Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa
File:                     233a0102-08e5-3132-8734-cafae1c8bd28.roa (raw, json)
Hash identifier:          z9TFYkKoULA7xFMleJSbCCCKjdeg7RhO4NqmiQrHNIY=
Subject key identifier:   E9:72:8D:7E:F9:ED:2F:1E:6A:D6:4F:79:4D:8A:A1:11:94:0F:D7:AA
Certificate issuer:       /CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
Certificate serial:       010D0C9F43285847924BCF9BAC174360D94D93E8
Authority key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     53356
IP address blocks:        167.253.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:cf:9b:ac:17:43:60:d9:4d:93:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=0615c317-72e2-4762-a75c-005a52df177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:10:4e:60:9e:c7:50:f6:26:2c:ba:41:92:
                    03:bb:eb:01:0c:70:33:4c:21:59:8f:7b:a5:33:99:
                    e7:d4:fa:71:bc:75:6b:dc:ca:af:43:4a:81:8d:9d:
                    85:07:6f:d5:1e:3a:4b:f7:bd:ba:e8:41:e8:05:53:
                    36:50:45:43:02:02:57:9c:a2:8e:28:d6:e0:35:47:
                    6c:47:fd:3b:d6:e1:36:5c:14:cb:53:ca:d4:ef:52:
                    0b:18:db:61:00:ef:d5:29:96:b5:cc:96:9f:65:ae:
                    67:70:e7:cf:78:bf:14:c3:8f:cc:36:2f:8a:a7:d0:
                    ec:f1:ac:26:74:e5:07:62:be:9a:1c:5d:22:9d:d3:
                    6a:c3:62:60:76:73:37:c9:7a:d1:99:58:2d:6f:9f:
                    11:ac:a2:69:01:6d:3a:c5:31:82:f9:c3:f7:d3:63:
                    09:40:df:06:32:f1:b2:5b:fe:08:d2:7d:ae:42:bc:
                    28:36:f2:53:2b:8a:6f:87:e7:c3:58:8e:a8:47:aa:
                    f8:8f:00:82:cb:77:f3:e8:b2:3f:d5:b8:89:60:08:
                    d3:b2:55:5e:0e:54:44:af:06:a4:a8:21:93:83:c7:
                    16:5a:95:75:01:25:67:23:58:ca:91:33:ac:cd:82:
                    a3:b9:25:70:73:a2:32:fe:4b:1e:c5:25:80:85:fd:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:72:8D:7E:F9:ED:2F:1E:6A:D6:4F:79:4D:8A:A1:11:94:0F:D7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl

            X509v3 Authority Key Identifier:
                keyid:3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:fb:92:ad:68:e2:3e:2b:a9:0e:6a:d3:a5:b2:ab:0a:d7:cb:
         65:e4:82:c6:20:d1:0b:ab:dc:86:47:55:f8:8d:ed:eb:4a:70:
         2f:f5:d5:ea:3f:cc:d0:03:09:3f:1f:12:e9:ad:e3:45:83:ad:
         1c:b5:67:06:92:d2:01:48:96:64:36:0a:e9:e8:5e:07:e2:8f:
         a3:dc:56:e5:f9:ea:7e:8c:fa:0d:32:22:9a:ca:17:01:ed:60:
         b4:17:6c:dc:3e:fd:3e:b4:77:0d:64:bc:39:ec:a1:a2:93:dc:
         39:69:31:8e:72:95:d3:72:34:71:8e:0d:92:ff:c3:9d:e2:ba:
         1b:98:fe:7a:ba:9d:7f:2c:18:b0:9a:17:17:d9:35:6c:b0:ac:
         10:1d:98:b7:52:cb:bd:f0:5d:05:d9:87:ec:e7:ed:fb:51:be:
         38:3f:d8:98:c9:83:b1:71:25:04:f9:5c:2c:fc:b5:9e:88:67:
         26:16:29:47:af:d9:f8:30:ec:c7:26:d0:99:f4:17:bc:15:e3:
         45:7e:fd:f6:1a:59:8d:4c:85:7c:c5:1d:3d:1e:f3:6f:a4:c7:
         6d:af:63:a5:df:53:c3:82:50:04:59:86:d7:30:8a:81:3a:9d:
         e3:92:7a:33:83:39:31:98:64:68:82:38:d2:79:74:c1:58:04:
         70:30:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org