:97:59:43:
         1b:ca:51:53:cc:96:ae:c5:74:89:d4:e5:1e:9d:55:65:49:78:
         55:94:ce:b0:20:3b:78:cf:77:fb:82:32:13:34:9e:fc:05:80:
         21:11:46:65:5b:12:29:02:c4:d8:ec:72:0b:ea:a8:83:ef:b1:
         82:d2:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:44:54 2024 by rpki-client on console-ams.rpki-client.org