Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df2836c8-d356-366b-9f56-51228a19c810.roa
File:                     df2836c8-d356-366b-9f56-51228a19c810.roa (raw, json)
Hash identifier:          vTfd0D+o/t0phXLXT2Kryvz2fWD7LX6Mek0VkTBgxH0=
Subject key identifier:   89:93:34:9B:6A:C5:9E:08:77:C8:E5:13:A3:A9:51:47:21:DC:D9:CC
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F432858487755DE58592E06A9BE610100
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df2836c8-d356-366b-9f56-51228a19c810.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     7992
IP address blocks:        67.193.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:de:58:59:2e:06:a9:be:61:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=292c04f0-49db-4132-888a-6e2ad4c43387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:27:86:e8:a3:38:68:0d:62:e9:7b:1f:48:c3:
                    24:d3:fc:8d:cb:ef:1d:f7:33:7d:40:dd:14:ed:47:
                    1c:8c:74:1b:28:b5:23:53:73:da:ec:c4:7e:cf:f9:
                    a2:c1:13:1c:98:2b:65:d5:39:6f:43:ae:95:db:23:
                    3f:06:4f:07:27:3d:96:df:29:29:be:ef:3a:83:b5:
                    83:84:d5:cf:e2:01:97:02:67:b2:fd:7e:2f:56:9c:
                    9a:c6:bd:07:b5:92:df:9e:b3:fe:ad:40:3b:89:f0:
                    a2:3a:30:8e:fe:fd:9e:06:19:4c:18:39:8b:b6:6c:
                    b0:e6:1f:02:f7:3c:e2:4a:9b:f9:46:38:93:b3:9f:
                    eb:33:40:f7:af:c3:6f:ed:56:62:88:ce:71:28:1b:
                    23:76:ae:b2:62:1c:ed:8d:45:32:ad:59:56:80:58:
                    19:59:a9:86:50:89:3d:2c:0d:f9:d0:8e:b4:04:f0:
                    05:f2:92:b9:b7:32:fd:71:e2:ec:9a:8c:9b:50:48:
                    0b:a9:7f:76:4e:99:e5:b2:4b:6e:b8:d4:14:0c:68:
                    06:90:66:a5:f2:07:d3:ce:e5:96:0a:72:e8:51:08:
                    52:0a:bc:78:da:c6:a1:4e:80:43:c9:43:14:7e:68:
                    e5:ac:ff:dc:db:f0:67:dd:6e:01:5a:af:8b:29:ac:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:93:34:9B:6A:C5:9E:08:77:C8:E5:13:A3:A9:51:47:21:DC:D9:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df2836c8-d356-366b-9f56-51228a19c810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:62:b3:3a:3b:7e:d7:8e:73:05:b0:60:10:c8:9a:20:93:
         74:ad:3e:0e:3c:fd:2a:f6:14:39:26:6a:f0:bb:2b:c5:28:2a:
         39:89:e3:f1:4f:3e:6f:12:2f:f8:62:2f:31:df:9c:79:d0:37:
         51:88:f7:27:32:2c:b1:94:5d:f3:ec:6b:55:9a:6b:30:dc:7f:
         1c:19:35:a8:39:48:b7:eb:91:78:50:6f:ce:f9:49:04:ff:7e:
         60:59:b8:ca:3a:35:fb:3b:32:72:e4:29:81:aa:36:bd:87:4e:
         54:00:06:3c:b5:df:c6:89:ef:64:62:47:4b:b8:39:44:7c:1e:
         63:8a:81:ee:24:2d:54:6a:42:8d:56:2d:b8:31:47:eb:2a:b4:
         19:4c:64:89:7a:9f:4d:32:0d:ed:79:35:8c:07:28:71:10:68:
         7e:36:33:c9:4b:4c:02:ff:d9:50:db:95:1d:70:e8:c7:02:a4:
         9f:71:1b:6c:48:0e:aa:d7:94:5b:5d:e0:f0:3f:f5:bf:22:3b:
         a4:24:cc:59:1e:95:ba:f9:4d:66:69:86:88:23:8d:d8:18:b3:
         05:a4:8f:83:3c:97:d7:91:1a:e8:d5:61:92:72:19:56:b9:bf:
         fb:a0:3a:8f:85:05:ee:3c:15:93:90:a6:49:f6:5e:ee:04:85:
         f5:e1:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:19 2025 by rpki-client