Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bb034d98-6b56-30ce-a5d2-5a52902e708f.roa
File:                     bb034d98-6b56-30ce-a5d2-5a52902e708f.roa (raw, json)
Hash identifier:          HKtzPxPqXo6B5PbdUjeUOJ37lPx8Pyoz0LoJxOlAi+o=
Subject key identifier:   F8:D7:6F:A3:5D:DE:A4:39:DB:12:0C:69:B8:16:4D:21:70:EE:B8:28
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858456FD49C81F71A0937E746F480
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bb034d98-6b56-30ce-a5d2-5a52902e708f.roa
Signing time:             Thu 04 Apr 2024 19:09:11 +0000
ROA not before:           Thu 04 Apr 2024 19:09:11 +0000
ROA not after:            Wed 03 Jul 2024 19:09:11 +0000
asID:                     2734
IP address blocks:        67.212.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:d4:9c:81:f7:1a:09:37:e7:46:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr  4 19:09:11 2024 GMT
            Not After : Jul  3 19:09:11 2024 GMT
        Subject: CN=fb3d132f-ce4a-490f-90bc-ebdf287790a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:1f:68:25:b8:90:7a:9f:6f:2b:16:62:1b:
                    d3:be:ff:f7:11:45:d1:dc:ad:cb:dc:42:4b:a4:71:
                    99:7c:2d:05:12:50:19:79:18:05:6a:60:6b:9d:b3:
                    c5:0a:d2:33:3e:37:fb:97:e3:17:67:17:c1:9c:3a:
                    cb:9a:aa:97:7f:5a:db:22:27:8e:0c:4e:ba:c7:89:
                    29:50:5e:15:8d:ca:f2:8d:ae:f2:c3:db:60:0b:85:
                    10:78:49:d8:95:1d:94:40:bf:7b:db:7b:ef:3a:30:
                    d9:3f:f5:1d:fc:38:eb:50:31:29:fe:4f:90:61:29:
                    32:b1:76:03:47:29:95:d8:52:f3:49:4e:fc:22:a0:
                    82:19:a2:90:4a:37:eb:62:c6:b7:13:5c:ff:63:4a:
                    b7:63:f8:92:8f:d3:de:3a:d5:ae:70:2a:db:64:72:
                    eb:6e:21:f6:6c:5a:13:d6:72:e5:b0:68:ad:2e:f5:
                    a3:9b:42:3b:6b:d1:d9:4e:10:70:42:7d:e9:42:dc:
                    c6:97:33:b0:d5:b0:31:90:01:56:4a:a2:f6:86:04:
                    0c:1b:52:8a:7e:5a:95:e8:6c:f3:d8:2f:65:68:30:
                    90:17:5e:78:c0:79:32:ab:3e:1e:07:52:80:02:9d:
                    4b:61:ff:7d:57:82:b7:2b:24:8a:35:26:03:8c:c0:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D7:6F:A3:5D:DE:A4:39:DB:12:0C:69:B8:16:4D:21:70:EE:B8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bb034d98-6b56-30ce-a5d2-5a52902e708f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:19:d7:c8:99:55:b2:1c:3e:9b:f1:32:56:1c:a8:48:af:
         d1:27:a1:9d:6f:a2:26:79:38:84:5c:1c:ec:3f:eb:06:ca:9d:
         7f:fd:7b:26:c4:b7:85:2a:bc:a3:13:2a:86:6b:0c:f6:00:5f:
         51:44:be:e2:99:2d:99:be:89:1a:5e:a2:b5:85:be:6c:37:fc:
         64:30:ce:7d:ac:a7:b9:5b:84:5d:56:be:c3:76:3b:9c:9c:0b:
         17:91:b7:3d:0a:42:63:48:bb:93:4c:9f:fc:8c:00:2c:da:6f:
         73:68:f6:46:04:b3:35:0e:39:1d:9e:6c:1e:b9:c4:8f:ee:57:
         45:ea:3e:6e:e7:3b:35:30:09:6f:2b:81:54:00:b7:93:d4:b2:
         34:bf:4d:8b:62:45:c4:8b:d6:4b:f4:1b:78:44:b6:e2:06:c3:
         4c:31:f7:40:a0:5a:c3:6e:3c:99:43:82:da:f1:35:bc:67:09:
         9a:11:9e:0f:f4:2f:db:32:7d:9a:f7:ee:c6:a3:dd:1f:9c:a4:
         fd:e5:39:a3:87:4e:e6:d0:6e:f2:84:f4:8e:7b:6b:b8:39:b4:
         49:17:4a:20:36:3e:46:77:b7:0a:6c:b6:7e:f3:0d:ad:37:9a:
         08:af:92:47:46:1b:a2:6f:d2:1b:00:f2:3f:5e:10:5a:a8:01:
         28:06:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 18:51:39 2024 by rpki-client on console-ams.rpki-client.org