Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa
File:                     9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa (raw, json)
Hash identifier:          ei65GD6YZB18yqh5Um9XsWcc8Fau07IAjRZfGmXRrxg=
Subject key identifier:   27:3E:4D:1D:3F:F9:2D:68:C9:85:96:4A:1E:AF:8F:CB:6A:96:CE:1B
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285845840DC37692DF255451FC2E00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        67.219.241.0/24 maxlen: 24
                          67.219.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c3:76:92:df:25:54:51:fc:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=c776091a-8173-42b2-a663-6b03405a8233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:f1:07:96:9a:94:d7:77:b4:73:c8:5f:97:
                    64:97:c0:c0:a6:7b:05:4e:7d:b3:a5:7d:02:29:bd:
                    01:c7:27:26:44:2a:ba:08:89:87:ba:84:12:4a:76:
                    e7:08:00:02:cf:c2:6f:0c:f6:b9:45:4d:26:29:54:
                    d5:a7:f2:95:88:ec:4a:2b:92:cc:54:24:76:ae:19:
                    09:8f:b0:19:eb:0d:44:0d:ed:c3:e7:b6:11:92:bc:
                    3c:ab:43:87:93:e9:99:f8:26:7a:64:22:05:c7:7a:
                    90:46:c4:b7:ad:bf:72:58:1d:84:3a:79:e9:52:c8:
                    8e:29:21:11:4d:0d:29:86:3b:43:b5:d3:5a:0e:a7:
                    e3:b6:db:b4:75:19:d0:16:59:60:47:81:af:a4:97:
                    26:a6:66:22:9d:a0:c3:ae:54:30:9e:d7:73:98:63:
                    d7:45:15:9c:b0:de:d1:36:f3:49:19:6e:c7:84:e3:
                    fa:d2:8b:24:06:57:79:8d:a6:ae:2d:5f:87:04:a8:
                    e4:c9:72:bc:24:0a:9b:27:bf:2c:d1:f8:b7:23:05:
                    ac:47:8c:e9:fa:48:07:5a:da:c9:a2:1c:15:fc:f8:
                    40:b5:5a:ca:ca:69:40:4a:1c:7d:25:8e:7f:4d:18:
                    a8:bd:ef:b9:f3:61:88:29:7c:76:be:bc:5e:97:a5:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3E:4D:1D:3F:F9:2D:68:C9:85:96:4A:1E:AF:8F:CB:6A:96:CE:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9a98af4e-3c0f-303d-8d4e-74b9bb146529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:11:32:44:61:17:66:e9:0c:09:f2:32:b4:45:cc:24:c7:50:
         c9:22:d6:82:91:cc:6c:26:1b:41:30:da:ba:56:55:3e:15:c5:
         77:5e:3b:8b:2e:e1:be:4b:11:44:8f:f0:b4:63:fe:39:dc:62:
         02:f3:72:08:44:8d:9a:b0:11:61:88:73:e3:59:6c:8a:19:3e:
         03:99:fa:09:30:a1:0c:39:56:5f:fc:2b:09:06:d8:15:75:6a:
         81:47:2e:71:a9:b4:a8:0c:4c:10:6f:ba:d3:3d:c5:81:f0:33:
         ea:6c:11:e5:3f:c9:86:84:91:54:e3:dd:14:82:a6:d5:4f:56:
         9e:9a:21:41:e3:a1:ec:0b:d5:75:0a:b6:19:f7:ca:c0:d3:83:
         40:04:9d:ea:e2:24:7f:4a:b0:34:2a:c5:0f:25:59:c4:51:30:
         56:d0:59:93:a7:ee:9c:65:00:7f:fc:26:9b:dd:ff:b2:d1:db:
         80:a4:30:74:87:e9:0e:25:fa:a1:03:a1:14:43:fa:06:95:39:
         ab:00:c1:07:ca:0b:c1:21:22:f3:81:ee:b0:16:35:33:73:0c:
         f6:40:78:4f:0d:b9:7c:19:1c:77:b2:60:1c:50:db:01:6e:d3:
         25:ee:3e:59:0a:7b:ed:33:1b:17:68:92:52:e2:a0:96:11:75:
         56:21:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org