Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
File:                     8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa (raw, json)
Hash identifier:          mvzrIZhk4RViU0xU0YBREwtyma4BomllmET4/gPnGV4=
Subject key identifier:   40:F1:52:26:9A:7C:84:B3:E0:70:4A:F5:A0:8C:87:B5:4D:5C:C3:5C
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F432858457A4887192926C0247ED98440
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     31898
IP address blocks:        162.253.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:87:19:29:26:c0:24:7e:d9:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=87cfd265-8aa1-482b-8138-1492732a27fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:92:3a:09:da:b1:ff:74:46:73:82:f2:f5:
                    4e:3c:af:8c:2b:96:e9:b6:0d:20:e6:4e:79:39:5c:
                    b1:42:6d:13:ce:0b:ad:8e:7d:9b:0e:56:a7:22:86:
                    a7:25:ec:cc:af:22:50:38:7f:09:0e:23:d1:c9:23:
                    7b:03:7f:d6:5f:f5:c7:7c:13:c3:39:62:10:67:59:
                    c8:14:07:3a:86:2c:f1:77:cf:12:2c:1c:e6:84:3f:
                    82:62:25:5f:de:41:8e:12:bf:f7:8e:a9:dd:67:c2:
                    82:96:10:8b:6f:7b:26:34:1a:e4:91:28:8c:f3:05:
                    bc:37:76:0e:83:3b:7d:0c:ca:02:1e:76:ce:63:0f:
                    28:dd:e1:cf:01:e5:fd:80:28:68:cd:e9:7b:01:14:
                    b9:a2:ae:6e:d4:99:ce:07:97:f6:d8:fa:fa:b1:54:
                    56:8f:00:71:75:7a:d5:99:8b:2a:d1:78:8d:61:c4:
                    d1:a7:63:0f:3c:9b:ff:71:e2:e9:b4:e3:22:2f:5a:
                    c3:1a:11:1b:06:00:5c:60:fa:ae:92:44:73:83:17:
                    a7:31:53:01:d3:44:6a:b2:82:23:ca:29:96:2d:20:
                    c1:2a:d7:9f:dd:76:76:6c:a3:62:0a:51:1c:e1:2f:
                    0f:b4:5b:33:14:17:1b:19:af:f7:2c:82:dc:3c:4f:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F1:52:26:9A:7C:84:B3:E0:70:4A:F5:A0:8C:87:B5:4D:5C:C3:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:11:42:5d:16:8f:29:5a:c7:e2:1e:b8:7a:68:f1:f5:1f:6c:
         6e:c3:0c:aa:31:2e:94:74:a8:15:6b:5d:ee:2f:21:89:a6:63:
         1e:c3:a8:83:e7:be:b7:cc:c0:4f:88:23:96:11:94:1a:54:e3:
         98:72:52:4d:c3:82:76:ce:f0:94:9a:aa:24:4f:0e:a0:ec:37:
         7c:66:0c:34:9c:dd:4a:a2:0b:5a:ea:0e:ae:37:09:f0:5a:26:
         50:8c:90:5a:02:84:e0:02:83:51:d1:6a:0d:bd:1e:93:5b:60:
         c3:ab:eb:df:41:82:f2:4b:c4:a8:c3:6c:24:2e:f1:ec:6f:12:
         c8:f2:93:46:ba:37:ba:8a:01:65:fc:35:aa:d2:6d:a0:03:51:
         ed:93:48:83:f1:ad:38:bc:5e:e2:69:5f:e2:a9:3b:c0:25:f2:
         4d:e6:96:ca:4f:e2:df:7a:fe:f3:be:17:5a:58:16:3b:e7:21:
         74:55:94:3a:8c:6f:0e:f5:c0:0d:f8:01:45:59:91:8f:62:5d:
         7b:c6:d8:3e:74:36:3a:d2:88:4b:bb:cb:d5:38:39:b2:f1:98:
         88:a0:b3:4b:5b:f1:17:31:ab:7f:a0:ac:98:59:50:01:a4:3e:
         97:3f:3a:ab:7d:04:0a:e5:45:6d:6e:46:23:55:5b:a4:63:5f:
         58:08:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:11 2024 by rpki-client on console-fra.rpki-client.org