Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa
File:                     2356dd69-9e73-32bf-9ea7-b58042dec355.roa (raw, json)
Hash identifier:          OZiMsJBimCAX0LlVz16kbjmqINSn0f3cYtjBCLo7If0=
Subject key identifier:   5A:EA:BF:BC:B2:76:C7:EF:43:89:C8:23:05:72:B2:71:3E:FB:2C:D7
Certificate issuer:       /CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde
Certificate serial:       010D0C9F43285844D71526E21C0D60F83B6D0900
Authority key identifier: F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     400637
IP address blocks:        142.147.75.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:26:e2:1c:0d:60:f8:3b:6d:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=4258a649-aeee-424e-aed5-78bcf405d49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:52:80:aa:68:90:fe:23:74:79:58:99:45:
                    27:bd:f9:75:c3:18:b6:c5:4f:92:16:15:24:a9:0e:
                    2b:7b:c4:b0:5c:d2:ef:e0:db:e5:9d:64:7e:d8:d9:
                    81:e2:69:3e:38:bd:6a:ab:67:e0:16:44:5a:ec:cd:
                    a4:f5:a9:e0:21:96:bc:08:22:cf:92:ff:7c:00:4d:
                    d4:6f:0c:6b:24:85:97:36:11:d9:83:9a:d7:54:83:
                    b8:ca:de:17:5d:80:c5:45:9c:f5:dd:67:14:1d:50:
                    33:a9:4a:2c:31:9d:cd:fb:d6:be:70:53:48:31:b2:
                    61:14:dc:b1:41:ea:ec:d7:6b:48:cd:65:aa:26:8c:
                    b3:74:0a:e9:3b:55:3d:c4:76:56:38:b4:e0:5d:d2:
                    e5:59:c7:d4:10:2e:35:7b:96:9b:95:a8:a9:07:4a:
                    7e:09:bd:23:21:e9:f4:24:80:1f:3c:67:af:8d:87:
                    12:c6:51:3c:a2:61:16:49:c2:0d:60:3f:c3:71:ed:
                    cd:55:3a:65:cf:03:21:af:ae:e7:5a:4e:ae:b2:5e:
                    1e:95:92:76:db:80:c5:b4:cc:3a:3c:49:0b:43:9a:
                    12:1d:dd:4a:8c:be:00:4b:52:a0:b3:41:4f:75:75:
                    6c:16:9a:09:7c:4b:c0:2b:2e:f2:7e:25:0d:61:21:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EA:BF:BC:B2:76:C7:EF:43:89:C8:23:05:72:B2:71:3E:FB:2C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl

            X509v3 Authority Key Identifier:
                keyid:F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c8:97:2a:40:d8:b7:86:05:af:54:8c:92:2c:56:0a:03:cd:
         32:b0:cb:fe:ba:29:16:a5:cf:b1:b9:98:3d:1c:74:9f:de:5c:
         66:94:bb:b5:93:f5:64:11:dc:6a:eb:e2:b1:31:35:3b:2c:9f:
         46:e9:ae:9b:5f:be:e6:51:2a:04:fd:9f:2c:63:be:61:57:52:
         03:3c:8a:57:88:a0:a7:32:ff:79:ab:02:44:a4:9e:8a:66:c5:
         6b:a0:86:80:85:20:16:08:9d:a9:4e:b7:f8:08:de:3d:c5:b7:
         8b:f5:9a:a3:84:46:a2:25:0f:77:04:b7:0d:a4:bd:d4:d1:3d:
         8f:6d:80:f9:b7:ae:b3:06:35:8b:c4:b7:43:d8:83:7b:f4:f2:
         13:eb:64:ef:a8:f6:45:58:99:ec:26:62:d2:40:37:dc:6d:ba:
         d4:c1:dc:84:97:86:d0:89:ef:65:83:ca:c7:45:7a:4a:f5:ff:
         1e:ee:fa:af:ab:63:a4:8b:3d:8f:22:0d:3e:36:f3:28:f9:8f:
         aa:26:c3:af:36:3f:88:45:44:40:4d:c5:6f:53:e3:1d:16:b7:
         9e:26:7a:31:02:06:4a:fc:49:16:10:8c:15:2f:f1:b4:51:50:
         9b:c9:d7:99:ea:e0:6d:f2:ff:25:a7:49:a4:75:08:64:6b:be:
         78:02:1f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:02:34 2024 by rpki-client on console-ams.rpki-client.org