Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
File:                     b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa (raw, json)
Hash identifier:          Zr8qArKxbqvbbx2H1UdKDx1RseqVxSjGjllMllDUMv8=
Subject key identifier:   45:B8:8F:E7:7C:D7:2C:4B:35:0B:57:DB:C6:2F:0B:46:1F:8A:0F:AB
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858456FD478B7F281D4BF1D5FF100
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
Signing time:             Thu 04 Apr 2024 19:08:54 +0000
ROA not before:           Thu 04 Apr 2024 19:08:54 +0000
ROA not after:            Wed 03 Jul 2024 19:08:54 +0000
asID:                     2734
IP address blocks:        67.212.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:d4:78:b7:f2:81:d4:bf:1d:5f:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr  4 19:08:54 2024 GMT
            Not After : Jul  3 19:08:54 2024 GMT
        Subject: CN=4714dca6-5c7f-4cac-837a-10ca265bc747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1c:2b:aa:5c:0d:e4:58:90:7c:22:18:fd:19:
                    6a:84:1e:a2:2b:b7:74:5d:80:88:29:4a:d3:a3:ab:
                    4e:4e:2e:f1:fa:a6:a0:26:2d:14:20:e4:b1:2d:d2:
                    05:ef:a2:f1:d8:92:1b:7c:c2:82:5f:a7:91:44:cb:
                    b4:31:b2:8c:11:c4:76:91:d1:db:89:a7:c3:4c:14:
                    43:ff:d7:1b:a1:7b:58:74:fe:c5:b0:0c:1a:3c:d0:
                    e7:92:42:d8:90:8d:e5:d6:a6:7b:c7:b5:75:4d:03:
                    d4:8b:39:76:f8:51:02:da:5f:dc:10:1c:b7:5b:50:
                    5c:92:0c:47:2d:78:12:71:c0:3d:db:40:48:95:3e:
                    05:fe:7f:e9:65:82:02:61:63:96:ad:89:71:08:9b:
                    ca:d1:a2:e6:80:71:b0:01:51:b9:be:ba:1e:90:58:
                    2a:9a:06:03:e9:00:c5:f5:6f:79:04:32:28:aa:bf:
                    18:91:30:35:fd:a7:5c:21:ad:c4:a8:e8:79:3d:44:
                    1d:e3:de:af:7d:43:af:b8:02:b3:28:34:75:63:1e:
                    3d:3d:5e:76:cf:f3:7f:df:a3:f5:73:90:f0:78:dc:
                    26:8a:47:b6:61:c4:45:18:81:95:5d:99:4b:5f:3d:
                    f5:b0:66:10:19:77:7f:86:a7:92:9d:32:58:62:2b:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:8F:E7:7C:D7:2C:4B:35:0B:57:DB:C6:2F:0B:46:1F:8A:0F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d5:8b:b1:99:e2:9a:8a:74:b5:f7:de:64:7c:4b:83:4f:2b:
         bb:e6:e4:58:b4:c6:6e:f9:68:0c:7e:be:f0:d8:7c:98:90:72:
         c9:b8:b9:4e:a4:15:f8:50:b8:16:74:08:67:11:e0:18:fd:ea:
         76:87:c8:a4:c8:09:6a:1e:1b:aa:12:9a:21:e5:87:87:e4:9b:
         f7:8a:7e:ab:99:67:9a:b0:f0:34:39:13:d1:7c:cd:ee:f0:5a:
         ef:30:76:45:d9:98:9a:87:f0:90:9a:af:eb:75:a6:e5:3a:f4:
         d6:cd:ba:a2:c0:86:4b:5b:6c:fe:66:f8:01:5c:44:72:af:bc:
         e7:bb:b3:a8:af:85:9f:82:3f:a0:a3:1b:aa:c1:c0:25:15:45:
         a4:50:be:22:3d:80:21:23:db:6e:75:7c:3a:09:0e:22:0c:f4:
         66:a0:c9:71:0a:ec:2d:00:d8:f5:be:7f:04:b4:32:5f:cb:c5:
         16:a6:09:ac:f5:9a:ef:04:e7:71:74:9f:44:78:e1:03:9f:ca:
         a4:eb:e0:11:90:a7:47:fb:65:84:03:b7:e5:13:2e:80:72:49:
         55:67:5b:ae:36:0f:15:bb:c8:84:ca:9c:f0:d5:45:ff:00:eb:
         2f:b9:2e:d4:93:3a:15:6b:48:b1:7e:2d:66:19:a8:13:07:39:
         6f:ce:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:43:46 2024 by rpki-client on console-fra.rpki-client.org