Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
File:                     5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa (raw, json)
Hash identifier:          XGeKQEi5UOmpIsAXwrOezqcPKlVrYYJ7zvUjleT/o5Q=
Subject key identifier:   A7:F1:53:36:61:E7:FA:49:35:78:FA:05:54:1B:BF:48:29:20:2F:D9
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F432858471A40685C17A32F4BD2E22380
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     397422
IP address blocks:        67.210.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:68:5c:17:a3:2f:4b:d2:e2:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=ac671cf3-2fa7-4f4b-9a16-2cfe19c83ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:35:1e:1b:fe:63:35:b9:97:a8:cc:e7:41:
                    6a:56:41:52:c3:d1:3a:63:21:60:8f:d8:48:f1:e4:
                    7a:7c:ff:7f:fa:40:a2:34:24:09:4f:96:dc:bc:b1:
                    44:2b:3d:16:79:65:46:5a:10:f4:ca:41:48:8f:ce:
                    a0:1e:34:b6:57:b3:2c:98:8e:c1:26:35:06:38:fa:
                    f6:3a:ea:50:f0:9b:56:e3:eb:bf:0c:69:f7:cc:83:
                    e3:19:15:c8:8e:9b:92:7f:04:02:fe:1c:45:03:c3:
                    a1:5c:25:f7:4a:37:f8:ea:68:14:ff:ae:d7:43:8d:
                    66:6d:55:84:c9:e9:a8:bf:9a:ca:be:db:ab:d0:c7:
                    e1:76:29:92:fc:f0:5b:7d:87:1e:c8:01:94:aa:21:
                    e9:f4:41:70:2e:a1:e0:c4:d4:42:8a:12:d2:e8:dd:
                    6c:e4:81:51:0b:57:da:7b:de:35:2a:2e:87:74:0a:
                    77:02:c8:be:21:33:41:8c:b8:0d:a2:07:f4:f6:3c:
                    ac:51:22:c0:38:7d:6f:34:4a:26:c9:07:c7:fd:eb:
                    39:66:86:11:6e:5d:e7:d5:72:e5:a5:80:ec:e9:a7:
                    8d:f0:c1:13:56:2c:79:99:8b:46:fc:77:fe:40:a0:
                    14:5c:06:30:2a:a9:d8:75:bb:42:08:8f:77:0f:c8:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F1:53:36:61:E7:FA:49:35:78:FA:05:54:1B:BF:48:29:20:2F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:a8:1c:ac:5f:84:a1:05:bd:7e:35:87:03:5c:69:f4:82:
         ad:2d:9b:1b:1b:c5:39:96:9a:79:0c:3c:f4:88:79:97:98:e3:
         07:62:b8:1b:14:09:b3:e3:61:a6:07:55:54:bf:0e:2d:0e:9c:
         3a:c1:f1:6b:ad:d4:97:2c:a8:55:2f:24:1d:91:54:c2:ba:de:
         15:50:d2:25:7c:82:ae:f4:22:c0:ad:c1:5d:c3:a6:cc:3b:b4:
         cc:9f:24:a5:4a:28:44:37:08:26:c7:32:22:b4:04:3c:7b:0f:
         dc:24:9f:fb:c6:95:69:47:68:c8:9c:dc:1e:de:a6:ec:3e:c4:
         20:25:b5:98:fd:dd:07:cc:c8:36:bf:d4:4f:fb:ad:1c:0e:a4:
         de:8b:8b:eb:e9:68:37:9c:85:35:d6:d8:dd:47:d1:cc:21:14:
         60:9a:7a:80:f7:03:9a:68:9a:e8:fa:46:80:8a:94:79:f1:d2:
         77:6d:29:7b:23:cd:13:b9:59:75:6b:7a:19:d3:94:fb:86:1b:
         d0:6d:a4:93:96:71:3c:a6:98:88:59:61:d2:a1:1b:9a:fe:1f:
         0f:33:17:63:12:d4:c9:06:b0:68:6b:2a:e1:1a:3a:e1:75:3e:
         df:09:b6:ab:d2:c0:11:e4:f6:75:3e:e6:2a:cd:57:55:9c:38:
         12:ff:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org