Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa
File:                     43633a19-7889-3252-9f77-1300c5c82796.roa (raw, json)
Hash identifier:          sXvxvv7vTneTHAQTvLGLNhEN30CTQI5bB6BExEATBMo=
Subject key identifier:   9F:B8:71:63:D0:70:D4:E0:2E:29:15:0A:F7:40:05:E7:A6:16:C5:8E
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F432858476E00F84CB6A97946E879CF80
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     22612
IP address blocks:        67.223.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:f8:4c:b6:a9:79:46:e8:79:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=b78f56fc-dbcf-43f6-9d89-f273f49713a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:9c:fd:75:e7:77:aa:7a:68:23:7b:ad:1c:
                    5f:71:04:a2:ab:6f:4c:54:8e:e0:93:2b:ab:79:d1:
                    8a:86:7e:1f:73:d4:a4:5f:bd:fa:d1:1e:b3:cf:4f:
                    17:41:cc:d8:a6:de:a7:c3:7f:f6:ac:c1:b2:23:21:
                    5f:0d:da:56:cc:a6:c1:36:bd:13:a7:c5:81:85:4c:
                    e5:05:a6:06:13:39:56:b4:ca:82:21:08:83:99:45:
                    94:69:a8:6f:42:b9:9d:48:e8:49:42:ce:75:f7:15:
                    5c:f0:b3:44:44:43:7f:32:75:09:d6:cc:6c:fd:95:
                    22:3b:1a:7d:e8:65:2c:32:3c:77:8d:d3:45:d7:27:
                    86:95:c7:be:84:d1:24:24:e0:59:49:b5:5c:5f:09:
                    5d:9c:2a:81:35:c7:ef:ac:b2:f9:18:97:8f:60:76:
                    00:03:bb:25:32:16:08:77:b2:af:54:47:18:64:89:
                    3c:c0:8e:11:a9:95:6f:8b:36:4d:50:44:e9:64:e4:
                    1a:2d:8f:f9:4c:ae:2a:75:68:30:6c:a2:64:fb:be:
                    8d:74:4a:16:38:27:ef:bd:97:c6:a4:2f:b4:fc:4a:
                    b5:79:7b:6c:fe:db:3c:47:44:eb:be:33:33:f9:85:
                    71:34:d9:c4:3c:ff:d8:cb:c7:42:bf:80:ed:bc:89:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:71:63:D0:70:D4:E0:2E:29:15:0A:F7:40:05:E7:A6:16:C5:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.223.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:12:aa:7f:50:10:e9:3d:43:00:65:16:e5:ae:5c:d0:f0:
         90:35:84:15:56:53:d2:02:98:a8:55:2c:7c:be:44:75:93:db:
         8c:af:25:2c:86:c8:e4:6c:ea:05:2b:6e:be:87:88:ff:f3:77:
         fb:7c:d8:93:fa:f9:48:ca:58:be:cf:81:c6:b2:36:51:9d:39:
         cb:2f:59:eb:6a:07:c8:f5:0d:2a:64:39:25:3c:37:34:74:7a:
         a5:87:a4:85:a6:03:be:73:d7:c9:b9:f1:ee:9d:b0:6d:1f:f4:
         bb:06:f9:54:81:90:c9:ca:65:88:75:44:1b:78:dd:61:e4:90:
         89:aa:66:1d:3c:fe:05:22:47:3e:d9:f4:cd:dc:bb:64:c4:67:
         28:78:5b:6b:52:71:dc:2e:59:24:13:4c:91:bc:cc:f7:a7:e1:
         08:99:cf:25:a4:f5:f5:7b:4b:5e:a6:91:e5:b9:23:87:86:c0:
         8f:94:af:94:83:5f:0f:f3:e2:c5:bd:50:30:66:a1:dd:5b:ca:
         2b:37:3b:73:6b:9f:19:a4:71:ca:2a:f4:92:e9:b2:23:38:ed:
         09:7b:de:93:b4:6b:e8:25:d1:f9:6f:ee:8f:93:19:ca:31:15:
         f6:e3:81:ca:70:dc:16:84:97:60:9e:2a:9c:84:ad:b1:eb:dc:
         ce:c1:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:13:04 2024 by rpki-client on console-fra.rpki-client.org