Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
File:                     022d8988-9d2b-32ce-97c6-f993375ebefa.roa (raw, json)
Hash identifier:          ldaY2/225jLx2h8S/bXa2WBpCOi5aruSnCoYgGp5a5M=
Subject key identifier:   82:7F:3E:9C:81:32:AA:2F:E8:75:DF:76:25:E7:E5:BE:84:F2:D4:A4
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584598FE05029D64AD305B2F4200
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     398233
IP address blocks:        67.214.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:05:02:9d:64:ad:30:5b:2f:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=a1b0b04e-d7e3-4c3e-b951-6291b10f7d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:d4:19:14:0d:0a:c4:95:92:ef:db:f1:a3:
                    0f:40:f1:fb:64:5c:9e:5e:90:e9:00:33:0f:47:95:
                    95:ba:0b:8b:d1:4d:22:8b:2c:9e:82:b0:98:b9:3a:
                    43:ca:76:47:52:c7:cd:80:b0:16:40:fa:3b:c6:33:
                    02:e6:45:14:2d:70:46:9c:b7:89:bf:2e:ce:3d:cf:
                    ae:c3:e4:22:4d:34:3a:c2:b6:83:eb:f7:39:f9:00:
                    b7:0e:a3:c8:ce:88:0b:da:fe:79:14:e5:d9:e2:d7:
                    e5:c7:03:40:17:23:f8:3d:4f:49:b5:7a:ae:bd:82:
                    ef:ae:d4:24:1c:61:01:48:24:af:4e:f5:f8:b0:58:
                    bc:e0:31:52:95:5f:a9:76:1d:db:73:61:d5:ee:1e:
                    83:39:dc:ce:f6:7e:8c:0f:39:da:2c:58:94:47:7d:
                    88:a7:64:5f:e4:5d:db:b9:ec:05:62:43:c8:1b:7b:
                    06:d3:fd:18:d9:b3:1e:99:cb:ea:06:9b:2d:ac:2f:
                    84:fa:1c:54:29:59:be:ba:1f:a5:b9:db:e7:59:87:
                    a2:3f:94:71:f9:a3:9b:2f:76:1a:8d:27:48:82:a5:
                    79:14:73:69:ac:7d:7c:ea:7d:12:51:88:43:28:9a:
                    8b:1f:d0:07:b9:47:1e:5c:bd:10:76:ed:0f:24:2b:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7F:3E:9C:81:32:AA:2F:E8:75:DF:76:25:E7:E5:BE:84:F2:D4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:6a:6a:35:26:17:3a:cb:0e:2e:20:83:ec:68:57:bd:c0:
         7e:3b:25:70:cf:bb:39:e6:ee:a6:b9:b9:f9:96:6f:86:eb:fc:
         4b:fe:fe:d4:9b:28:53:f4:be:fd:da:3c:b7:62:09:4d:12:7a:
         0d:78:73:8c:48:c8:75:d9:6e:5c:4c:d3:3e:ab:4d:0f:8e:40:
         f3:1f:cd:15:8d:a7:67:43:91:cb:df:1e:4f:11:98:ab:dc:eb:
         dc:77:2c:11:2d:ed:cf:57:3e:66:69:d4:4e:63:1e:d9:e9:69:
         b3:c2:01:c5:71:75:11:67:8f:49:5d:74:7d:78:0c:ba:81:86:
         80:7f:ad:c1:52:b1:eb:54:f7:58:b9:68:71:85:f8:9b:be:10:
         08:a0:fd:50:e0:7f:dc:62:60:96:7e:08:82:59:80:15:f8:64:
         01:50:8d:fa:92:bb:47:63:f0:94:7e:fa:e2:e8:18:2b:09:51:
         9f:e5:ef:a4:a8:6c:50:c0:70:4d:55:1c:81:8a:3f:b4:75:07:
         97:24:dc:5f:fb:87:d6:46:e3:0d:a9:6c:0c:ec:b5:cb:82:7d:
         cb:7c:ff:8e:6d:89:4b:f2:6a:58:00:b3:94:d9:09:be:31:86:
         bb:80:62:29:ef:ca:a4:13:6f:3b:0d:cd:dc:02:7c:5e:cb:e4:
         e9:b5:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 03:23:36 2024 by rpki-client on console-ams.rpki-client.org