Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7143da1-33d0-39af-8a35-c73fa40814d6.roa
File:                     b7143da1-33d0-39af-8a35-c73fa40814d6.roa (raw, json)
Hash identifier:          1yZD32moxcv7w/xAt3zIKRbbuOQfCA00zNpyQ5AwFWQ=
Subject key identifier:   DD:CE:67:EC:58:92:2E:18:01:9F:46:55:B1:17:63:54:5F:C9:17:3F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858462CF443FCEA6FF5CFB51FBEA8
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7143da1-33d0-39af-8a35-c73fa40814d6.roa
Signing time:             Tue 11 Jun 2024 13:00:33 +0000
ROA not before:           Tue 11 Jun 2024 13:00:33 +0000
ROA not after:            Mon 09 Sep 2024 13:00:33 +0000
asID:                     64267
IP address blocks:        142.147.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2c:f4:43:fc:ea:6f:f5:cf:b5:1f:be:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 11 13:00:33 2024 GMT
            Not After : Sep  9 13:00:33 2024 GMT
        Subject: CN=25f6c2a4-4261-4d6c-bf45-24bcec17d7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:ae:20:a6:e5:d6:a5:0b:7d:40:04:90:d1:
                    21:a7:a2:d5:88:2f:f9:d6:1a:aa:d2:8e:50:8e:23:
                    cd:17:61:a9:ed:19:b7:da:78:42:0c:b0:b3:04:ea:
                    24:11:e7:af:39:b8:79:0a:19:63:66:e6:27:7f:7f:
                    09:ba:c2:01:de:9a:df:40:92:91:12:6b:2f:e9:6e:
                    57:af:25:eb:ea:41:5f:91:e4:5b:85:04:0b:df:34:
                    3b:37:87:9c:79:c3:d0:01:fb:f0:ed:a0:f8:bb:09:
                    d6:28:cb:50:6a:53:5e:4e:df:8a:51:20:cf:c0:da:
                    f2:62:e1:e2:ae:a1:ee:b6:b7:c0:00:e0:a8:2c:47:
                    d2:f1:51:03:90:cb:fa:50:31:94:4b:75:1f:99:82:
                    65:79:8c:57:42:7e:36:47:b2:f0:d3:20:a6:be:88:
                    92:15:ec:7d:f5:ea:ae:c2:7f:1f:c3:48:ee:0d:21:
                    3f:ae:f9:73:35:89:1f:b8:1d:2d:3d:37:53:51:fc:
                    8b:98:f1:a9:8f:d2:d1:e8:35:0c:3e:6b:03:3b:da:
                    d9:15:96:97:aa:89:91:33:2f:7e:33:c2:b0:07:41:
                    8c:35:64:32:bd:ff:e9:12:7d:ed:70:ec:c3:a0:05:
                    ff:14:46:03:1a:5a:f4:ba:27:9e:8e:21:c7:54:72:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CE:67:EC:58:92:2E:18:01:9F:46:55:B1:17:63:54:5F:C9:17:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7143da1-33d0-39af-8a35-c73fa40814d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:39:39:33:77:38:d7:af:69:e7:eb:48:c9:07:94:1c:f9:
         9e:aa:b6:3a:52:e3:d3:05:30:f5:9a:9a:6f:40:42:ee:02:d8:
         25:b4:71:15:a2:77:ad:42:f2:e7:64:b9:56:45:62:c0:d7:fb:
         3a:6c:1c:7e:d5:8a:6d:0c:fd:8e:18:3e:84:81:81:89:0e:0e:
         38:7d:90:1e:cc:f6:d6:f8:87:93:2c:7a:93:2a:39:34:4f:d0:
         80:91:e4:d7:61:8a:20:00:7a:8e:a7:aa:9e:53:3d:9d:1e:6c:
         ba:8b:1f:e5:41:58:5c:5f:d1:e2:59:b6:aa:e0:c2:58:39:3a:
         c4:89:2c:fa:2e:b0:eb:9a:ce:86:12:2a:f1:39:f5:18:af:fa:
         34:c6:0e:56:5d:d5:46:7b:2d:0c:04:21:12:88:10:d8:26:28:
         35:fc:a6:41:e2:33:ab:0e:ce:b7:fb:d1:c3:92:0c:8c:c6:57:
         d0:90:43:3a:b9:5d:58:ad:8c:a6:0b:37:78:d4:1a:5e:13:8a:
         09:9d:23:8a:8e:3b:28:4f:fc:64:93:fb:42:06:4f:95:fc:83:
         d4:f2:15:b9:55:e1:fb:21:9d:42:7b:c9:8b:fc:4b:b9:49:83:
         f0:f5:3e:11:24:76:6c:fe:ef:f2:21:90:d2:ee:e7:ce:bb:4a:
         24:89:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:09:23 2024 by rpki-client on console-ams.rpki-client.org