Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/f904f3c2-9ec9-3d87-b003-dcad533e7f3b.roa
File:                     f904f3c2-9ec9-3d87-b003-dcad533e7f3b.roa (raw, json)
Hash identifier:          0+hnKGyTnxNumo+6eUAoyRucVy+l+xd89hYxoQNgFVg=
Subject key identifier:   38:E5:45:BB:AD:95:3E:99:86:F0:26:99:E1:69:E8:5E:B3:7D:C5:0C
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285845C0138D3F735AE5394FFC2910
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/f904f3c2-9ec9-3d87-b003-dcad533e7f3b.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     57043
IP address blocks:        163.123.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:8d:3f:73:5a:e5:39:4f:fc:29:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=d2d4e73b-4910-476b-b7bb-ffcf8649a915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:3f:5a:b0:f8:31:46:77:7d:dd:fb:06:a7:
                    b4:4c:bf:8c:83:cd:50:f2:a1:b1:dc:3b:a1:4e:1a:
                    35:03:77:57:b0:7f:f2:1d:f2:34:37:cb:8b:16:8d:
                    61:b3:6b:c6:3b:7e:6a:c8:4c:9e:1e:93:19:e9:b9:
                    74:0c:83:4a:bd:12:3d:bb:69:99:79:40:41:ea:83:
                    79:43:31:23:7a:65:0c:82:76:3d:a2:26:85:b3:df:
                    48:b8:99:ac:09:8a:31:1d:5d:f1:b3:30:f3:c3:18:
                    14:22:ad:b9:7b:97:33:27:ee:76:7e:3b:83:bb:af:
                    b1:d2:94:18:fd:49:ec:07:68:09:55:3b:e9:42:22:
                    ff:17:fe:1b:0e:69:72:41:82:09:cf:e8:2e:0f:fa:
                    89:c8:76:da:18:34:a2:70:30:92:c6:b8:4e:8a:0b:
                    55:b2:1d:7f:ff:33:19:0a:ea:af:78:6d:38:1d:89:
                    aa:d3:fb:cc:5a:b7:f1:8c:ef:5e:80:39:00:5f:b6:
                    72:b1:8f:f9:e3:54:60:f7:98:ec:1a:8a:5a:77:ff:
                    8b:b7:19:f3:5b:53:58:9f:34:f4:d6:57:1d:01:d9:
                    fc:46:57:0e:ba:8c:7b:f7:b9:b3:6c:fe:db:3e:3f:
                    91:32:a2:a2:b9:6d:70:6a:49:3a:6c:92:ed:e9:17:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E5:45:BB:AD:95:3E:99:86:F0:26:99:E1:69:E8:5E:B3:7D:C5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/f904f3c2-9ec9-3d87-b003-dcad533e7f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:96:fd:d5:08:21:58:a3:92:21:79:c4:a2:3b:f7:aa:21:
         d9:23:53:1e:b7:13:bd:31:cf:25:2c:7c:32:9e:a7:75:a0:88:
         d8:3e:33:70:45:e6:11:f2:0e:43:8b:5a:4f:66:e5:1d:e5:3e:
         8b:1c:e9:4f:45:75:aa:51:24:f9:4f:fa:5a:4d:f2:80:59:90:
         46:81:b8:c5:ea:78:9b:0a:f6:6d:a0:5e:ba:51:27:36:fb:6d:
         f0:f8:90:fb:90:38:37:20:19:21:e7:72:5e:49:c8:b7:12:9d:
         01:af:d4:5c:a6:a0:55:09:53:9b:bf:d7:7e:cf:4f:c4:55:a5:
         5e:af:7f:2b:77:26:07:16:4d:9a:10:5d:2f:14:35:c1:98:fd:
         39:a9:19:dd:94:9a:b6:6e:f8:34:56:ce:0e:91:23:a7:89:50:
         c0:84:df:24:44:27:9f:42:10:c2:7d:53:d3:c2:a0:38:90:1f:
         79:26:79:b4:c2:f2:53:35:38:75:51:62:f5:b0:3e:78:2a:71:
         0b:d9:d5:c9:9e:d9:90:de:84:1f:5d:c4:99:48:e3:04:1e:e2:
         8c:ae:82:e9:47:a7:ec:df:56:1b:b1:14:e0:6e:48:5f:99:bd:
         cd:5e:e7:6d:27:98:22:c6:e7:9d:57:ad:a7:fa:6c:cd:0c:9d:
         a5:47:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:15:11 2024 by rpki-client on console-ams.rpki-client.org