Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa
File:                     dc6b981b-3332-38fa-b76d-e398bcf36767.roa (raw, json)
Hash identifier:          r2P9WDVUl8s+OoZjewUiBPzsDU7dO85VgeAVhhKu4HY=
Subject key identifier:   6C:FA:18:91:93:A0:98:00:0F:3B:9A:88:0F:E2:C5:02:A3:FB:27:8C
Certificate issuer:       /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial:       010D0C9F43285847CFD4AA4D2742B915F26FD680
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     20473
IP address blocks:        67.159.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:aa:4d:27:42:b9:15:f2:6f:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=263395a3-d2fd-4351-8af6-419a848f637e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1f:08:ad:4b:a2:48:d5:2d:28:7d:b6:2d:79:
                    af:ca:ba:13:22:73:91:a9:7a:ac:5e:c2:f6:d7:53:
                    49:9f:34:9e:5f:c7:32:ac:58:4c:66:70:a8:a1:74:
                    67:ca:0e:0f:69:4d:cd:88:13:52:fd:ef:39:22:1d:
                    f6:ac:99:b4:d7:33:05:f7:8b:f4:7d:76:59:95:72:
                    54:b9:0d:cf:48:db:dc:b5:78:5d:7a:cf:55:ba:78:
                    4d:ab:5d:5e:a9:71:6b:d4:4a:24:f9:61:4c:6d:9d:
                    5a:71:4f:b3:7d:e5:e8:0a:45:e9:2a:3f:1f:ea:20:
                    c1:dc:1d:f5:6c:1c:6c:10:2b:96:cf:6b:89:d2:bd:
                    23:54:5d:63:11:5f:ca:6c:1f:c2:e7:89:7f:e7:5f:
                    45:07:0e:47:ae:2a:3d:65:af:2b:9d:7c:a2:1f:8b:
                    ef:e0:fa:b2:23:6c:91:cb:25:18:9e:1e:ae:7f:9b:
                    af:69:32:b5:6b:8f:f7:ae:ad:37:4f:67:b1:41:c3:
                    af:78:63:b9:e5:c8:2c:90:87:af:81:e7:87:01:61:
                    09:65:d8:fe:98:10:21:a7:a0:8b:a7:cf:30:28:41:
                    fb:38:34:37:5f:7a:ab:03:10:55:67:4e:aa:7c:54:
                    e8:7c:4b:69:53:69:3d:08:bb:b9:1e:fc:ab:73:97:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:18:91:93:A0:98:00:0F:3B:9A:88:0F:E2:C5:02:A3:FB:27:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl

            X509v3 Authority Key Identifier:
                keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ca:f2:f3:b1:fd:a9:58:90:1f:c4:42:53:89:be:ec:83:73:
         5f:23:06:4e:3b:69:91:79:3b:19:b7:09:42:a3:68:31:f5:15:
         99:fc:95:62:59:30:a6:c3:a7:47:72:26:28:64:65:ca:ce:65:
         43:7d:7e:42:99:3e:6f:3d:52:8c:df:57:b9:a3:ff:91:66:01:
         c7:3a:36:81:4e:a2:31:9f:94:43:08:47:08:28:ed:bf:3c:6c:
         fa:74:9b:e2:4b:28:58:72:37:55:5f:55:b1:20:d2:ac:19:1f:
         9a:93:22:ee:d7:71:dc:cf:4c:61:8f:27:5c:52:75:e7:37:37:
         61:db:18:61:18:49:aa:ba:0a:13:83:55:2a:61:96:99:65:90:
         d0:cf:ae:77:20:90:d5:76:24:cc:6e:74:54:a6:aa:ec:41:ff:
         17:4c:7e:c3:a0:03:ab:97:34:d0:27:e2:c4:e6:34:ca:4c:29:
         e4:08:b7:14:3b:20:4a:6c:a6:25:7e:6a:30:0a:ec:93:be:e6:
         5a:85:7c:ea:b6:03:71:c2:5a:ce:97:04:b6:53:5a:23:25:0e:
         cb:af:3a:4c:24:92:ab:53:9b:55:df:cd:8a:8b:03:14:69:a8:
         2e:98:96:51:ec:26:e0:44:fd:c3:60:f1:3f:13:1e:93:1a:59:
         90:f1:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:16 2024 by rpki-client on console-fra.rpki-client.org