Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/d3169145-b9c0-3c56-a034-5058af9453b7.roa
File:                     d3169145-b9c0-3c56-a034-5058af9453b7.roa (raw, json)
Hash identifier:          wfiBHTNazLwVU10YfD/8H4+gH7E+9w4Mjp6Gsoyqb8Y=
Subject key identifier:   24:19:A7:2A:06:A1:92:C9:84:C7:C1:9A:02:20:6E:28:38:D6:58:E0
Certificate issuer:       /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial:       010D0C9F43285845798C42AFBBBC287A15A68000
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/d3169145-b9c0-3c56-a034-5058af9453b7.roa
Signing time:             Mon 08 Apr 2024 06:41:30 +0000
ROA not before:           Mon 08 Apr 2024 06:41:30 +0000
ROA not after:            Sun 07 Jul 2024 06:41:30 +0000
asID:                     7018
IP address blocks:        167.253.22.0/24 maxlen: 24
                          167.253.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:79:8c:42:af:bb:bc:28:7a:15:a6:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
        Validity
            Not Before: Apr  8 06:41:30 2024 GMT
            Not After : Jul  7 06:41:30 2024 GMT
        Subject: CN=098ec9ae-fcfc-4e54-ab4f-f156aee2c435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:0c:7e:6e:5f:fc:de:3c:fe:13:90:7f:77:
                    79:94:69:3d:2c:ce:8a:d7:67:67:2e:6a:f9:41:40:
                    e6:a2:a1:f6:9c:b1:78:bb:40:cb:bb:cd:e8:29:8c:
                    68:13:d1:90:47:76:0f:6a:a6:a7:39:ae:28:7e:72:
                    01:75:4a:cc:80:04:4c:d0:aa:b0:02:bb:62:33:c7:
                    20:b5:8a:43:ab:94:94:b8:24:65:2d:79:ce:68:01:
                    62:37:96:d5:81:41:be:66:00:56:a5:44:17:90:75:
                    21:7b:e7:02:d2:bd:47:92:12:94:75:d5:25:3b:74:
                    8e:a2:a0:e6:81:1d:1f:3f:b6:8d:1f:56:dd:1b:c7:
                    51:e1:ea:a4:f7:1a:ba:09:a6:01:d5:fb:25:f7:6b:
                    5e:41:b6:51:a7:ee:bb:09:4f:25:4c:46:ac:2a:e7:
                    0e:ac:41:ad:ac:4a:e5:81:e0:07:10:58:2e:28:ae:
                    82:a1:e2:cb:b5:b3:a2:6d:52:2a:57:d9:03:c7:dc:
                    83:c5:21:d4:ef:6d:6a:a7:ad:7e:00:78:fd:b0:21:
                    69:e6:71:17:96:11:8c:12:9d:d1:aa:22:42:9c:f1:
                    ae:88:79:20:4a:81:17:90:37:a3:40:80:2c:56:e1:
                    c5:cf:5a:57:f6:df:95:45:33:bd:7a:c2:3a:49:b1:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:19:A7:2A:06:A1:92:C9:84:C7:C1:9A:02:20:6E:28:38:D6:58:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/d3169145-b9c0-3c56-a034-5058af9453b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl

            X509v3 Authority Key Identifier:
                keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:85:e9:df:aa:4d:80:99:db:53:de:67:86:02:8a:02:1f:01:
         ac:26:51:86:9a:7e:e6:cb:3f:00:8c:0c:5e:8e:9a:6c:f8:63:
         96:bd:2f:07:31:eb:a2:1f:76:ee:be:ca:b9:a6:59:01:0f:88:
         d5:09:bc:11:c0:ec:fa:29:88:4d:b7:5a:d6:84:a8:f2:e5:f8:
         c8:c7:82:64:5b:4f:3d:91:c4:9d:84:f3:51:04:52:96:0b:2c:
         9a:89:ee:b5:b3:7a:f2:43:fa:ef:20:27:c8:9a:e6:66:07:58:
         38:dc:34:53:29:35:f3:65:ee:82:ea:97:a2:39:a9:b2:f1:a1:
         b1:cc:df:5c:ad:9e:a6:03:6a:93:d8:af:2b:8d:ce:25:de:8e:
         3a:55:98:12:1f:db:c0:5c:27:bd:93:ad:28:5c:e6:9e:d8:2f:
         47:45:04:68:52:65:6e:71:f0:dd:fc:20:bc:04:2f:b1:e0:cd:
         c5:f4:bd:8f:53:7e:27:9a:9e:86:44:63:b3:c5:59:c2:ea:33:
         ca:8a:19:65:b0:7d:59:70:08:cd:b0:df:fe:68:11:e0:47:98:
         38:8a:c9:24:46:b9:7e:c9:f8:fb:c5:bb:39:b7:ff:6e:0e:e5:
         6d:c8:97:38:62:d3:3a:31:04:2a:b5:05:c2:c4:80:72:55:84:
         dd:85:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:50:10 2024 by rpki-client on console-ams.rpki-client.org