Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa
File:                     9f83846a-ab72-3e0a-839b-d7f346b74e34.roa (raw, json)
Hash identifier:          7VMjBq3G9d4uKSfpTWpWkliz9e/GVcxq5RwBss2H8VQ=
Subject key identifier:   CF:A3:C6:67:39:CD:28:08:01:1A:06:DC:42:06:59:DB:85:A5:0B:E6
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285845BA7E341A74A6111C65815680
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     18434
IP address blocks:        156.55.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:34:1a:74:a6:11:1c:65:81:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=4a06c3ef-a181-4592-9775-3084a4246d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:fb:b5:99:6e:3b:b0:88:74:e7:38:e8:bf:
                    40:9a:a2:6e:0d:37:c7:df:33:93:31:d6:60:fc:f1:
                    6b:2a:02:85:85:36:41:8e:4f:14:e3:57:3f:af:04:
                    3c:5f:04:80:f4:4a:be:7d:3f:fe:b9:9c:8d:a1:1a:
                    0d:3a:4a:95:78:0c:62:aa:42:72:a0:81:1a:f6:aa:
                    fb:1f:a3:9e:36:96:bd:87:c3:57:44:ba:06:10:64:
                    f0:4e:fb:6f:27:f0:26:2d:01:86:f2:b7:5a:64:6e:
                    88:6a:63:a2:e4:00:b8:a3:42:82:07:d3:f2:75:91:
                    d7:e4:5a:da:c1:18:87:64:83:15:9c:c7:a3:24:4c:
                    d5:ea:88:65:b8:9d:ed:82:96:79:ca:0e:b0:ec:3e:
                    5f:7c:9c:08:95:ad:31:a4:44:90:00:e1:c0:2b:53:
                    a5:d8:33:47:c5:d0:80:bd:a9:1a:38:de:1f:0e:7d:
                    74:fb:29:d2:8d:f0:e4:32:eb:78:fd:f7:c9:aa:ca:
                    f5:11:69:c2:6a:86:64:51:7f:5b:90:f2:b2:76:15:
                    fc:48:3d:5a:ed:22:ae:9e:39:c8:ea:9d:b5:06:ad:
                    b1:9c:75:9b:66:34:f9:8d:48:ad:57:23:db:c1:08:
                    9f:a3:e3:43:84:45:c1:53:32:27:52:7d:1e:a4:44:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:C6:67:39:CD:28:08:01:1A:06:DC:42:06:59:DB:85:A5:0B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d7:3d:1f:49:ce:28:3e:d3:b7:e0:70:31:4f:f7:a2:1d:6b:
         58:bb:d7:1f:65:8e:48:91:e7:94:46:d3:81:a6:cd:1a:bb:92:
         22:40:fd:ad:31:b2:77:d4:e6:b1:d7:8b:86:58:40:ec:eb:e9:
         12:c3:67:bc:b5:55:54:28:a7:5f:6c:08:66:6f:87:02:3e:c0:
         e0:f4:15:37:57:fa:a4:54:17:f9:09:6b:67:c9:79:fa:35:fe:
         2c:84:79:9a:52:64:6c:6a:7e:20:ca:48:4b:2a:eb:d5:12:6a:
         00:9c:ba:06:44:b2:1a:a2:f4:f4:d5:b2:77:96:73:87:ad:72:
         1b:98:f8:1f:d8:de:63:68:b2:8c:54:14:55:43:d7:73:82:32:
         84:c1:8e:62:ff:de:40:d8:37:05:5f:04:4c:8f:a9:e7:f5:d9:
         01:46:e5:57:cc:d5:f8:e9:36:c4:c4:42:ec:5c:14:d6:07:a3:
         a2:9a:1f:e3:81:2e:2f:ae:ae:32:69:e0:58:c5:69:91:45:f1:
         83:c1:c5:78:1c:dc:78:b7:c5:ba:21:26:f6:20:f7:4c:28:27:
         ed:ee:0b:36:a9:d7:9e:4d:cd:56:3b:06:59:a0:02:c1:bb:3d:
         fa:45:79:ab:40:d5:d7:b2:28:9e:01:72:b9:b4:af:3d:6d:66:
         a2:8d:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:22 2024 by rpki-client on console-fra.rpki-client.org