Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/794abdc3-ec30-3d87-bee9-bffbd1709212.roa
File:                     794abdc3-ec30-3d87-bee9-bffbd1709212.roa (raw, json)
Hash identifier:          9r4H1QSMFCFims3pkt3mtLo7q0xnacdjhSdahbxNP48=
Subject key identifier:   4A:CE:E5:D8:A7:22:A7:60:CF:48:77:8C:6D:F9:A0:14:46:04:7E:A9
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F43285847BAE7A7770E52E16FA2BA0580
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/794abdc3-ec30-3d87-bee9-bffbd1709212.roa
Signing time:             Fri 01 Nov 2024 02:07:03 +0000
ROA not before:           Fri 01 Nov 2024 02:07:03 +0000
ROA not after:            Thu 30 Jan 2025 03:07:03 +0000
asID:                     6079
IP address blocks:        167.253.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:e7:a7:77:0e:52:e1:6f:a2:ba:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Nov  1 02:07:03 2024 GMT
            Not After : Jan 30 03:07:03 2025 GMT
        Subject: CN=ff59e362-e96e-4609-aa60-852055b243eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:81:fa:bb:1f:d2:fb:1a:3f:54:f4:7b:15:
                    b0:c0:dc:70:d9:dc:b2:58:de:2f:91:b9:91:b1:ae:
                    57:d2:39:76:20:73:42:7d:90:df:70:91:ff:ed:c9:
                    f5:4f:2d:ed:65:6e:2e:fa:4c:fe:81:d8:0d:0e:29:
                    1c:09:2a:70:17:c6:22:d2:21:b7:20:5f:70:f2:c4:
                    fe:89:73:cb:af:26:e9:95:83:66:bc:ea:90:8b:3a:
                    6a:60:2c:40:ae:50:86:e8:74:3e:35:a7:c2:8c:ef:
                    a5:ed:ad:10:0b:89:ef:e8:ff:ae:8c:3d:3d:b8:28:
                    2b:61:4e:16:9e:5d:27:cd:07:ae:dd:4f:3f:0b:12:
                    2d:ec:01:4b:a2:be:22:ae:c4:aa:59:24:44:53:d4:
                    48:ad:cb:79:a7:ee:36:de:6c:f3:6e:19:ab:f6:4c:
                    b7:a7:b7:44:de:d2:bc:ab:e2:45:67:80:5a:9a:6d:
                    9d:38:a3:ac:e1:df:3f:4b:17:5c:03:82:9c:b0:6f:
                    f4:49:84:e5:b0:b6:42:d6:19:a1:c6:a9:c4:4d:b4:
                    20:f3:17:4c:31:51:74:5f:f2:ba:2a:f4:e6:75:21:
                    1c:2f:d0:5e:ff:d3:78:57:f8:38:4a:b9:8f:d1:cd:
                    88:ef:92:fc:f4:9a:f9:46:90:18:89:a0:b1:e9:06:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CE:E5:D8:A7:22:A7:60:CF:48:77:8C:6D:F9:A0:14:46:04:7E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/794abdc3-ec30-3d87-bee9-bffbd1709212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6c:80:64:5f:ee:d1:c3:65:f9:07:c0:f4:da:a9:7a:14:dd:
         31:b6:4e:e1:c1:9b:2b:91:1c:b1:4f:6f:b9:7d:83:e5:f0:c4:
         dc:a4:7b:30:bd:ac:81:dc:d1:2b:1c:89:8a:22:82:b9:06:82:
         65:79:12:ec:ec:1b:b3:95:74:f7:20:45:5a:3b:f8:84:2d:1f:
         54:6b:46:ae:cd:76:c0:a9:9e:fd:fd:34:60:e8:fc:a1:c6:81:
         02:9c:82:17:a9:c1:ed:18:6c:85:09:f4:0e:fe:fe:93:a4:57:
         01:4b:30:6d:1e:07:07:e5:aa:35:59:e6:73:c4:0a:9e:73:8a:
         55:29:14:81:7a:ff:43:25:ee:9a:cd:58:48:13:72:7b:0f:81:
         13:c9:97:5b:8f:7c:8f:f8:83:66:c8:eb:23:25:0c:93:06:60:
         b2:43:3b:68:b6:ca:8d:4e:16:08:74:ae:8a:d2:ca:e5:a9:c3:
         1d:80:cb:9c:d3:ae:dd:b2:69:19:52:1e:6f:58:53:46:8a:56:
         57:d4:7a:b5:17:ee:92:0d:29:45:db:3d:ea:b0:d9:ab:59:6e:
         ac:6b:92:08:5d:44:5b:6e:ca:1f:cb:96:f5:06:dd:2f:9d:4d:
         e7:9d:9a:2c:17:e4:14:c2:3c:05:b5:46:a2:4e:c9:31:30:83:
         20:0d:25:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe656d3DlLhb6K6BYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl
ODRhMB4XDTI0MTEwMTAyMDcwM1oXDTI1MDEzMDAzMDcwM1owLzEtMCsGA1UEAxMk
ZmY1OWUzNjItZTk2ZS00NjA5LWFhNjAtODUyMDU1YjI0M2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYeB+rsf0vsaP1T0exWwwNxw2dyyWN4vkbmR
sa5X0jl2IHNCfZDfcJH/7cn1Ty3tZW4u+kz+gdgNDikcCSpwF8Yi0iG3IF9w8sT+
iXPLrybplYNmvOqQizpqYCxArlCG6HQ+NafCjO+l7a0QC4nv6P+ujD09uCgrYU4W
nl0nzQeu3U8/CxIt7AFLor4irsSqWSREU9RIrct5p+423mzzbhmr9ky3p7dE3tK8
q+JFZ4Bamm2dOKOs4d8/SxdcA4KcsG/0SYTlsLZC1hmhxqnETbQg8xdMMVF0X/K6
KvTmdSEcL9Be/9N4V/g4SrmP0c2I75L89Jr5RpAYiaCx6QYPowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErO5dinIqdgz0h3jG35oBRGBH6pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw
NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvNzk0YWJkYzMtZWMzMC0z
ZDg3LWJlZTktYmZmYmQxNzA5MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh
NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4
ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm
NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/16MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9sgGRf7tHDZfkHwPTaqXoU3TG2TuHBmyuRHLFPb7l9g+XwxNykezC9
rIHc0SsciYoigrkGgmV5EuzsG7OVdPcgRVo7+IQtH1RrRq7NdsCpnv39NGDo/KHG
gQKcghepwe0YbIUJ9A7+/pOkVwFLMG0eBwflqjVZ5nPECp5zilUpFIF6/0Ml7prN
WEgTcnsPgRPJl1uPfI/4g2bI6yMlDJMGYLJDO2i2yo1OFgh0rorSyuWpwx2Ay5zT
rt2yaRlSHm9YU0aKVlfUerUX7pINKUXbPeqw2atZbqxrkghdRFtuyh/LlvUG3S+d
TeedmiwX5BTCPAW1RqJOyTEwgyANJQg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:38 2024 by rpki-client on console-fra.rpki-client.org