Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa
File:                     b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa (raw, json)
Hash identifier:          a4C2XtV6qnqde8V6Uv0CMWQ9In5hwGYrBvuvNC/hCVE=
Subject key identifier:   67:84:23:AF:1A:CE:85:0C:EF:3E:66:8A:62:2F:99:2E:44:DE:41:E4
Certificate issuer:       /CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
Certificate serial:       010D0C9F43285845C5A8E1BE98E52F854C06E840
Authority key identifier: BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     15830
IP address blocks:        142.54.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e1:be:98:e5:2f:85:4c:06:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=fca297c2-d925-4cbf-b4cd-0a4774d98ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:f3:d4:72:32:dd:0c:ab:cc:ca:06:31:cc:
                    62:76:11:5d:20:e4:5a:0d:0f:bd:cc:ac:47:f7:88:
                    4c:d3:13:f2:2d:0c:fd:8d:15:cd:42:48:5e:dc:7f:
                    6e:b4:fe:1d:45:66:75:1e:55:8b:3a:2b:ed:56:3d:
                    e2:59:36:54:43:d3:6d:c1:ac:4c:d4:e4:45:15:e4:
                    53:9c:06:40:69:ad:aa:28:40:19:6f:73:15:5c:be:
                    75:d9:ef:6b:fb:66:86:85:0c:9a:32:e9:4d:af:6b:
                    33:67:92:6a:f5:b4:6d:c6:37:2d:b6:17:90:86:e7:
                    e5:e3:d6:09:ed:7d:54:9d:57:d8:50:cd:9f:cb:2e:
                    3a:00:64:fa:ff:aa:8a:b6:d7:9a:c6:df:2b:c5:72:
                    bf:73:f3:e9:76:07:8e:50:ae:d6:81:3e:73:dd:3a:
                    3d:b2:7c:ed:09:a2:44:0f:2b:94:bc:a1:8a:6e:6d:
                    d4:eb:6e:57:92:ab:4e:2e:3b:fe:b8:98:04:cb:74:
                    d7:30:80:25:c1:02:d7:87:10:f0:3b:4e:ad:73:13:
                    17:06:75:5c:ef:1a:bf:a5:bb:f3:da:18:ff:f9:bf:
                    c6:74:51:35:1d:c1:46:14:66:4b:5b:9e:f9:1e:6c:
                    26:95:1d:ed:22:d9:b0:9c:3b:1c:5b:b4:55:33:bc:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:23:AF:1A:CE:85:0C:EF:3E:66:8A:62:2F:99:2E:44:DE:41:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/b6ccfba0-614d-37fb-bd65-ff1553b89cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl

            X509v3 Authority Key Identifier:
                keyid:BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1d:d6:1d:95:f7:3a:1a:44:b3:fb:65:a6:db:71:6f:72:e3:
         e8:58:cc:8a:fc:14:7c:48:64:de:d2:0f:57:a8:a7:63:c2:2c:
         0f:a1:48:44:09:03:c3:d9:0d:ac:87:94:e9:66:2d:c6:1b:34:
         88:9f:d7:bf:fd:bc:d8:dd:2f:cf:8e:e0:ce:4c:d8:1c:b6:39:
         34:16:49:b4:17:1a:d3:fc:c0:a6:a2:b5:9a:46:9a:1d:32:4c:
         44:09:f5:2b:47:15:c1:15:df:2d:3b:16:ee:b6:1e:9e:00:d7:
         23:24:c6:24:69:39:30:17:95:79:90:1e:db:8d:10:9a:91:98:
         97:04:4b:90:bc:9d:8c:6e:25:08:01:d6:76:33:42:45:16:d4:
         b9:74:a0:2a:61:77:13:e2:25:ea:01:0e:dd:5d:64:8e:e2:64:
         80:9e:14:5f:7c:6f:5e:ac:a1:6c:b4:f4:cd:41:5a:42:3d:2f:
         8d:d7:0d:05:db:ff:12:e9:a9:f5:d1:67:99:eb:b9:78:70:57:
         18:c6:16:e2:b1:da:45:97:08:2f:e0:87:52:da:85:8c:dd:c2:
         5a:1a:ef:a8:63:22:ea:99:75:8f:0d:b5:11:14:60:a6:a2:ea:
         b5:81:8a:4c:37:46:94:dc:e8:51:96:e4:ec:97:8f:7a:71:d5:
         72:42:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:54:28 2024 by rpki-client on console-fra.rpki-client.org