Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa
File:                     b592519b-2458-3376-88aa-1a85ad209d0e.roa (raw, json)
Hash identifier:          ir6+wO5nIyc1aK0DvAr1ijutS3EnPqeRcdQo78LhdoU=
Subject key identifier:   2D:AE:B9:DF:F0:41:F9:93:5A:86:F7:47:EA:CC:63:6D:6C:D5:0D:8D
Certificate issuer:       /CN=3daec053-17f8-47be-a17c-d2007ce5700c
Certificate serial:       010D0C9F43285847362B6658EDF555D5A57B7F00
Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     11185
IP address blocks:        167.253.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:66:58:ed:f5:55:d5:a5:7b:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=c47dbb35-0dfa-45af-a3a8-941344ece51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:25:b9:38:b9:20:4e:90:a7:d8:8a:d4:ea:
                    2e:af:b0:04:12:e2:ab:6e:0d:69:ec:82:3b:de:fc:
                    e5:d3:08:a3:5f:92:7d:4b:6b:aa:29:99:23:29:7f:
                    35:7e:3e:f0:c0:9b:18:ce:1d:75:f2:e1:ff:7e:97:
                    77:09:0b:13:67:b7:6b:37:4b:0f:8d:d8:a5:5b:89:
                    30:0b:05:91:4c:36:80:e8:5c:52:f3:9a:60:2c:2c:
                    18:d1:66:f6:1b:b8:23:d2:a9:fb:bc:65:a9:87:3d:
                    11:1a:c8:e3:8c:d1:25:6e:8d:8c:7f:88:22:b6:ce:
                    13:aa:8c:bd:a3:73:12:66:76:60:af:fc:22:d5:a1:
                    93:4e:96:d3:80:e7:e7:36:c2:51:f2:e1:33:92:d8:
                    38:d0:c9:7a:eb:78:db:d7:32:ae:80:41:06:71:ac:
                    cd:bd:72:40:f6:c8:ea:64:ce:e4:14:e3:3d:b2:28:
                    32:75:87:20:43:25:e6:c0:7b:a6:39:cd:ef:52:ed:
                    eb:79:b3:94:2c:7b:7b:06:bf:65:26:7c:c8:b3:08:
                    02:32:19:5a:fe:68:b3:92:e6:86:9d:3e:72:6f:49:
                    7d:96:51:6a:bd:b4:67:c6:dd:43:28:b3:e4:7e:62:
                    bf:0b:c1:79:05:db:71:04:31:b6:9e:32:e3:b7:2e:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AE:B9:DF:F0:41:F9:93:5A:86:F7:47:EA:CC:63:6D:6C:D5:0D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:63:73:d3:a0:58:3b:2b:2e:dd:fb:61:95:21:80:5c:7f:
         97:de:c1:36:61:e5:a3:25:8d:c0:c1:0e:6b:48:bc:c7:3a:86:
         0b:e2:12:e7:eb:64:e4:b2:4a:2b:96:af:d4:d1:03:28:04:22:
         e5:50:b6:68:25:9c:93:bb:e2:3b:18:8b:7d:94:a8:2a:43:67:
         3b:be:84:2a:19:43:ca:a5:cd:36:6b:53:b9:51:f3:df:e7:60:
         fe:a8:2e:6c:64:2e:00:78:3e:49:37:6c:2d:c1:13:39:61:80:
         5f:f4:10:aa:42:ce:90:ec:89:b8:7a:f0:69:d3:da:d2:60:ff:
         a9:fe:46:4f:c4:72:8b:a0:31:fa:6e:18:2e:ae:d6:ae:b9:ab:
         fd:c7:42:1d:d9:2a:71:a3:90:8f:20:b9:7f:c4:ae:74:e0:bb:
         c0:5a:be:09:a9:3c:f7:39:5f:9e:54:c0:62:5c:99:1e:85:47:
         9b:7d:4d:53:d0:db:87:c3:7c:ef:82:cb:02:c9:70:df:21:09:
         d2:b9:a4:96:a6:38:34:3d:5a:52:b6:2b:53:2c:3c:7e:81:bf:
         ef:dd:21:af:c3:1f:8c:86:da:64:09:82:c0:63:c9:9a:71:c7:
         51:a1:a8:93:24:79:98:69:08:50:69:ce:eb:3b:e9:85:3a:77:
         3d:40:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:21:52 2024 by rpki-client on console-fra.rpki-client.org