Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa
File:                     6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa (raw, json)
Hash identifier:          Zqqf8srRkxDnhWdoSP+bRlVg19VAOk7slLN46RjY9n4=
Subject key identifier:   FF:C6:36:DE:4D:50:65:FC:22:5E:CA:A4:63:A1:F1:ED:02:79:BB:3D
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285847C8D9D2B2CCC22D296529F880
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     0
IP address blocks:        104.167.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:d2:b2:cc:c2:2d:29:65:29:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=37b2a58a-33d7-4975-a687-85cbea25a262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:2f:55:09:c1:9b:30:ae:71:44:f2:80:76:
                    48:b7:f5:f1:d8:4a:6e:fe:f9:b7:e5:8c:31:63:ee:
                    10:19:b4:2d:46:2a:c0:c5:c9:71:80:01:14:2b:7e:
                    11:56:63:92:9c:1c:f8:10:d0:71:c2:99:67:ad:76:
                    9f:e5:43:d4:cf:b2:47:e2:d5:d8:1d:ea:c5:a0:9b:
                    79:6f:fd:27:fe:9e:92:56:af:a7:7a:16:d1:b6:10:
                    0f:91:59:25:11:33:bd:90:0c:69:fe:49:d8:14:f7:
                    e7:a8:07:0f:58:85:76:6f:c6:01:66:f2:68:88:0d:
                    96:58:7a:8e:fa:3f:b8:6f:b6:71:b2:0a:f0:44:af:
                    68:9d:dc:81:f9:0c:5c:c9:59:be:d0:ad:67:5c:ca:
                    fe:43:36:7c:76:88:35:b3:33:92:a3:40:c6:07:cf:
                    cf:c0:6f:67:ee:a1:4f:7e:cf:61:db:50:99:3f:ca:
                    b5:57:ed:c1:40:f6:bc:a2:8c:b4:f1:14:5f:85:e6:
                    0f:8d:17:aa:1b:80:a2:96:a3:f6:3b:0e:0e:73:59:
                    14:5f:76:7d:c6:7c:fc:0e:e8:83:d1:01:2b:0e:6d:
                    48:67:db:ff:d6:5b:ff:0f:1e:28:c7:d3:30:2b:79:
                    14:79:a7:f0:84:69:e4:e7:32:0d:24:81:d7:ac:dc:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C6:36:DE:4D:50:65:FC:22:5E:CA:A4:63:A1:F1:ED:02:79:BB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6967d3fc-fd2a-35f9-b2d9-df2d0c5c66ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:57:3e:1a:dc:11:21:95:8c:d2:8a:18:85:44:d6:4d:f3:c3:
         79:a1:a7:67:97:2e:39:bb:68:31:57:b2:c0:03:e5:a7:ac:11:
         3b:15:c3:45:4e:71:44:c4:9b:23:16:97:cb:cb:7d:bf:6d:fb:
         94:8d:93:46:6a:00:40:48:24:47:2a:f0:cc:fb:0c:96:fa:df:
         48:3e:b7:e3:2c:33:53:84:89:7c:8b:d0:06:b8:9f:ee:c6:1b:
         23:b2:86:f9:ce:b3:97:c3:56:cf:a3:17:18:10:25:58:08:45:
         ba:73:a1:c1:69:29:99:8a:2a:d7:f1:b5:5b:53:ea:2b:b9:81:
         75:c7:1d:5c:47:e7:5f:82:99:2b:13:f1:32:6f:e1:d5:63:2a:
         f6:35:57:c8:b5:a8:b8:7d:f8:a0:bc:a8:65:c7:76:85:7c:fc:
         a6:46:b5:94:0f:f9:05:b6:dc:53:70:e0:dc:9a:b4:d9:7e:58:
         4b:1b:60:d9:b6:7d:dc:03:96:09:7b:72:9e:e3:fd:bc:f1:d0:
         5e:dc:e0:55:59:64:18:c8:cb:3c:27:cc:7e:55:6f:18:4c:a8:
         87:8a:30:6c:14:35:92:30:f6:cd:c2:5e:5a:be:80:15:11:ed:
         1c:b3:aa:27:4a:31:1e:3b:a1:b2:8a:0f:14:88:11:38:fb:ba:
         40:5f:3e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:24:22 2024 by rpki-client on console-ams.rpki-client.org