Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/83973ecb-1433-39d0-bf70-cb884ea2e8d6.roa
File:                     83973ecb-1433-39d0-bf70-cb884ea2e8d6.roa (raw, json)
Hash identifier:          AKUhouJLZ+jBHeXbw8RITtT1eEfQDOHRjNO3i/qtXbM=
Subject key identifier:   D7:BD:72:15:65:90:AA:4E:85:8F:67:2A:0B:C4:32:B0:7E:08:2B:4A
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584531B29BEBA70C54917285B700
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/83973ecb-1433-39d0-bf70-cb884ea2e8d6.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     32771
IP address blocks:        167.94.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:9b:eb:a7:0c:54:91:72:85:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=f5ac23ad-1873-44a4-ba00-6f69605748e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:fe:32:be:3a:6c:6b:44:b7:55:b0:4c:a2:
                    9f:8c:55:02:1a:0d:db:bb:0d:8a:9b:f4:55:da:85:
                    9b:48:43:9e:56:eb:fb:e5:28:32:6f:6f:db:60:37:
                    72:f9:d8:4d:ee:47:a2:b9:87:e8:01:71:73:be:8c:
                    a9:41:a6:5a:b8:a8:c5:5f:cf:2e:47:08:4b:a4:4d:
                    44:53:51:cc:be:9a:a8:1b:ac:90:41:f7:81:eb:a0:
                    2c:39:c6:3f:a5:00:e0:b9:4c:d1:5a:7d:2d:07:c6:
                    ab:04:36:4e:da:bd:0e:25:c1:5d:84:a3:6b:f8:da:
                    63:70:ad:2a:b9:db:a4:44:5f:1d:38:13:82:a7:0c:
                    d0:b8:d7:41:a3:d4:4b:94:a6:51:98:34:52:14:3b:
                    13:ee:d7:9c:ad:d1:18:1c:6a:2d:7c:3d:1f:87:de:
                    a1:0d:f3:f4:60:aa:6d:94:e5:db:26:2b:47:9c:7a:
                    cd:28:72:f1:68:6e:01:49:7b:c1:1d:74:23:05:af:
                    32:21:a0:6b:d1:df:48:7d:1c:f6:0b:16:34:1f:f4:
                    7b:c7:41:3d:b2:7b:fb:e8:77:a2:8f:08:76:2d:cd:
                    68:31:5d:26:8b:bf:69:97:7a:44:97:88:76:e8:42:
                    e1:76:02:9d:a8:3b:67:bd:0a:db:57:de:0a:69:2b:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BD:72:15:65:90:AA:4E:85:8F:67:2A:0B:C4:32:B0:7E:08:2B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/83973ecb-1433-39d0-bf70-cb884ea2e8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:11:01:71:9b:36:78:10:ff:c3:ca:32:14:da:f3:f6:89:
         cf:55:b7:de:07:10:e3:d8:1a:64:bf:f1:52:55:bc:5e:94:da:
         15:8b:2a:0c:f8:32:80:70:81:17:0e:42:e2:3c:a6:64:a9:38:
         70:3e:ae:1f:98:9d:d4:37:82:51:1d:15:73:8a:90:c8:91:47:
         f5:8d:8d:2b:a8:45:81:6e:71:0d:52:21:15:12:9d:dc:99:53:
         c0:0d:d2:81:fb:10:f9:b1:65:2e:bd:02:05:b9:68:de:ed:f4:
         42:ba:9f:42:06:25:71:ac:5e:5d:b2:9d:19:75:79:33:b3:73:
         0a:95:97:ad:31:e5:11:4d:29:bc:2c:b7:dd:d5:87:db:43:cd:
         ab:5e:37:5e:ac:e9:02:61:82:be:85:4c:fb:aa:f7:91:28:1e:
         2d:b8:7b:82:fb:20:61:fd:0a:2f:60:fc:ec:fc:13:2c:25:4f:
         79:c7:1e:d6:c4:8a:a3:3f:5b:91:a3:24:e0:1a:76:50:3f:10:
         de:16:07:d0:8f:f3:aa:93:f5:2b:b7:39:d9:e5:cb:33:cd:37:
         6e:d5:e3:58:89:45:bb:d8:8b:20:04:bf:17:d2:12:b5:cd:36:
         a5:03:d3:fb:80:c1:41:64:16:8a:2f:a0:61:e8:db:87:80:13:
         53:d9:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:40 2024 by rpki-client on console-fra.rpki-client.org