Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa
File:                     7617a713-113a-32ec-a9f3-7445af2d9726.roa (raw, json)
Hash identifier:          fLDMpL8tdwvEaEpthKuj2LeMU32GytEwNl470rJAa4U=
Subject key identifier:   64:75:13:93:26:2A:BD:CB:CE:82:36:91:1B:9E:59:59:AC:46:DB:08
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F43285847BAE7A31FC13039D1FAAF9E00
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa
Signing time:             Fri 01 Nov 2024 02:07:01 +0000
ROA not before:           Fri 01 Nov 2024 02:07:01 +0000
ROA not after:            Thu 30 Jan 2025 03:07:01 +0000
asID:                     6079
IP address blocks:        167.253.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:e7:a3:1f:c1:30:39:d1:fa:af:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Nov  1 02:07:01 2024 GMT
            Not After : Jan 30 03:07:01 2025 GMT
        Subject: CN=97d7c267-0ab3-4fdb-87f3-2fe6e8a9b8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:35:35:82:ca:3b:31:a5:18:a4:fd:94:92:10:
                    36:60:65:85:66:59:e3:87:b6:eb:97:a2:df:8c:15:
                    7b:8c:b9:e6:b5:7d:f6:f3:58:6b:35:22:0b:78:8d:
                    ef:b1:33:b8:2a:14:47:aa:eb:54:3b:0e:fa:be:c0:
                    02:37:5b:90:bf:74:5b:1d:a0:38:0b:4d:28:82:e1:
                    87:a2:db:31:76:0f:22:04:74:44:73:2c:53:c3:8b:
                    43:25:ff:04:fd:28:09:94:35:a1:3b:c6:99:e7:d8:
                    9c:22:a4:65:76:4c:17:1a:26:f0:f1:08:fd:66:3b:
                    c0:bc:26:bd:0d:e2:a5:c5:e8:33:61:ae:4d:20:bb:
                    6a:da:4d:0f:2a:c5:13:58:cd:96:24:8e:71:b9:0b:
                    10:cd:2a:00:41:fb:8c:fb:0d:9a:35:37:32:51:98:
                    61:73:b1:c3:5d:07:7c:41:22:23:e5:b3:36:98:5f:
                    97:ef:17:b4:72:11:70:41:79:51:ac:3a:d1:d9:74:
                    a2:91:8e:09:23:d6:e6:cc:35:2b:d1:b1:ff:de:24:
                    c4:05:9b:de:65:2a:58:2a:01:7a:69:62:38:91:a7:
                    35:71:d5:ae:7b:a8:b5:e9:77:63:b6:4d:a9:e3:a2:
                    10:3a:83:a6:24:de:33:5b:87:e8:77:ef:c4:6c:92:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:75:13:93:26:2A:BD:CB:CE:82:36:91:1B:9E:59:59:AC:46:DB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:5b:7d:b0:02:45:fd:d8:f8:1f:38:90:97:98:47:8e:8e:
         87:fc:0b:e4:d7:b5:ae:6e:5a:37:ce:27:c9:11:70:e9:3a:3b:
         53:71:da:67:6a:0d:85:e1:79:75:bc:e6:d1:4e:ae:ea:4e:1a:
         21:4c:02:c1:13:d9:3d:f4:a9:c1:d9:ac:a4:74:f4:09:6e:13:
         44:8a:95:95:37:1f:06:4c:5f:b7:3e:fe:3a:6f:1b:bc:1e:fa:
         28:e1:12:3c:6d:a6:25:6a:5a:2b:87:a4:24:0d:86:f5:67:ea:
         96:7b:94:55:6e:ee:1f:06:50:50:d7:6d:27:d2:87:49:7a:66:
         f3:d1:f5:21:f8:c1:50:b8:0b:d1:5d:8a:81:2f:17:13:49:c6:
         ad:58:bc:ba:5e:81:a4:44:56:7c:fa:28:b6:dc:b3:2d:e0:02:
         ad:cb:3b:38:e9:7d:6a:12:cc:04:de:2e:b5:0f:9f:36:ad:63:
         b9:47:43:54:cc:c5:45:f3:4c:9a:60:e4:c7:87:47:54:1b:bc:
         0f:3a:fb:48:34:bd:12:91:0e:e5:7f:90:25:50:be:b3:52:63:
         02:6b:58:c3:64:82:a6:f5:76:41:c5:58:22:72:b4:27:dd:f0:
         b5:b7:79:21:19:e9:fe:a6:e0:0a:fe:fc:9b:49:47:3f:2f:13:
         70:9f:8b:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe656MfwTA50fqvngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl
ODRhMB4XDTI0MTEwMTAyMDcwMVoXDTI1MDEzMDAzMDcwMVowLzEtMCsGA1UEAxMk
OTdkN2MyNjctMGFiMy00ZmRiLTg3ZjMtMmZlNmU4YTliOGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zU1gso7MaUYpP2UkhA2YGWFZlnjh7brl6Lf
jBV7jLnmtX3281hrNSILeI3vsTO4KhRHqutUOw76vsACN1uQv3RbHaA4C00oguGH
otsxdg8iBHREcyxTw4tDJf8E/SgJlDWhO8aZ59icIqRldkwXGibw8Qj9ZjvAvCa9
DeKlxegzYa5NILtq2k0PKsUTWM2WJI5xuQsQzSoAQfuM+w2aNTcyUZhhc7HDXQd8
QSIj5bM2mF+X7xe0chFwQXlRrDrR2XSikY4JI9bmzDUr0bH/3iTEBZveZSpYKgF6
aWI4kac1cdWue6i16Xdjtk2p46IQOoOmJN4zW4fod+/EbJK+BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGR1E5MmKr3LzoI2kRueWVmsRtsIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw
NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvNzYxN2E3MTMtMTEzYS0z
MmVjLWE5ZjMtNzQ0NWFmMmQ5NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh
NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4
ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm
NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/17MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEipW32wAkX92PgfOJCXmEeOjof8C+TXta5uWjfOJ8kRcOk6O1Nx2mdq
DYXheXW85tFOrupOGiFMAsET2T30qcHZrKR09AluE0SKlZU3HwZMX7c+/jpvG7we
+ijhEjxtpiVqWiuHpCQNhvVn6pZ7lFVu7h8GUFDXbSfSh0l6ZvPR9SH4wVC4C9Fd
ioEvFxNJxq1YvLpegaREVnz6KLbcsy3gAq3LOzjpfWoSzATeLrUPnzatY7lHQ1TM
xUXzTJpg5MeHR1QbvA86+0g0vRKRDuV/kCVQvrNSYwJrWMNkgqb1dkHFWCJytCfd
8LW3eSEZ6f6m4Ar+/JtJRz8vE3Cfi94=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org