Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa
File:                     fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa (raw, json)
Hash identifier:          nk5j9AE3qB12C34tyosAm78/wGsKRZMxhMC1NoNCshg=
Subject key identifier:   1E:4B:07:3B:F0:88:5B:39:D9:CA:57:12:C7:03:6B:FC:A5:4E:11:0A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584511B57D41E02AFC1EBCCE3A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     19905
IP address blocks:        199.7.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:7d:41:e0:2a:fc:1e:bc:ce:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=6add6ec1-d33c-425f-9a1a-fec818e4bcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:68:0b:36:bc:fa:58:71:dc:48:1d:6d:58:17:
                    db:31:a9:a1:fa:60:bc:cf:78:fd:88:b7:6c:6b:ed:
                    89:ad:2b:90:27:1e:c0:a1:b5:c6:d0:0f:cf:06:cb:
                    38:92:78:6a:23:b8:21:08:2a:35:06:22:64:12:0e:
                    9f:55:bb:d0:19:a8:65:d0:b0:87:8c:3c:4e:9b:45:
                    78:27:af:3b:db:06:b3:11:df:1d:ca:fe:4f:4b:09:
                    27:ea:5f:a6:59:a9:9e:b9:46:f8:d9:25:6c:0d:13:
                    2d:66:cc:c6:64:fa:84:c6:f2:7f:4d:ba:aa:d0:0d:
                    c4:a8:4d:db:a2:b5:bf:ba:42:6a:2b:77:47:7e:49:
                    81:94:d8:b2:3a:4a:d9:e6:50:4f:dd:16:65:29:ca:
                    12:e9:7c:5b:5e:43:58:ce:51:a0:f8:36:96:8d:30:
                    09:38:83:73:f1:11:77:e6:03:ad:50:5d:dc:72:63:
                    e5:19:59:27:6a:c9:a2:17:36:2b:62:38:e2:37:90:
                    43:10:f6:49:8c:8b:26:a8:47:e7:cf:cd:ac:55:ff:
                    56:e3:ec:e6:c8:9a:97:52:02:ae:dd:64:60:fd:cf:
                    48:06:c7:61:c1:ac:f1:2d:f4:d2:89:51:ef:b0:ab:
                    6f:6f:93:e2:91:c6:ae:85:5a:52:82:bc:1d:34:58:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4B:07:3B:F0:88:5B:39:D9:CA:57:12:C7:03:6B:FC:A5:4E:11:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:d4:ce:22:09:9a:55:21:08:99:11:00:07:36:36:e4:96:
         7d:9b:8b:88:a2:18:fd:cf:fe:e2:09:8e:d2:ed:3f:9d:1b:b3:
         42:a9:4f:73:27:2f:44:78:6f:ec:af:be:97:c1:8f:a1:ca:42:
         21:68:79:ad:2c:08:3a:f6:12:03:f2:3b:ab:9f:34:d4:d2:a7:
         e6:21:cc:97:a6:2b:f9:cf:00:43:99:91:9b:0a:b1:04:a9:e1:
         1e:fd:45:99:1b:64:50:4d:68:9b:3f:f5:65:d2:16:6b:61:9d:
         b5:9e:86:cb:da:28:6b:7e:a8:ac:49:dc:52:7c:0f:98:ad:67:
         3a:37:f7:4c:9f:27:0c:74:93:7f:41:fc:c5:5c:a0:1d:8c:55:
         f9:f8:03:e2:ff:f5:b6:c0:72:bf:3d:56:42:5f:2e:42:4d:a7:
         74:9e:07:86:92:87:bb:28:8f:c1:ea:48:67:87:c7:5c:de:bb:
         13:5f:b6:32:77:79:70:90:f7:ad:33:b9:6e:3e:9b:cb:22:af:
         ff:a2:66:48:41:6f:f9:fb:f9:8c:e1:e9:b1:5f:d9:0c:95:1f:
         d8:33:09:c5:ff:71:4f:10:6f:11:f0:ba:16:e8:85:1c:af:d7:
         7e:66:3c:b6:98:3c:4a:6e:83:5b:1e:28:86:ec:bb:29:e3:a5:
         f7:51:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:22:11 2024 by rpki-client on console-ams.rpki-client.org