Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ad0923e4-dea3-3626-a0fa-a41fb081affc.roa
File:                     ad0923e4-dea3-3626-a0fa-a41fb081affc.roa (raw, json)
Hash identifier:          6D9Rop66sLgtyC+8UJwACUcqvGFGfVUiXBJvyzIlvic=
Subject key identifier:   1A:5F:D8:11:15:FF:F9:E4:AC:30:16:3D:DA:DB:E5:51:7B:0C:36:59
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584593689C56E91201A3C1FF4800
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ad0923e4-dea3-3626-a0fa-a41fb081affc.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     22925
IP address blocks:        162.250.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:9c:56:e9:12:01:a3:c1:ff:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=27dd8284-c8c2-45ff-b816-2762996d6bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:e1:d3:22:e0:73:67:05:5b:c3:be:ca:c0:
                    02:62:b3:0b:3b:aa:08:ea:e0:2d:14:41:3d:c5:64:
                    58:2f:41:ac:50:4b:c7:64:fa:e4:96:52:01:e7:a6:
                    be:7a:9e:2e:da:1b:d7:99:7e:e2:97:33:fd:a9:9a:
                    6f:52:48:db:ee:ab:82:96:7f:33:80:e7:ef:a9:4a:
                    34:a1:2d:6a:be:35:fc:0c:0a:c7:a1:ef:98:fa:f1:
                    ad:28:9a:0e:b4:6d:66:34:3e:bf:42:44:2f:d9:f5:
                    f5:29:21:8d:5b:46:e3:61:5f:16:f4:8e:96:66:e2:
                    32:8e:52:c5:df:bf:6e:d6:fb:fa:de:0c:82:d6:34:
                    98:ee:ea:ca:5a:ce:69:6b:d4:02:72:87:07:6a:c2:
                    a6:f9:8a:79:54:64:65:19:86:0b:65:99:f3:91:96:
                    f4:9d:4c:2c:74:55:5f:19:53:18:cf:f8:a4:b5:14:
                    2e:0f:b6:da:11:28:58:e1:c5:fc:9d:97:28:ff:41:
                    7f:7d:21:4a:9f:46:41:35:f0:8a:65:8d:49:7f:80:
                    35:ba:4c:4d:30:ae:8f:37:a2:95:9f:2c:e6:76:74:
                    c9:7d:ac:cc:ec:8b:a1:f4:19:8d:8b:7a:59:f9:33:
                    44:96:46:b4:4b:a6:b5:d8:d4:9d:2b:c0:25:ca:a4:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:D8:11:15:FF:F9:E4:AC:30:16:3D:DA:DB:E5:51:7B:0C:36:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ad0923e4-dea3-3626-a0fa-a41fb081affc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:42:d9:2f:19:30:f8:47:a7:29:bf:60:85:27:99:18:80:5d:
         26:dc:3a:4f:2a:28:3b:a8:a9:2b:46:4f:e5:c9:7a:12:2e:41:
         a8:b6:e9:35:44:3b:11:c6:8d:a7:e4:11:73:93:b5:da:6e:a2:
         6e:47:bb:98:51:1f:8f:fc:90:3f:3b:37:c3:9d:6e:8e:13:ff:
         ee:7c:88:46:de:ba:36:13:07:45:2a:16:8b:bc:35:22:26:6d:
         d9:e7:5e:35:2b:63:75:39:d6:fb:b2:19:e7:68:f0:fc:d0:7f:
         a9:2c:bb:22:3d:54:2f:ac:5f:01:97:0f:41:7c:90:a7:ad:e7:
         18:cd:01:ea:01:36:e8:82:d2:c0:db:08:f9:76:30:56:aa:7b:
         ec:75:06:c9:14:8f:8e:f4:99:a7:2b:8a:b3:b4:23:98:66:64:
         b1:45:91:54:32:90:2c:fc:8a:d4:a5:9e:5a:12:65:dd:ad:bd:
         9e:16:bb:15:59:bc:fc:20:08:78:80:b8:07:db:27:68:ab:1a:
         34:11:1a:9e:95:a2:18:50:4b:87:a0:f3:12:80:e6:67:79:11:
         46:0a:e0:f2:ff:de:80:55:7e:b2:6e:69:14:f6:3b:ac:27:48:
         fb:eb:9b:1c:ed:47:f4:15:3f:43:63:71:67:ca:08:39:41:eb:
         cd:ec:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:27:47 2024 by rpki-client on console-fra.rpki-client.org