Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6bf6b701-7894-3f95-94b5-c11d9a21331c.roa
File:                     6bf6b701-7894-3f95-94b5-c11d9a21331c.roa (raw, json)
Hash identifier:          8RIObOhOMBdU1IFKf7xbMvjjrarOBlEpzfroKkKvNX0=
Subject key identifier:   49:D2:40:3B:0D:3E:6C:8E:B7:2A:B4:8E:31:0C:7A:60:A2:62:D7:6E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584511B57DFDF77CED78D3175C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6bf6b701-7894-3f95-94b5-c11d9a21331c.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     397222
IP address blocks:        199.7.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:7d:fd:f7:7c:ed:78:d3:17:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=9b9466b3-7277-41ce-960c-c4430324ac43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:b6:ae:65:ca:20:3c:3e:74:65:61:b5:7e:
                    d0:c2:1b:0f:86:1e:92:f6:d1:9c:a5:18:d7:06:1a:
                    bd:aa:8e:ff:15:f2:ac:0c:3b:04:42:37:b2:61:ae:
                    79:c1:e8:5c:7f:ec:72:82:48:b9:f9:36:bd:75:49:
                    af:1c:c7:cc:3f:f7:26:3a:18:39:fa:f9:c5:ea:d0:
                    af:22:4f:93:d2:26:51:53:1d:94:44:24:bc:1c:27:
                    a3:1b:cd:a8:f6:08:f8:ee:92:5b:33:d7:c3:08:d3:
                    cb:15:83:b0:d3:5e:8d:16:37:7d:a8:06:34:f4:bb:
                    fa:06:40:1e:5d:13:7b:18:86:45:29:02:b8:99:00:
                    49:cd:3a:42:f5:c4:b9:99:95:f0:83:ae:49:53:ee:
                    5f:f0:24:a2:73:29:aa:8c:ac:60:8c:a4:ce:36:b3:
                    59:a1:56:ab:ff:17:17:67:b2:80:f9:1c:0e:26:3e:
                    ce:b5:dc:2e:85:91:bc:4b:d1:8e:da:c8:38:ee:c0:
                    72:89:f8:c1:89:71:b8:fb:52:04:6b:f9:40:db:de:
                    a5:dc:03:98:cd:ab:31:57:52:f4:07:df:a6:9d:2b:
                    3a:5d:c2:8c:38:68:ce:ac:69:47:35:d3:5d:9b:fc:
                    51:3e:3f:67:04:7f:87:16:fb:71:42:ad:ef:10:25:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D2:40:3B:0D:3E:6C:8E:B7:2A:B4:8E:31:0C:7A:60:A2:62:D7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6bf6b701-7894-3f95-94b5-c11d9a21331c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:1b:fe:e0:27:76:6b:54:dd:38:b4:e5:b6:b5:ae:2a:32:
         e7:25:14:88:94:17:07:4b:84:54:17:e9:3a:14:50:d5:11:b7:
         9e:9e:96:3a:8e:69:b7:38:52:4f:a7:2b:2e:bd:e0:63:5c:9e:
         b8:9a:87:17:a6:12:fb:df:47:f4:d0:3c:a8:d9:f9:c7:0b:30:
         40:c9:ae:21:2e:50:2b:42:fe:3e:c8:23:2d:3f:07:a0:08:95:
         59:f6:b3:74:e4:37:97:3e:b8:e9:13:ec:ed:49:5e:58:40:bd:
         69:f7:bf:a5:47:83:b8:17:a2:b8:0f:74:68:3b:6b:2c:d5:7b:
         ef:97:8f:2c:6e:33:7a:bb:04:19:88:83:fa:bb:c0:b0:77:7a:
         63:1f:01:27:08:98:ae:73:e2:a4:ca:08:04:94:a7:0e:9a:d4:
         28:bd:85:4d:60:d1:45:fa:3f:a9:77:9b:79:3e:29:22:e6:df:
         6c:19:c2:82:6b:90:c5:ce:cd:46:0a:00:1f:3e:3a:c2:2a:3c:
         39:37:ae:5e:fb:e0:bb:a1:78:d0:dd:85:fd:04:a8:1c:0a:1e:
         26:2f:01:5e:0f:86:ab:ca:31:e6:9d:90:1d:95:a9:96:16:22:
         1a:25:ba:14:1c:f9:4e:f9:d7:ea:54:b9:d9:da:9d:95:27:27:
         f5:b6:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:22:56 2024 by rpki-client on console-ams.rpki-client.org