Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
File:                     d884356d-6b66-398b-b1cd-f3edf2325b79.roa (raw, json)
Hash identifier:          wCIthodx3duW7iTsu61RntA6rF8eFxDwdPwbNmYyhng=
Subject key identifier:   34:9D:5F:61:E7:D2:D0:2B:C9:69:BE:E0:3F:2A:62:1A:1F:CF:E6:30
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F43285847BAE9EA5D8CB713DA861BE5C0
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
Signing time:             Fri 01 Nov 2024 02:11:37 +0000
ROA not before:           Fri 01 Nov 2024 02:11:37 +0000
ROA not after:            Thu 30 Jan 2025 03:11:37 +0000
asID:                     6079
IP address blocks:        167.253.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:e9:ea:5d:8c:b7:13:da:86:1b:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Nov  1 02:11:37 2024 GMT
            Not After : Jan 30 03:11:37 2025 GMT
        Subject: CN=f36ea736-4468-438b-9a3a-d7d49b888c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:fa:05:b6:11:15:93:a5:4f:af:17:9a:1b:
                    87:6b:ce:da:73:39:20:ac:3c:af:bf:6d:25:a6:0e:
                    79:e1:40:ff:e2:71:02:1b:e5:98:de:10:0f:84:48:
                    66:a0:12:f9:a3:fd:ad:3a:bf:a8:84:cc:96:4f:02:
                    6a:05:dd:90:3e:76:37:04:34:3e:6f:d7:cf:30:12:
                    46:7c:b8:57:aa:cb:e7:6c:3d:96:a6:47:f1:1a:82:
                    e2:4d:fe:34:f6:ff:52:68:67:6b:1a:c0:b3:be:33:
                    3b:db:57:56:9e:89:af:67:51:60:54:0d:03:f7:1c:
                    8b:96:45:30:a8:a1:b0:cd:85:0e:4a:e7:52:78:00:
                    30:5f:83:d6:ae:64:ef:c7:66:e4:0f:76:73:be:36:
                    87:4b:d0:e3:14:20:86:57:cb:fb:bf:85:0e:49:c6:
                    aa:76:94:80:86:a9:95:c1:f0:81:bc:1b:5c:c6:2d:
                    3a:b0:ba:dc:a1:7e:21:ea:0a:cb:92:65:11:b4:9d:
                    25:4c:dc:3d:16:c1:c3:c2:76:11:84:28:2f:bd:09:
                    61:69:f5:50:e6:f8:cb:e9:98:36:3c:e6:30:e7:80:
                    4d:07:09:21:f6:65:cf:1b:b4:fd:b6:9a:ba:dc:ff:
                    22:9b:18:b3:4e:05:8c:ec:56:37:26:66:1e:46:54:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:5F:61:E7:D2:D0:2B:C9:69:BE:E0:3F:2A:62:1A:1F:CF:E6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:ad:20:1c:ec:02:f9:bc:0e:30:02:43:13:0d:73:ad:3d:
         7c:44:ea:77:12:84:e0:7e:e1:37:61:4b:1e:6a:51:d5:76:49:
         27:12:60:b4:f7:d6:ee:52:60:6c:a3:69:ed:1b:5f:00:50:17:
         87:88:53:fc:9a:9c:b1:59:2c:20:31:ef:a5:bb:15:0c:89:82:
         25:4a:93:5a:76:69:c4:be:6b:31:7f:de:91:5f:d5:b1:87:f4:
         f3:f2:cd:16:dc:02:b6:b6:a0:5e:8b:ac:31:80:7b:2f:ac:cc:
         11:3b:4c:a8:23:89:a1:aa:36:cc:94:78:fe:ed:89:b1:d4:80:
         1c:6e:59:90:21:0e:1e:43:0f:d3:bc:c0:b0:d0:c8:da:cc:a3:
         0d:86:c2:93:a1:1a:9c:5b:b5:40:d6:d3:29:4e:f3:c4:00:a8:
         1d:01:74:fe:3a:b6:70:93:c1:80:34:cc:3e:f9:1b:10:bc:ac:
         28:9a:fb:9a:74:14:3a:96:e9:eb:e0:04:d1:6e:05:17:d1:fa:
         51:55:f8:f3:7a:a8:7b:ae:6f:26:f8:a1:75:a7:c0:81:f9:b1:
         89:8a:a6:9d:3c:e9:c2:23:a2:8b:90:af:04:de:7e:85:26:76:
         2b:bc:e3:42:e9:eb:61:7f:12:cd:1e:c0:d7:8b:f1:b9:25:ee:
         86:1a:66:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe66epdjLcT2oYb5cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw
ZTQ5MB4XDTI0MTEwMTAyMTEzN1oXDTI1MDEzMDAzMTEzN1owLzEtMCsGA1UEAxMk
ZjM2ZWE3MzYtNDQ2OC00MzhiLTlhM2EtZDdkNDliODg4YzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2L6BbYRFZOlT68XmhuHa87aczkgrDyvv20l
pg554UD/4nECG+WY3hAPhEhmoBL5o/2tOr+ohMyWTwJqBd2QPnY3BDQ+b9fPMBJG
fLhXqsvnbD2WpkfxGoLiTf409v9SaGdrGsCzvjM721dWnomvZ1FgVA0D9xyLlkUw
qKGwzYUOSudSeAAwX4PWrmTvx2bkD3ZzvjaHS9DjFCCGV8v7v4UOScaqdpSAhqmV
wfCBvBtcxi06sLrcoX4h6grLkmURtJ0lTNw9FsHDwnYRhCgvvQlhafVQ5vjL6Zg2
POYw54BNBwkh9mXPG7T9tpq63P8imxizTgWM7FY3JmYeRlRqhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSdX2Hn0tAryWm+4D8qYhofz+YwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3
NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvZDg4NDM1NmQtNmI2Ni0z
OThiLWIxY2QtZjNlZGYyMzI1Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3
MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz
MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz
ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjWrSAc7AL5vA4wAkMTDXOtPXxE6ncShOB+4TdhSx5qUdV2SScSYLT3
1u5SYGyjae0bXwBQF4eIU/yanLFZLCAx76W7FQyJgiVKk1p2acS+azF/3pFf1bGH
9PPyzRbcAra2oF6LrDGAey+szBE7TKgjiaGqNsyUeP7tibHUgBxuWZAhDh5DD9O8
wLDQyNrMow2GwpOhGpxbtUDW0ylO88QAqB0BdP46tnCTwYA0zD75GxC8rCia+5p0
FDqW6evgBNFuBRfR+lFV+PN6qHuubyb4oXWnwIH5sYmKpp086cIjoouQrwTefoUm
diu840Lp62F/Es0ewNeL8bkl7oYaZts=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org