Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
File:                     1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json)
Hash identifier:          2X5kC+2DI5TJrn7pZn8PGF7ggxKJ/kcGTAT9qShitIs=
Subject key identifier:   41:08:3E:89:52:8B:CE:CA:26:0F:82:E2:88:A1:FE:0A:88:1C:DA:68
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F432858455E5DA4B583613BF32DE7F880
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     7448
IP address blocks:        143.192.0.0/18 maxlen: 24
                          143.192.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a4:b5:83:61:3b:f3:2d:e7:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=4a244e66-ecce-4054-89c9-279fe7ec72dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:0e:b3:22:05:e9:d1:e8:75:24:da:8d:ac:
                    96:27:40:e5:b4:7b:28:41:73:7b:78:00:93:e6:4d:
                    c5:d8:0f:cd:e9:3a:37:81:7c:a0:d3:28:06:fb:14:
                    96:be:5d:6a:0e:9d:12:b3:c3:45:ea:c5:8e:ad:5e:
                    7f:fe:e5:aa:ac:80:02:22:e2:4d:15:56:d3:15:ac:
                    0e:03:fd:3d:fa:cf:75:71:38:99:b7:84:e8:7d:fd:
                    f7:88:1f:3a:aa:36:d4:91:f5:0c:ff:57:c9:99:34:
                    94:8b:ff:b4:db:31:3d:b9:65:aa:fd:8f:83:36:ba:
                    61:84:68:f7:57:dd:66:17:cc:55:bc:94:00:63:a1:
                    b9:75:68:a4:01:46:d0:16:79:29:ab:3c:53:a8:64:
                    dc:16:2a:83:59:7c:89:8a:8b:84:b1:88:b6:95:9a:
                    07:ea:c4:8b:f2:7a:b0:13:5d:23:e8:9e:d4:42:b6:
                    54:8d:80:1a:79:a5:2e:b6:c2:ba:e8:70:12:81:4c:
                    8b:bb:99:b2:a0:2d:23:ca:29:b4:0b:a9:71:b5:55:
                    7e:f0:39:a7:51:35:e8:46:a4:45:46:70:a4:1f:ae:
                    d5:7c:24:b6:7d:a8:b3:f6:3c:61:2a:cf:a0:0a:af:
                    6e:7c:93:cf:8f:78:d6:67:b3:09:41:65:83:58:b1:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:08:3E:89:52:8B:CE:CA:26:0F:82:E2:88:A1:FE:0A:88:1C:DA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.0.0-143.192.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:29:b7:7c:4b:e3:48:a1:15:ce:c9:a2:69:f2:6a:73:d5:
         f8:b4:c4:02:00:1c:3e:ff:99:7d:72:2e:82:ca:27:47:47:a0:
         24:a8:88:50:00:8a:45:20:d3:2b:14:59:11:02:6d:06:a4:dc:
         9f:22:6d:88:71:d0:eb:31:d7:81:7e:19:d0:4a:c3:91:23:8d:
         12:5d:33:60:77:8e:5a:0a:d6:ee:7b:c8:cd:3a:b1:d8:25:88:
         d7:6b:3f:db:3d:b6:3a:37:f0:f4:9b:e2:40:06:49:24:23:59:
         54:1d:ef:f2:be:0f:af:b2:63:47:3b:32:31:2c:d1:de:40:85:
         a3:66:0f:8e:c8:f2:f1:e5:9c:8f:7c:6b:26:dc:b1:d6:f9:4e:
         b6:77:a7:52:72:c9:51:8c:58:27:11:ef:b9:e7:dc:f4:28:14:
         6e:ac:6d:77:10:55:e5:83:77:1c:e0:4d:58:7b:b6:b6:24:43:
         05:23:d4:44:be:3c:b7:6b:da:2a:02:b4:fc:69:0d:18:93:7a:
         d7:43:2f:d9:19:6e:2e:42:cb:ba:22:3a:26:3e:55:5e:a9:40:
         a1:c1:4e:45:eb:0c:24:02:1b:50:25:8e:33:0c:10:8c:41:b3:
         7f:e9:b5:8a:53:72:a7:45:86:e2:16:14:cd:83:ac:5e:ee:13:
         a2:86:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org