Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
File:                     7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json)
Hash identifier:          /CXDTPoTHSyel+55Ck/VKSZOunedyzU2MeSyMIbm8EY=
Subject key identifier:   ED:68:A9:08:17:B3:07:EA:39:98:5B:63:79:1E:22:58:09:0E:66:CC
Certificate issuer:       /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
Certificate serial:       010D0C9F4328584563F2FBE37895536F213EFB00
Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     16385
IP address blocks:        67.43.87.0/24 maxlen: 24
                          67.43.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f2:fb:e3:78:95:53:6f:21:3e:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=f92b854d-9c26-4cb5-95bb-f7f8f0cf3cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:be:03:b4:31:08:aa:c9:a4:94:0e:dc:59:
                    85:02:47:74:d2:2c:fd:85:7b:5c:49:77:7c:25:dd:
                    fd:b1:95:c6:f5:fd:c1:58:ae:1f:90:73:af:a2:c8:
                    06:23:9b:a4:0c:cd:7b:96:c2:57:0e:c3:4f:50:45:
                    65:9b:f6:dc:d7:a7:b2:4f:d4:06:0a:d5:62:80:1c:
                    dc:19:1b:10:85:09:cd:b1:3a:36:43:bb:2b:b8:1e:
                    80:d0:12:3c:a2:1f:10:a3:6e:97:45:94:3c:28:b6:
                    62:6b:fb:9d:15:d1:3a:bd:a2:0c:94:c8:00:08:c9:
                    cc:48:93:3e:09:75:40:5a:52:05:35:45:a9:ef:f5:
                    3b:52:4d:82:13:c1:18:5e:f9:67:a0:86:50:6d:a3:
                    de:ba:52:69:52:34:c0:02:2c:1d:be:38:bd:99:31:
                    cf:08:3e:6b:58:9c:77:5f:a3:23:19:58:6b:1e:bf:
                    93:30:88:4c:11:4e:44:6a:6a:87:56:56:53:a8:f7:
                    35:3d:05:d8:fc:75:eb:49:a6:d7:0d:0e:05:08:56:
                    2b:f3:98:8b:d4:88:86:d4:ba:ef:49:da:a4:f4:5b:
                    c8:67:7a:1e:34:0d:fa:68:de:c5:9b:11:49:98:d7:
                    ed:ff:e9:fe:7e:18:f7:e0:ba:ec:4f:56:e8:26:44:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:68:A9:08:17:B3:07:EA:39:98:5B:63:79:1E:22:58:09:0E:66:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:81:b1:3b:a3:06:80:bf:41:41:dd:dd:1e:f9:72:cf:75:32:
         94:69:6f:b6:f2:96:58:65:e8:14:2a:b9:3b:7a:2a:f4:32:7b:
         32:27:27:f8:b7:02:5c:1e:c3:c1:2f:ac:f5:e0:9b:57:eb:a5:
         8b:b8:dc:76:fb:a8:0c:e9:73:22:c3:e7:ad:92:cb:89:c7:95:
         9e:12:9e:f4:98:5a:c8:29:7c:35:9b:d2:05:0d:ec:a2:34:8e:
         21:0c:f2:52:36:6b:56:8e:41:65:53:c6:a1:83:5e:b2:93:b2:
         78:9d:e6:80:80:09:e2:ea:a9:3f:a8:ef:84:a9:f9:ae:48:43:
         de:28:7b:94:ef:fa:95:5e:77:9e:c5:d3:d3:21:ac:87:e3:93:
         84:18:38:8c:ee:44:d0:27:1b:f8:0d:69:de:aa:7e:8d:20:d2:
         80:00:62:ec:af:26:f9:2c:53:d2:b6:6a:63:ca:9e:34:12:88:
         21:ab:e4:85:c9:3b:62:65:07:b6:7b:08:f9:c9:5c:52:c3:7b:
         62:8b:1e:84:7f:75:ac:de:d4:a3:a9:5f:db:57:d7:31:8b:50:
         bc:0c:8f:bf:00:43:c1:ce:1b:c8:fa:65:f0:73:44:6b:13:3f:
         10:3d:45:b9:eb:ff:fd:e6:a6:4e:54:29:00:05:3e:52:c1:84:
         4b:c7:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:24:41 2024 by rpki-client on console-ams.rpki-client.org