Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa
File:                     716e143f-946d-3424-9321-a2ad6dc97697.roa (raw, json)
Hash identifier:          HdRw7vk/tNqP68ZurpnUvaD4/sEEkjw3eaCkA8zUMEs=
Subject key identifier:   3C:A3:86:03:0C:D3:BD:9A:01:6D:57:B4:65:E3:7E:59:C0:91:0B:CB
Certificate issuer:       /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
Certificate serial:       010D0C9F43285845909DEB3AEA591544781B3140
Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     33245
IP address blocks:        167.206.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:eb:3a:ea:59:15:44:78:1b:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=3b8657a0-10bd-4cf2-8a9d-035e2d25dc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:a2:d5:0f:3c:08:0f:c8:53:9b:97:3c:c9:
                    b9:b5:5d:1b:61:e8:a0:d3:a9:b0:da:d4:c6:4a:c3:
                    79:4e:80:34:47:95:e6:85:13:06:02:a1:18:ba:9f:
                    17:6c:c1:06:9e:c3:69:dd:da:db:d5:03:65:32:12:
                    50:9f:b1:c9:a9:f1:3b:97:1b:ae:e5:93:99:aa:66:
                    88:c5:af:c7:0e:d6:a4:f0:59:0b:f9:7e:31:5c:cb:
                    a1:7c:0b:08:c4:10:73:69:3b:ff:3a:9e:09:3c:88:
                    11:ed:f1:de:5d:c6:a2:a9:36:fa:7f:c5:70:bc:5a:
                    37:1a:16:9a:05:06:2e:06:f1:43:2b:53:ff:69:65:
                    96:f5:1f:e3:06:01:11:88:0f:97:f7:2f:fc:4c:1f:
                    66:ef:ef:49:1a:31:38:87:6f:fa:7b:b5:bf:87:92:
                    16:20:94:2c:d3:a3:30:cf:a6:db:9c:4a:6e:8e:e7:
                    21:d1:90:73:1b:62:9e:42:97:64:ec:fb:ea:be:7f:
                    2b:0c:56:f7:06:0e:82:87:98:94:d0:8d:87:6b:f6:
                    87:67:d1:08:bc:db:e2:8d:a3:8a:5b:04:4b:2c:f6:
                    46:3f:a8:1c:cd:11:53:30:41:40:a9:08:87:d3:50:
                    a6:9c:d4:7a:c1:92:f7:c5:ee:03:f5:35:b1:de:ea:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:86:03:0C:D3:BD:9A:01:6D:57:B4:65:E3:7E:59:C0:91:0B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b0:75:bc:19:ed:6b:15:d2:8e:b6:41:29:60:59:9b:ca:37:
         1e:6d:6b:09:dd:73:fb:62:aa:af:63:06:0e:ef:16:ec:00:76:
         21:82:3b:45:31:d5:af:46:68:f5:f1:43:0d:a2:82:dc:b9:f4:
         11:c9:71:76:67:06:56:2e:fd:cb:42:69:0f:81:87:06:22:e9:
         f2:6e:86:60:84:a6:c4:8f:07:66:ea:ce:b8:f4:b5:54:5e:68:
         32:78:2f:57:85:78:ed:ce:21:f9:57:fd:ea:c5:a3:49:2a:32:
         c9:be:b9:73:82:09:80:ae:b0:32:13:b6:ca:86:50:25:98:3f:
         af:ef:72:1f:ef:cb:96:90:de:17:f0:1b:82:aa:e0:f0:1c:ec:
         bc:2f:0f:b5:c8:24:64:f0:bd:ac:d1:d0:36:08:a3:cd:1e:f2:
         63:36:af:28:9a:ae:88:ed:fd:0d:e2:49:f1:0b:03:24:8b:4e:
         f0:02:2a:32:7b:de:ac:ea:b9:0a:42:85:79:e0:ce:7b:be:73:
         69:fd:54:96:c4:95:36:c5:51:45:72:22:6c:90:47:80:f0:5e:
         71:8e:44:9c:76:24:cf:4c:42:23:7a:4e:5a:95:d8:f9:3c:22:
         ce:e4:79:4b:bf:7d:71:06:72:ea:07:29:34:14:cd:71:d5:7b:
         61:c5:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:43:30 2024 by rpki-client on console-ams.rpki-client.org