Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa
File:                     6d70cc53-b157-3df4-baf6-a493f1610869.roa (raw, json)
Hash identifier:          z7a9WY7PHElWWraXHxdT6Wnj1BMmQ565MHZEu3xN4dE=
Subject key identifier:   C2:98:89:A3:EE:41:CE:F8:B8:52:A1:0A:D9:3C:93:6A:F0:BF:F2:8A
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F43285844C0BFAA73BFA031B817E67260
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa
Signing time:             Fri 02 Feb 2024 02:00:26 +0000
ROA not before:           Fri 02 Feb 2024 02:00:26 +0000
ROA not after:            Thu 02 May 2024 01:00:26 +0000
asID:                     398324
IP address blocks:        167.94.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c0:bf:aa:73:bf:a0:31:b8:17:e6:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Feb  2 02:00:26 2024 GMT
            Not After : May  2 01:00:26 2024 GMT
        Subject: CN=4f85b8d0-2997-4ad5-ac97-82fcda102ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:1d:f6:8f:49:c0:9e:b3:13:01:72:6b:c4:
                    bd:6d:7d:20:8f:52:96:9b:5f:a8:f0:22:91:d3:b1:
                    a0:46:b8:47:3f:78:9b:b6:cb:4d:d0:5d:24:c2:eb:
                    85:d8:7a:a9:26:62:ea:02:c5:55:00:72:74:f4:11:
                    53:e7:7a:ca:e8:23:d3:c0:56:b1:39:05:cc:69:20:
                    e5:cc:6e:24:88:48:cb:ce:e0:0e:fe:bf:03:2d:18:
                    6c:e0:d9:ff:4f:03:0d:42:ff:83:9c:eb:d4:cd:15:
                    cf:0b:e3:11:22:d3:f7:7c:1e:25:f9:70:1e:b2:72:
                    78:92:e7:62:27:52:33:fd:fa:b4:62:fb:73:ac:17:
                    4d:a9:07:88:d0:06:69:c3:4b:bc:de:d1:07:14:d9:
                    26:37:0a:40:3b:b6:f2:de:2c:75:47:a9:34:a1:fa:
                    49:09:fe:66:ab:31:73:21:f2:7b:31:a5:38:51:8f:
                    1e:c4:8f:e8:99:15:61:86:6e:ee:57:8e:44:46:6f:
                    b9:5f:55:2f:58:de:f7:4a:72:60:9a:5f:97:63:c2:
                    35:30:9c:cd:a9:12:50:ed:62:10:8b:81:2a:48:85:
                    aa:40:78:d0:21:41:af:be:13:7f:22:a0:e7:83:12:
                    ea:71:2a:1e:89:b4:52:09:d6:9e:4b:28:c5:48:31:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:89:A3:EE:41:CE:F8:B8:52:A1:0A:D9:3C:93:6A:F0:BF:F2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:71:a9:fc:6d:a7:ed:ec:aa:d4:93:2e:bd:68:cd:25:30:0a:
         7b:64:38:b8:47:6b:b2:79:0b:92:4a:de:c0:56:28:93:e5:bf:
         6a:ac:51:b6:d0:6e:70:80:69:d9:7c:e6:e7:b3:66:59:22:61:
         e2:0c:09:00:6d:47:13:75:46:2d:64:c9:0f:b3:d3:34:97:22:
         f3:d7:c4:91:b3:c0:e8:aa:70:fc:86:44:bd:f4:b1:b2:23:15:
         00:38:d0:47:ca:34:47:04:8a:b6:81:af:06:46:6e:02:7f:c0:
         56:20:ea:d4:25:8a:27:c2:aa:af:3a:91:01:ec:01:d3:de:cd:
         e2:f8:fb:7a:98:ac:b1:6d:87:b9:02:8c:f7:81:6c:e4:01:8d:
         83:07:77:68:65:53:a8:f5:1e:5f:3b:f9:4f:b7:0d:a0:cc:fa:
         ab:9e:0a:3a:d8:b1:3c:d4:e9:29:b1:e4:d2:57:1c:eb:69:81:
         c5:59:e7:85:a1:eb:73:2e:aa:ad:a9:ac:90:99:db:ca:b8:fc:
         37:5d:06:8b:68:19:9b:3f:5b:9e:d9:68:d2:52:1b:26:f2:f3:
         c0:c7:d8:f8:ca:ba:27:d1:00:cc:b8:41:60:a1:7e:e0:7d:14:
         aa:5d:10:b0:7f:67:a3:ea:22:f6:9e:46:a2:d5:72:41:59:58:
         9b:89:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:19:29 2024 by rpki-client on console-ams.rpki-client.org