Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1867646-18b9-39c2-b8b5-4111a1e710ef.roa
File:                     c1867646-18b9-39c2-b8b5-4111a1e710ef.roa (raw, json)
Hash identifier:          8OJCFub353PuN2K/zQXuojPKEcoZO0FVX2E04tmDXpk=
Subject key identifier:   55:1C:E1:37:DC:77:97:87:D9:A6:26:39:D6:6D:4C:3F:6E:27:6B:CE
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285844F7C413661B29A31D4F1657C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1867646-18b9-39c2-b8b5-4111a1e710ef.roa
Signing time:             Wed 21 Feb 2024 18:58:52 +0000
ROA not before:           Wed 21 Feb 2024 18:58:52 +0000
ROA not after:            Tue 21 May 2024 17:58:52 +0000
asID:                     16509
IP address blocks:        67.43.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:c4:13:66:1b:29:a3:1d:4f:16:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 21 18:58:52 2024 GMT
            Not After : May 21 17:58:52 2024 GMT
        Subject: CN=828f488b-5c27-4ed9-9db3-31f334f00b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:18:ae:99:d5:83:02:46:95:81:76:a1:87:
                    f6:6f:8a:51:b9:bf:06:40:12:ec:f1:9a:e2:87:28:
                    08:15:c5:3b:b9:2d:ca:ed:1c:1e:38:21:5a:04:71:
                    15:d7:f7:19:80:67:52:f9:e6:23:96:0e:c7:66:ec:
                    00:b0:fe:40:11:ef:bd:19:db:b6:32:3f:7a:fc:17:
                    51:82:93:c6:b1:8d:1a:13:3f:7e:51:0e:f4:cd:e3:
                    d8:25:58:74:3f:2d:dd:e6:09:e0:a6:30:30:ee:13:
                    37:2f:7f:61:c5:80:57:2e:ff:52:68:36:e6:9d:7a:
                    db:a1:32:fd:83:89:8a:bb:6f:11:3e:53:e0:19:2a:
                    f0:c9:b7:75:09:ce:25:00:a2:d0:e2:1c:f8:b8:1c:
                    eb:d9:e0:26:c5:3b:43:19:99:0a:c1:48:c1:e1:7e:
                    15:57:4d:9e:44:0c:0b:cb:81:83:66:30:4e:3e:97:
                    bf:03:3c:aa:16:a9:0f:76:1d:8b:8c:f8:1f:97:8a:
                    95:b7:52:69:00:11:31:ca:0b:e0:c5:0a:76:41:ce:
                    8c:fa:b1:96:41:2c:2b:9b:43:26:31:f9:91:8a:19:
                    6f:85:e9:a2:cb:46:da:0f:cc:36:f6:cb:52:af:22:
                    ff:08:0d:60:4c:8c:9d:7e:03:36:14:37:a2:9e:dc:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1C:E1:37:DC:77:97:87:D9:A6:26:39:D6:6D:4C:3F:6E:27:6B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1867646-18b9-39c2-b8b5-4111a1e710ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:54:3b:08:ea:66:17:e5:9a:47:7f:cf:30:e8:24:83:f7:0e:
         38:e0:be:81:df:16:83:ac:de:32:75:e1:ac:f6:7a:3b:7a:4d:
         b0:bb:15:10:26:3f:d7:48:c7:27:16:d7:3d:1e:26:dd:7f:03:
         b9:aa:01:5c:98:4b:f1:f8:62:c0:92:47:a9:71:c0:bd:c6:7f:
         f9:16:e9:99:f7:f6:07:a6:cc:8e:58:90:50:26:5f:fb:bf:8f:
         d7:d5:fd:5c:56:de:e0:fd:d8:ed:9b:6f:7b:c4:5c:d7:36:24:
         51:6e:ac:47:a1:dc:74:e6:a5:4f:47:e3:7b:a0:e3:24:7b:08:
         f8:29:0e:05:82:63:11:b5:c7:3a:e5:f5:31:6f:8f:cf:cd:49:
         79:91:74:46:d6:32:62:68:26:b9:e3:53:b6:72:4a:bd:7f:af:
         39:f9:ce:c4:9b:e0:ae:b3:0d:bf:f5:c1:ad:bd:3e:88:82:69:
         07:84:9a:4d:2c:00:e8:8a:e4:1f:8b:c4:b9:a9:6a:e9:d1:7e:
         21:db:54:91:bf:c9:50:02:a5:cc:aa:3a:51:96:93:52:0b:65:
         98:99:c3:c2:06:8e:2a:03:3c:89:1d:8e:af:1f:4b:6e:70:27:
         5d:39:f1:6a:3e:72:68:78:75:7d:18:8b:ed:b7:b5:dc:27:83:
         d0:32:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:56 2024 by rpki-client on console-fra.rpki-client.org