Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/668fea58-8898-3ef2-9d97-17ba80cb423a.roa
File:                     668fea58-8898-3ef2-9d97-17ba80cb423a.roa (raw, json)
Hash identifier:          kKoEIOJQ55WT8EsmWlS+STDSX1ZXsnMwbPE7nxtWDQc=
Subject key identifier:   2D:21:FB:C7:2A:17:98:FF:3E:2B:78:3A:92:E0:2B:26:4C:0D:9A:39
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F4328584590D239B505C11140F45CFC80
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/668fea58-8898-3ef2-9d97-17ba80cb423a.roa
Signing time:             Tue 16 Apr 2024 14:46:03 +0000
ROA not before:           Tue 16 Apr 2024 14:46:03 +0000
ROA not after:            Mon 15 Jul 2024 14:46:03 +0000
asID:                     400384
IP address blocks:        167.253.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:d2:39:b5:05:c1:11:40:f4:5c:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Apr 16 14:46:03 2024 GMT
            Not After : Jul 15 14:46:03 2024 GMT
        Subject: CN=992198ce-3457-4c5c-94b2-cda6929685da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:4f:f2:14:24:fb:d1:9e:b1:0a:62:ed:0c:
                    5a:9c:66:64:0e:a9:f9:ef:54:26:d7:01:e0:2f:22:
                    59:3d:16:77:05:36:77:cd:18:f1:71:cb:cb:38:63:
                    93:6b:2b:e8:f7:b1:57:c3:e7:79:b6:d5:4c:40:5a:
                    b4:7f:0b:0e:ff:f1:c9:a0:3b:f5:95:aa:e2:7b:ac:
                    a8:b9:8f:0c:82:d6:33:38:fb:40:71:67:05:bd:bf:
                    09:00:e4:06:c7:04:06:e7:1b:70:3b:f9:bf:5a:3a:
                    90:21:93:f9:f6:ab:c9:59:7b:40:e2:f8:ad:b7:74:
                    49:a4:22:3e:60:99:8f:e5:a9:d8:2a:32:4d:be:e0:
                    ec:8d:56:49:0c:d7:97:db:c1:c9:3c:66:c6:7c:44:
                    94:19:ce:0b:07:9f:16:c7:99:f3:1c:b7:dc:1a:3a:
                    64:c9:9d:7b:34:a6:0c:93:a1:1b:e7:61:ef:bb:4f:
                    5f:80:59:ec:55:c3:96:bb:64:8e:c1:e6:f2:09:17:
                    e0:db:3a:8e:b4:2e:fd:70:b2:a5:16:17:11:21:25:
                    78:8f:4e:7c:fe:10:0f:88:a4:89:75:8e:ed:b2:fb:
                    cc:90:a3:21:10:35:68:9a:84:55:2a:83:e9:29:4a:
                    26:36:a6:13:c8:5d:03:29:82:b1:a1:31:7e:06:4c:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:FB:C7:2A:17:98:FF:3E:2B:78:3A:92:E0:2B:26:4C:0D:9A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/668fea58-8898-3ef2-9d97-17ba80cb423a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:02:f2:ce:3d:54:8b:4a:09:d3:11:82:0c:35:f6:0e:13:
         ce:a3:d2:2e:23:23:e2:a7:4e:ad:bd:fe:ae:6c:80:17:f8:e1:
         ae:95:5c:41:30:fa:7a:29:20:3b:d0:3e:06:af:fe:1d:f1:ed:
         55:d8:05:48:8d:2f:7e:36:66:ae:34:29:f9:70:73:32:27:d2:
         94:65:da:61:a1:1a:2e:28:01:fa:94:ce:af:20:ff:9c:e1:27:
         5e:68:59:d3:23:6b:05:bc:92:4c:fb:d9:35:4f:59:c6:4c:4a:
         3d:02:f6:47:be:e0:2e:56:49:a3:6c:17:a9:69:c9:7a:98:87:
         ad:c0:d8:d0:34:57:fe:f7:7f:40:3c:a8:72:cc:d3:a8:65:0f:
         3d:c1:9e:83:79:53:d7:9f:26:d1:09:c5:84:7c:12:7b:8e:67:
         a8:25:a7:15:c5:d7:97:0c:28:51:3b:a7:a5:50:b3:43:a3:f7:
         fa:5c:1f:46:8a:12:21:5e:c5:d1:5f:1c:5e:68:2e:df:1d:64:
         15:f5:94:f7:6c:f9:8d:5a:8a:38:9d:9f:13:ef:07:a3:df:57:
         25:dd:d4:9a:96:24:25:12:2b:6a:31:50:df:fa:78:84:ae:88:
         9d:d1:cc:e1:b6:52:2e:1f:cc:6e:0b:8b:c4:01:be:b0:b8:20:
         56:d2:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:11 2024 by rpki-client on console-ams.rpki-client.org