Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa
File:                     43633a19-7889-3252-9f77-1300c5c82796.roa (raw, json)
Hash identifier:          Dytqcz1NwmE9IfSq4EBwoyNJ+MdPVzW9ZciBdTBA9hw=
Subject key identifier:   CA:2A:9B:D8:34:64:D6:7D:57:02:E0:6C:2C:F3:2C:6A:D0:9D:03:7F
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F43285845ADEE09AED87A9CE55777C540
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     22612
IP address blocks:        67.223.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:09:ae:d8:7a:9c:e5:57:77:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=3f95644e-cc55-4aef-bc9e-9a0f30219683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:73:e9:21:93:80:c5:c7:65:df:9c:7e:b6:
                    ee:2a:ca:9e:ed:f7:fe:d7:06:ca:a4:27:95:2a:25:
                    b7:17:64:f1:62:85:56:b9:66:20:9e:60:98:15:54:
                    b8:6b:40:fb:d6:3e:6d:16:7f:37:89:04:eb:8c:24:
                    49:ed:27:b5:4f:f3:24:9d:66:ab:83:5e:b0:60:47:
                    aa:91:d5:a3:c1:92:a9:b2:0b:78:90:da:1d:6a:08:
                    02:e2:df:1c:5b:2d:e2:01:8a:59:c7:87:b6:11:1d:
                    37:7a:43:a6:45:54:7a:c6:09:76:b5:b0:1d:51:d2:
                    28:29:e4:27:3a:0f:dc:aa:51:94:07:2e:df:b0:a8:
                    5f:cb:34:b0:d1:15:a0:79:06:b0:88:9c:5d:c9:e7:
                    06:f1:92:12:40:90:97:e6:7e:da:36:6c:ef:20:cf:
                    9e:bd:5e:9c:26:fb:dd:bc:b7:c5:b0:18:bf:cd:3f:
                    f2:c7:a8:96:af:fc:dc:59:ab:bb:05:d5:96:e4:ba:
                    6c:d9:db:d5:cc:d0:7f:68:cd:8a:0a:95:28:28:46:
                    c1:bf:a4:e9:1e:77:4f:e2:9e:7a:c8:74:d5:73:af:
                    18:d6:3a:80:28:86:9f:04:cf:3a:e9:3b:e9:8a:fc:
                    c2:9f:de:cb:ec:cf:b0:74:5f:eb:ff:d7:2c:70:b9:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:9B:D8:34:64:D6:7D:57:02:E0:6C:2C:F3:2C:6A:D0:9D:03:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.223.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:54:79:4c:07:65:67:86:62:7c:a4:c1:4c:7d:39:66:ef:47:
         7a:70:3d:f7:21:8a:c5:38:89:4a:fb:dd:f4:85:d9:21:83:17:
         11:c9:87:e2:50:6b:e2:de:5b:b6:8b:df:4f:41:f9:2f:d0:e3:
         60:70:57:b9:49:48:e9:48:f8:97:8c:16:0e:aa:cc:95:0a:e8:
         cd:8d:79:34:12:f6:85:45:35:37:23:41:f8:f1:3d:d3:9f:23:
         b3:93:0d:ed:e4:3c:55:b1:56:dd:7d:b7:f2:1f:43:c1:17:4e:
         79:7a:fb:10:25:ac:7c:a2:47:79:04:38:2f:51:fd:fd:9b:a1:
         4d:fd:f9:f7:49:db:12:cd:a5:66:47:f3:a2:e0:77:61:ae:4a:
         6b:09:bb:60:89:c3:34:5f:22:f8:08:0c:71:79:b5:49:a5:56:
         4c:57:1f:39:3e:5f:34:f2:cd:5d:e7:ec:58:36:14:74:0c:a4:
         16:93:ed:a8:15:52:01:73:b1:c6:29:bc:02:62:50:d2:8f:36:
         88:57:aa:49:d1:3b:e7:91:e7:8b:5f:28:cb:3a:71:73:de:13:
         5f:45:bb:7e:ea:1a:80:25:f8:e5:4c:b3:e0:91:b4:79:95:96:
         f4:97:1a:59:63:d8:51:94:af:49:ae:02:72:68:61:b2:33:c8:
         24:85:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:59:06 2024 by rpki-client on console-ams.rpki-client.org