Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa
File:                     8465acbb-141f-32cb-bf36-567b501bdefb.roa (raw, json)
Hash identifier:          SkjMKMw/8t+brga2Iui2PKNCRYuB6VTcOFkhfWZFCRU=
Subject key identifier:   BF:2F:6D:E8:D7:CD:9E:17:0A:46:02:62:FA:A3:78:00:C1:D5:F7:85
Certificate issuer:       /CN=3daec053-17f8-47be-a17c-d2007ce5700c
Certificate serial:       010D0C9F432858457671A3758EF7888F98307700
Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa
Signing time:             Sun 07 Apr 2024 04:00:26 +0000
ROA not before:           Sun 07 Apr 2024 04:00:26 +0000
ROA not after:            Sat 06 Jul 2024 04:00:26 +0000
asID:                     2386
IP address blocks:        167.253.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:76:71:a3:75:8e:f7:88:8f:98:30:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c
        Validity
            Not Before: Apr  7 04:00:26 2024 GMT
            Not After : Jul  6 04:00:26 2024 GMT
        Subject: CN=ee7723d3-1f7c-4d5a-8a33-57e293f971d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:55:d0:bf:ed:0d:d3:36:b0:8e:83:54:e6:
                    58:6c:bb:92:c6:a1:06:22:56:d5:01:12:a7:0f:77:
                    91:b6:b2:87:41:8a:55:d6:ce:af:96:54:3e:88:41:
                    9d:bb:b9:14:d2:60:1a:c4:b7:e9:40:20:db:f9:08:
                    ce:14:95:da:b5:27:ff:94:11:36:9b:d8:68:54:aa:
                    63:b4:8b:80:57:62:47:13:a3:0e:3b:69:16:9e:e7:
                    a4:f5:7e:85:58:d3:ef:e3:c0:f1:b3:b3:d2:16:8b:
                    4e:dc:70:64:86:0d:17:d2:4f:24:5b:4e:fa:7d:03:
                    73:d2:0c:ae:0c:c5:c6:61:a3:32:f7:8a:ba:fe:f8:
                    54:16:14:56:fe:47:f4:f3:84:c4:1d:97:17:64:e0:
                    69:8e:b3:4d:14:21:49:ac:94:d1:43:2e:8f:14:99:
                    f6:81:90:3c:fb:34:92:24:dc:ad:5a:a7:75:6f:6a:
                    8d:aa:35:0b:fb:21:17:13:97:29:fa:0b:cf:e4:99:
                    a9:b3:0f:4d:df:22:70:86:00:be:08:f2:6f:4a:80:
                    8e:d0:ef:d6:1f:22:02:23:0b:47:9d:78:29:22:af:
                    db:d0:1c:d8:40:41:5d:1b:73:1c:70:c3:63:86:53:
                    f3:2d:1c:d9:29:24:46:5d:57:f4:5d:e2:96:f4:a2:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2F:6D:E8:D7:CD:9E:17:0A:46:02:62:FA:A3:78:00:C1:D5:F7:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:91:84:85:64:3e:41:8e:33:37:cc:d5:78:1e:a8:10:ed:d8:
         29:15:19:a5:4e:aa:d5:27:2d:1c:ff:33:d5:31:39:d0:65:a6:
         f2:d1:05:12:56:66:59:ab:ff:64:5a:cb:2e:97:d7:0d:0a:69:
         dc:b0:b9:03:04:d9:f2:52:18:c8:8d:ca:72:15:52:c3:70:57:
         08:04:b1:83:5d:7f:5c:86:52:a6:ca:26:d0:e7:71:a2:de:37:
         5a:ef:15:18:f4:ca:a4:9d:e8:6f:ae:ed:69:fe:70:8c:4b:11:
         6c:fa:d1:7c:f0:b5:a8:bc:d5:f2:98:81:c7:53:4e:05:da:cd:
         56:46:bb:fe:da:82:43:96:86:8e:83:0c:34:a7:a0:9f:0e:74:
         e0:71:7d:4f:98:4d:ef:47:31:1c:34:67:73:f0:7e:51:68:f3:
         e3:39:e2:10:f4:8e:ae:b3:88:7b:7e:f7:f4:3b:45:94:fd:18:
         92:e7:6c:ed:ec:13:6c:f8:ff:eb:16:ad:16:0f:54:8e:21:9d:
         fe:54:ee:6f:2f:1b:fe:58:eb:8b:53:17:7b:5e:8b:f2:07:3d:
         7c:4c:c1:38:66:ba:84:26:2b:c0:33:68:d3:28:5b:ff:a8:0b:
         6f:69:8f:77:95:81:cd:af:e5:e8:b6:86:e9:db:50:cf:86:d4:
         7f:f0:26:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:48:41 2024 by rpki-client on console-ams.rpki-client.org