Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa
File:                     9b9b9c14-7c59-311c-b7c4-f4928230b433.roa (raw, json)
Hash identifier:          R14ZDShofUQbzhhmIhYXfRUvEVaSPhTZ2lFcNklFSxw=
Subject key identifier:   48:ED:BA:F3:5E:A7:0F:3D:02:0B:43:93:CE:DB:83:59:28:DF:F5:A1
Certificate issuer:       /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2
Certificate serial:       010D0C9F432858454D9D746F803A2E4C29745700
Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     8075
IP address blocks:        167.21.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:74:6f:80:3a:2e:4c:29:74:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=61095df5-e9c0-4bc4-a990-af732b0294e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:eb:e8:fa:f7:d2:c4:03:29:23:e6:f8:b1:
                    27:7a:36:cf:6c:85:b8:1d:ce:d0:a9:30:8b:2c:5e:
                    c2:73:08:96:39:d2:25:fa:f0:a9:e3:e9:95:39:08:
                    42:9a:39:dc:8c:68:92:a3:43:63:e4:6f:a9:89:74:
                    43:44:e8:eb:d3:12:78:5d:0c:65:32:31:73:8c:06:
                    57:5f:f1:95:9b:c3:19:aa:e3:97:ef:8e:b9:2b:0d:
                    0c:db:92:dd:9d:f1:a4:14:a6:35:90:f9:b1:de:7f:
                    c8:0f:ff:4d:72:c5:ad:6c:e1:0a:02:d2:74:95:d3:
                    d4:6e:8f:74:e0:5c:a4:e3:89:ac:66:a1:f0:b5:d7:
                    15:c0:c3:83:7e:42:7b:1e:dc:6f:49:b0:f9:4c:4a:
                    97:ef:4f:a8:b7:4e:df:ce:e1:21:be:d4:d1:8c:44:
                    ad:9c:f5:2b:ba:ec:7a:3b:82:82:da:a6:b7:a1:b8:
                    88:bc:7d:19:90:d8:08:36:0f:f7:2d:c4:c2:a2:d0:
                    db:e8:20:50:6b:7b:02:db:f6:68:0c:3f:af:76:d9:
                    71:54:6d:aa:82:c2:87:5a:1d:b6:cc:0e:db:d2:fe:
                    23:e5:5f:7a:64:75:a4:6e:ef:93:64:dd:22:5a:0a:
                    94:ef:c1:12:c7:5c:fe:22:9d:95:11:fb:86:b2:c5:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:BA:F3:5E:A7:0F:3D:02:0B:43:93:CE:DB:83:59:28:DF:F5:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl

            X509v3 Authority Key Identifier:
                keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.21.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:e0:3f:f8:d4:ec:bb:ae:00:57:ba:34:d5:a1:23:a6:55:
         1d:a7:c4:b0:1b:2a:44:e2:5c:b1:be:21:1f:7a:a5:e2:02:88:
         c4:90:f5:96:43:ea:95:36:8d:2f:6d:0a:44:e4:b6:46:27:b2:
         39:6e:e1:a5:fd:41:94:db:fa:08:a1:7f:b1:df:f6:90:46:b9:
         ab:9a:22:91:66:58:cd:cc:78:2f:48:fc:63:9a:92:4f:88:a9:
         cd:2e:0c:ec:23:7f:ef:db:ee:53:8b:d0:ff:30:c0:8a:aa:dd:
         14:db:1e:cb:68:6d:3c:84:a0:c1:ff:62:78:37:36:bf:8b:17:
         c8:ec:df:50:e3:5f:6a:02:1e:06:9b:80:41:3e:74:20:e4:2c:
         b5:6b:06:99:59:7a:f7:78:29:92:6c:96:76:19:d4:b6:6e:bc:
         4f:ed:1d:06:1e:e6:15:6d:1a:5b:7d:a9:f9:36:48:7c:35:b1:
         46:a8:e2:8a:db:16:50:34:f2:5f:15:1a:d4:11:19:0c:35:90:
         b0:0b:e3:4a:32:0a:d3:07:b0:6c:70:99:c7:f4:11:e3:15:53:
         00:9b:e1:3f:c0:43:13:ce:ab:73:29:e7:d4:d7:96:dd:3d:c6:
         72:22:ec:d3:ec:e4:94:81:43:1a:88:60:0a:e5:c6:88:09:9e:
         21:04:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:22:58 2024 by rpki-client on console-ams.rpki-client.org