Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa
File:                     d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa (raw, json)
Hash identifier:          BIOZziVsxHv5nhMrvMejeqT3cxR3Gs68LHqPQaSWGJE=
Subject key identifier:   8A:98:56:F7:4B:E8:EC:42:E7:62:B8:C0:E4:91:15:E2:A4:87:27:41
Certificate issuer:       /CN=cfb7a881-7ab4-481b-a9b2-22789676f960
Certificate serial:       010D0C9F43285845883DD5A5A9E6917DDE55EF80
Authority key identifier: B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     398395
IP address blocks:        67.219.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:d5:a5:a9:e6:91:7d:de:55:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb7a881-7ab4-481b-a9b2-22789676f960
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=acb8de2a-d4fa-4738-832b-cef7c5a6ee21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:08:72:88:9f:f4:a7:c0:f0:b9:2b:3d:d3:
                    7b:77:fa:d8:7b:6b:7f:9e:6c:e3:ae:19:d9:c8:9e:
                    79:f1:57:b8:e9:fd:c6:46:4a:63:1a:3c:95:a0:61:
                    59:87:73:0b:8f:3c:c2:c1:26:16:aa:57:2a:4d:6a:
                    0f:28:99:7a:64:1f:23:2f:97:81:8e:7a:1b:52:32:
                    6c:1f:a8:a9:b9:2d:51:3e:65:8e:7f:4e:98:67:6b:
                    56:9f:b8:9c:5e:51:82:52:19:d5:3b:9f:66:d1:1b:
                    65:a6:3f:45:56:0f:a1:26:87:33:b1:47:e0:08:d0:
                    6c:f0:0a:12:35:fb:46:b9:2c:25:08:7c:0b:c8:e6:
                    98:68:d8:d9:08:5b:2f:f8:dc:53:92:cb:37:03:3a:
                    30:ec:1f:b8:f8:fd:4f:ef:94:3f:e5:e2:93:08:00:
                    ba:3c:e7:f3:31:78:a8:a5:77:59:04:f2:4e:db:d3:
                    33:64:63:00:d5:bc:a1:85:9a:bd:e8:5e:d9:ad:40:
                    ca:f9:84:2e:d6:9f:47:74:f3:33:79:7f:8c:b8:65:
                    1f:26:79:5e:57:cd:ac:25:d6:2e:30:98:28:5c:83:
                    b5:d1:85:0a:17:d7:4f:b7:d9:5e:5b:ef:91:7a:e7:
                    7e:23:c3:48:83:7d:30:7b:cf:4c:d0:84:cc:fc:4c:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:56:F7:4B:E8:EC:42:E7:62:B8:C0:E4:91:15:E2:A4:87:27:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.crl

            X509v3 Authority Key Identifier:
                keyid:B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:a8:74:02:0c:5f:77:5d:b3:b0:b6:29:0f:1a:0b:8b:e7:
         91:fe:3e:36:12:b7:5c:89:08:e1:41:86:54:5a:99:97:de:5f:
         e8:6a:29:c6:30:55:bb:3a:76:79:49:a5:d6:79:d6:f7:16:40:
         85:b1:e2:17:c5:43:1b:40:d1:1f:b2:bb:70:f3:67:25:fd:6e:
         89:9f:3f:19:27:de:d2:57:cc:ff:73:21:5f:5d:77:e2:4f:81:
         79:ae:9d:68:1e:fb:e8:1b:08:04:63:5c:c5:5b:c9:53:b3:a5:
         02:90:dd:e4:31:74:46:ad:9e:cf:dc:3f:c0:bf:73:76:83:33:
         f2:32:71:c4:74:d0:ff:fb:bf:11:a2:fd:07:56:d9:dd:f1:a6:
         b7:41:12:e4:a4:0c:be:92:39:fe:fd:3f:a5:cc:47:17:cb:9b:
         69:26:c1:a2:72:5b:5a:4d:cc:2f:b5:15:7d:16:b7:55:f7:66:
         2f:e8:13:bf:b1:24:b4:9a:4b:47:15:25:c0:1c:a6:ef:87:90:
         c8:4c:ad:1a:fe:17:cf:ef:fe:87:98:67:e7:5d:bc:a8:88:81:
         76:f7:c8:b6:77:2b:54:28:8a:7d:83:df:7d:99:e2:88:0e:b5:
         94:b0:7a:d5:04:5b:e8:06:c0:b2:87:ad:bb:f3:bc:01:62:b3:
         0e:c5:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:19:37 2024 by rpki-client on console-ams.rpki-client.org