Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/408e0517-5414-33e0-aec6-8883b377a46f.roa
File:                     408e0517-5414-33e0-aec6-8883b377a46f.roa (raw, json)
Hash identifier:          JR0bnVdd1q2nJLwB3M1T1vgdsMJekHbG3gQX/yLWE/g=
Subject key identifier:   AA:DF:0A:FC:A6:BD:62:45:C4:2E:A9:C3:13:6D:81:AC:0A:61:B5:52
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F43285845CAFD7C9DCAE8D037FDC5E9E0
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/408e0517-5414-33e0-aec6-8883b377a46f.roa
Signing time:             Tue 07 May 2024 10:50:06 +0000
ROA not before:           Tue 07 May 2024 10:50:06 +0000
ROA not after:            Mon 05 Aug 2024 10:50:06 +0000
asID:                     6079
IP address blocks:        167.253.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ca:fd:7c:9d:ca:e8:d0:37:fd:c5:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: May  7 10:50:06 2024 GMT
            Not After : Aug  5 10:50:06 2024 GMT
        Subject: CN=22f36403-3fd9-489b-81ad-7f334303b791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:0f:2f:06:8c:d1:f1:72:d0:2a:35:73:54:
                    d9:ce:af:a5:b6:90:7d:52:1c:1a:cf:86:af:72:49:
                    43:af:fc:a7:18:47:37:35:7c:98:68:34:82:ae:b5:
                    97:ea:9b:98:03:8e:f5:0c:16:d4:a3:4c:a5:ae:e9:
                    0a:7c:d9:3c:5d:fc:1b:9c:6f:e7:98:bb:88:c5:12:
                    3c:2e:5b:e9:ae:7b:f3:2e:00:03:7c:c0:55:1d:d5:
                    4f:ab:d6:09:7c:c1:1c:ee:ef:66:94:6f:b6:3d:e6:
                    e1:c1:67:bb:88:e4:ba:1e:06:9b:3b:93:93:71:b0:
                    36:0b:f6:d5:ff:31:b8:94:42:3c:45:60:b1:e7:30:
                    ff:c9:55:72:3e:9b:17:3a:c9:40:72:0a:96:ab:39:
                    fe:b0:03:d0:c0:9a:23:a8:b0:dd:cb:06:31:1b:9c:
                    37:dd:dc:07:7f:13:76:b7:55:9b:2f:ca:b5:f7:01:
                    a6:ae:00:83:c9:a4:3d:e4:c5:9b:7f:53:39:9c:0f:
                    49:9d:29:ea:b0:6f:31:63:9d:0f:ae:24:cb:b7:30:
                    40:72:03:be:c6:ec:34:4d:83:d5:22:a4:f0:73:db:
                    9e:df:12:3e:06:bb:9f:8e:cc:2c:36:87:15:0a:89:
                    93:5a:1e:77:95:99:ee:be:c6:b6:d6:af:7c:5a:73:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:0A:FC:A6:BD:62:45:C4:2E:A9:C3:13:6D:81:AC:0A:61:B5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/408e0517-5414-33e0-aec6-8883b377a46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:a2:c8:d4:f0:58:1c:9c:26:ec:90:5f:3b:a4:ec:fc:ab:
         5c:2f:f9:63:da:aa:c4:bb:b2:9e:3e:1d:7a:bf:09:fd:04:c6:
         88:52:e6:ea:4d:cb:1b:02:f0:fc:2e:fe:87:64:c8:e3:e6:38:
         f3:d8:42:28:ac:db:70:c9:94:d5:cc:9c:ad:1c:67:cd:33:71:
         0a:50:01:7d:e4:74:23:5d:5a:3f:45:ff:ee:2c:5c:8a:dd:db:
         c2:c3:67:b8:ee:aa:c3:f0:d8:40:ab:2e:ca:7b:0f:28:01:8f:
         36:17:b7:c2:15:03:43:fa:41:3f:ab:85:2b:60:d8:4f:15:fc:
         ea:a6:f9:21:33:9b:e4:c5:ea:54:c4:bd:54:6f:35:57:2a:8f:
         08:e0:2f:48:9c:b2:ce:93:c2:ab:49:4c:2c:f5:21:af:9d:f2:
         19:15:5f:2c:31:f3:6b:c1:ea:8a:ec:fa:59:5a:ce:67:5d:a8:
         83:75:47:20:b9:89:8d:3e:eb:69:fe:89:07:96:56:82:6f:ef:
         c9:d4:14:f2:7c:5f:2c:fa:6f:61:07:bc:4c:51:de:48:7d:3d:
         e7:4f:fa:a3:af:e7:40:c8:a0:bb:51:6b:30:42:8c:0f:42:fd:
         76:f9:78:c0:1d:ec:92:95:c0:9d:ae:3e:31:00:d6:2c:3b:94:
         fe:a8:a6:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXK/XydyujQN/3F6eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl
ODRhMB4XDTI0MDUwNzEwNTAwNloXDTI0MDgwNTEwNTAwNlowLzEtMCsGA1UEAxMk
MjJmMzY0MDMtM2ZkOS00ODliLTgxYWQtN2YzMzQzMDNiNzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6IPLwaM0fFy0Co1c1TZzq+ltpB9Uhwaz4av
cklDr/ynGEc3NXyYaDSCrrWX6puYA471DBbUo0ylrukKfNk8XfwbnG/nmLuIxRI8
LlvprnvzLgADfMBVHdVPq9YJfMEc7u9mlG+2PebhwWe7iOS6HgabO5OTcbA2C/bV
/zG4lEI8RWCx5zD/yVVyPpsXOslAcgqWqzn+sAPQwJojqLDdywYxG5w33dwHfxN2
t1WbL8q19wGmrgCDyaQ95MWbf1M5nA9JnSnqsG8xY50PriTLtzBAcgO+xuw0TYPV
IqTwc9ue3xI+BrufjswsNocVComTWh53lZnuvsa21q98WnMI9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrfCvymvWJFxC6pwxNtgawKYbVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw
NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvNDA4ZTA1MTctNTQxNC0z
M2UwLWFlYzYtODg4M2IzNzdhNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh
NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4
ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm
NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/14MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElbosjU8FgcnCbskF87pOz8q1wv+WPaqsS7sp4+HXq/Cf0ExohS5upN
yxsC8Pwu/odkyOPmOPPYQiis23DJlNXMnK0cZ80zcQpQAX3kdCNdWj9F/+4sXIrd
28LDZ7juqsPw2ECrLsp7DygBjzYXt8IVA0P6QT+rhStg2E8V/Oqm+SEzm+TF6lTE
vVRvNVcqjwjgL0icss6TwqtJTCz1Ia+d8hkVXywx82vB6ors+llazmddqIN1RyC5
iY0+62n+iQeWVoJv78nUFPJ8Xyz6b2EHvExR3kh9PedP+qOv50DIoLtRazBCjA9C
/Xb5eMAd7JKVwJ2uPjEA1iw7lP6oprI=
-----END CERTIFICATE-----
Generated at Thu May 30 14:02:50 2024 by rpki-client on console-fra.rpki-client.org