Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
File:                     7c8dea26-fd51-3016-9371-cf841d680f6b.roa (raw, json)
Hash identifier:          lOBKcF7Lqpt/OSw8PstMXJH8fZ++CJxmVWCiKXjOICU=
Subject key identifier:   E0:36:75:A5:35:8E:D9:FE:14:4B:41:39:59:A9:16:37:0E:70:2F:7A
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F43285847BAE7AB2A14F0C6F4819D0420
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
Signing time:             Fri 01 Nov 2024 02:07:05 +0000
ROA not before:           Fri 01 Nov 2024 02:07:05 +0000
ROA not after:            Thu 30 Jan 2025 03:07:05 +0000
asID:                     6079
IP address blocks:        167.253.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:e7:ab:2a:14:f0:c6:f4:81:9d:04:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Nov  1 02:07:05 2024 GMT
            Not After : Jan 30 03:07:05 2025 GMT
        Subject: CN=0abe77c0-02ec-4e0f-9b8c-246ee5cfb1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:d9:f9:23:3f:03:78:02:d5:b9:7b:03:07:
                    e1:e4:c5:c9:c2:09:16:f8:aa:f7:1d:09:75:f4:7e:
                    69:03:4d:e9:9f:76:16:2a:ce:ba:2a:e6:31:62:e9:
                    87:15:c3:35:f9:5b:89:f0:a1:f5:72:2b:d3:d1:9a:
                    78:36:1a:29:28:be:56:92:a1:2a:8d:11:15:86:e7:
                    1b:7f:7c:a4:06:38:af:e0:74:53:c3:50:7b:8a:0b:
                    cd:12:58:bd:20:00:f4:df:62:1c:42:20:fe:ca:a3:
                    4d:40:15:56:10:7b:b5:19:f4:d2:67:f7:db:f8:52:
                    db:fa:bb:73:60:a3:52:87:ef:20:74:0f:84:10:61:
                    cb:b1:ba:7c:74:67:7b:ec:b7:f0:ac:8f:5d:c5:eb:
                    e2:69:07:e3:fd:b8:8b:33:6d:31:9f:d4:8d:3b:a4:
                    3d:60:2c:18:0c:23:9c:85:28:fd:99:a1:0b:2b:a1:
                    6d:69:dd:8c:36:eb:32:9d:83:6c:98:2b:a7:60:a5:
                    6d:e2:b2:32:c1:30:90:34:21:46:1a:0a:37:fa:2a:
                    4b:d2:a4:fe:8a:26:19:67:67:10:d7:e3:7c:11:49:
                    13:92:8f:9d:2b:e0:e4:99:40:18:55:3a:2c:f6:b3:
                    43:ec:1a:d0:a9:6d:ef:f1:fe:ef:92:08:c4:71:29:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:75:A5:35:8E:D9:FE:14:4B:41:39:59:A9:16:37:0E:70:2F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:7d:ba:6b:be:20:36:05:b9:1a:91:4c:b2:f9:d6:a9:7c:
         4b:95:4a:75:7b:21:15:e6:9d:c8:5a:6a:3b:e7:3a:4c:bb:d6:
         55:0c:10:2a:d7:31:b3:68:88:cc:b9:22:23:96:9b:a9:a8:0b:
         83:e8:5e:dc:e1:aa:d3:e7:39:c9:63:66:11:54:42:04:d7:42:
         8a:e4:f1:1f:97:7d:62:38:56:72:9a:a2:e6:4a:84:34:df:c2:
         31:9b:ec:e5:ac:35:4c:98:ea:9d:e8:22:64:51:2d:65:a6:ab:
         4c:bd:e3:d0:5e:95:5c:70:63:9e:dd:df:37:b4:d5:24:40:3c:
         1f:a2:ab:3c:3c:d6:33:fd:7d:b1:a8:d0:29:a5:bf:af:33:ec:
         ad:f9:d4:71:3b:8b:b3:c2:0f:8c:ff:e3:ed:db:eb:95:9c:b7:
         0e:93:3b:b2:9f:b2:8e:03:d4:a6:15:18:b4:80:cd:e6:5c:01:
         54:ce:bb:04:2f:50:86:93:11:bd:49:d8:40:4c:77:8d:17:fe:
         6b:b9:62:c9:90:d9:82:cc:c6:36:79:c3:d2:be:ef:50:83:16:
         65:ac:b6:7a:f0:d5:ae:33:95:9e:af:f5:d3:cf:e3:b7:48:cb:
         b6:f7:f4:62:63:cf:cc:61:57:e5:59:a8:ed:0e:00:2e:ac:b0:
         cc:ca:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:38 2024 by rpki-client on console-fra.rpki-client.org