Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/67ae88ac-7f20-36ce-a3af-da0c6b65c9fd.roa
File:                     67ae88ac-7f20-36ce-a3af-da0c6b65c9fd.roa (raw, json)
Hash identifier:          U7FX0s6ecwM3L09MdUlX5fvbTSRnuA2yvilY1vm/Iz8=
Subject key identifier:   2D:88:E2:5E:35:ED:29:EA:B6:60:F5:26:CF:6E:8A:5F:15:4D:AC:08
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F43285845A493B1D336FF25C298F9A400
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/67ae88ac-7f20-36ce-a3af-da0c6b65c9fd.roa
Signing time:             Tue 23 Apr 2024 16:36:14 +0000
ROA not before:           Tue 23 Apr 2024 16:36:14 +0000
ROA not after:            Mon 22 Jul 2024 16:36:14 +0000
asID:                     6079
IP address blocks:        167.253.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:93:b1:d3:36:ff:25:c2:98:f9:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Apr 23 16:36:14 2024 GMT
            Not After : Jul 22 16:36:14 2024 GMT
        Subject: CN=ae41d724-b093-45a5-b97c-7dd16b8a3dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:2d:02:05:ef:59:22:ba:c8:17:b6:0a:5d:
                    d5:8f:87:2c:9f:2b:3b:06:4f:2b:b2:cf:bf:ba:ac:
                    19:b2:bd:28:ef:b5:0b:f3:1c:c0:71:08:67:24:97:
                    61:66:ab:c0:80:06:7b:72:37:a8:eb:ee:67:ea:9d:
                    f0:a5:aa:a5:2b:62:d8:70:8a:77:7a:13:99:2d:24:
                    4b:60:74:12:b6:0e:23:cb:af:f4:51:ee:9f:d4:87:
                    eb:05:bf:6a:71:9a:e3:a4:80:9d:ce:5c:c8:8f:a0:
                    38:e5:3f:e7:f1:dd:97:21:6a:7c:1b:df:a8:f8:01:
                    3f:b0:17:69:3c:e1:e9:4c:df:3d:11:4e:05:91:44:
                    03:53:f5:f4:01:5c:f8:a3:ee:f8:4f:61:5e:59:06:
                    ea:d5:64:6a:75:56:6a:6b:a4:4f:34:0f:ea:08:67:
                    ef:81:cc:9b:a3:5f:ff:9b:2f:c6:17:bf:57:15:8d:
                    6d:1c:fe:b0:06:19:ed:04:a5:1f:60:6b:a8:a0:34:
                    27:78:6c:b6:f1:f2:09:fc:9e:43:12:7c:86:a4:e3:
                    84:58:24:66:7d:15:c1:4e:55:55:98:3b:5b:bb:49:
                    09:e1:33:9b:85:31:66:db:f0:58:2a:39:f8:e1:bd:
                    14:a7:67:be:2b:59:c0:61:18:a6:be:3c:84:99:cb:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:88:E2:5E:35:ED:29:EA:B6:60:F5:26:CF:6E:8A:5F:15:4D:AC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/67ae88ac-7f20-36ce-a3af-da0c6b65c9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:33:2f:d9:2f:8d:7b:03:12:29:82:ea:b3:47:24:d3:45:50:
         80:aa:fc:22:bc:b8:30:c4:c9:6b:8f:95:e1:f3:ee:b8:b7:49:
         a4:e5:08:99:1a:24:f4:37:2d:e0:62:3f:7c:30:f4:02:8f:45:
         5e:93:0a:e5:d3:02:00:f7:05:b3:18:0e:73:1b:32:aa:d9:ee:
         72:cf:f2:d5:e6:18:fd:7e:ac:6e:07:46:fa:58:77:83:69:d1:
         17:a2:b8:a0:7d:94:50:3b:3a:d8:85:1a:32:89:2e:4a:04:15:
         0a:9b:bb:f6:87:7b:c4:52:32:4d:ed:77:e6:15:9d:74:73:22:
         c2:54:12:a5:21:0e:35:5c:20:1c:1d:c6:d4:38:2d:9c:ca:a7:
         89:e1:48:db:19:37:a9:ae:c2:e8:21:9b:6e:5c:6b:6c:41:28:
         77:55:31:fd:79:b9:aa:80:1e:56:5a:e0:5d:5a:64:14:84:5d:
         9b:51:83:58:ce:e3:da:20:d8:35:96:3e:68:5d:bd:20:25:ba:
         2b:a1:63:f6:51:62:ae:7a:77:5b:9e:d5:bf:bd:8d:96:06:be:
         49:8d:96:b4:9a:23:0e:33:56:56:50:41:55:21:44:7b:4b:28:
         82:1c:b4:ab:fb:31:aa:f4:fe:5a:92:f3:9a:53:fe:84:56:d4:
         91:74:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:13:47 2024 by rpki-client on console-ams.rpki-client.org