Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/13c78d74-ded4-38e9-b672-3e845bf2f837.roa
File:                     13c78d74-ded4-38e9-b672-3e845bf2f837.roa (raw, json)
Hash identifier:          L+sZPjb9r0LfFTwg+8Ju8vca48fdCfsdNpN8vkL6EOM=
Subject key identifier:   EE:0D:C2:E0:13:B5:35:07:DB:D9:8C:AF:2D:8C:A2:02:36:81:3F:3F
Certificate issuer:       /CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
Certificate serial:       010D0C9F43285845B5712B0F5E46DAC97A53EB00
Authority key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/13c78d74-ded4-38e9-b672-3e845bf2f837.roa
Signing time:             Mon 29 Apr 2024 17:35:24 +0000
ROA not before:           Mon 29 Apr 2024 17:35:24 +0000
ROA not after:            Sun 28 Jul 2024 17:35:24 +0000
asID:                     212150
IP address blocks:        167.253.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b5:71:2b:0f:5e:46:da:c9:7a:53:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
        Validity
            Not Before: Apr 29 17:35:24 2024 GMT
            Not After : Jul 28 17:35:24 2024 GMT
        Subject: CN=bbb78dd5-e01d-48f9-a9ba-ef61508d0620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:8b:0f:64:e2:7e:c9:08:36:ff:c9:f3:1c:
                    55:2a:ef:cc:ca:97:26:fa:8e:f1:1f:c1:12:9a:72:
                    63:92:51:d8:1c:28:31:93:d6:58:1d:b8:67:a1:a7:
                    e3:8b:1b:d8:c4:fb:f8:70:09:e9:ca:57:ca:a6:1f:
                    5e:0f:1e:3c:76:f8:ee:02:8f:ba:b6:83:c4:ce:75:
                    ac:9b:57:7d:59:2e:88:9d:fb:7b:50:bc:5b:22:e0:
                    6c:48:44:9e:4b:ab:56:2c:c3:ef:93:ad:cb:ff:b3:
                    29:27:2d:6b:61:a2:99:80:a0:25:db:d0:f5:1b:21:
                    9f:8f:c4:8a:01:ab:b0:53:9b:94:d1:04:e4:2f:62:
                    2c:3f:f6:8d:2c:2b:ef:71:c2:0a:1f:ef:f8:6f:a5:
                    cf:31:df:61:69:ae:2f:60:00:54:e6:5c:37:d6:c1:
                    2e:a3:0a:ad:d2:57:70:e1:0b:79:f9:61:3d:c3:a3:
                    c0:83:21:c7:32:38:c1:86:59:25:ab:51:ba:00:9c:
                    cc:f0:5e:11:35:24:cb:75:ed:0f:8b:c5:6e:bd:4b:
                    d8:dc:52:6e:a9:c7:cb:43:bf:ec:03:95:e3:df:db:
                    62:33:21:aa:00:71:02:5a:f8:04:21:41:4c:80:c0:
                    d8:81:e0:a6:43:ea:40:e1:ea:7f:8a:b2:2e:2f:37:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:C2:E0:13:B5:35:07:DB:D9:8C:AF:2D:8C:A2:02:36:81:3F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/13c78d74-ded4-38e9-b672-3e845bf2f837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl

            X509v3 Authority Key Identifier:
                keyid:3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:89:48:53:03:32:4a:01:2f:1e:04:d8:e7:c4:99:2a:c1:ab:
         87:67:22:74:75:36:98:61:ed:ac:d7:a7:31:fb:32:4a:40:b6:
         6b:32:a2:57:fd:d7:ce:d6:2c:50:73:0c:77:0a:77:74:42:76:
         16:98:c9:e5:53:ba:a9:a4:99:9d:76:f5:92:99:cb:73:03:39:
         00:25:ae:d0:6a:d1:a2:f7:ca:4b:29:04:17:44:2e:23:ab:2a:
         d7:cd:7a:ab:76:aa:9a:c1:cb:31:2c:a2:9b:e1:f0:f8:84:17:
         2c:49:bf:5f:46:7c:09:13:78:93:99:49:4a:85:e9:70:62:30:
         00:88:dd:bb:65:66:f4:2c:c2:55:29:7d:cd:f3:ef:a8:80:0e:
         01:07:aa:93:fb:24:4f:1f:0e:20:21:c7:3f:a5:91:5d:32:71:
         5d:64:04:a0:df:4f:3a:aa:14:e7:d5:20:30:08:6f:73:94:38:
         a7:5a:00:fe:f3:e4:f9:e0:0b:ba:4c:18:f9:9b:39:58:c1:9c:
         63:6a:05:28:2a:74:5d:d9:d5:11:96:67:bd:fc:7a:0e:43:2b:
         b1:ce:5f:bc:dc:97:44:c2:17:8b:b5:69:a0:a9:2f:a4:bf:f2:
         e8:48:21:ce:fc:b7:f1:47:51:75:84:d1:65:91:d8:88:f4:b7:
         7c:d4:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:16:54 2024 by rpki-client on console-ams.rpki-client.org