Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa
File:                     2356dd69-9e73-32bf-9ea7-b58042dec355.roa (raw, json)
Hash identifier:          LucB3SzF5EKqga7iUJSPnkSWJlN4YzqxXWyxOuVEJUo=
Subject key identifier:   B9:37:4A:D2:4D:0D:F3:C0:25:64:02:91:D7:3A:7D:FF:FF:2C:8C:C2
Certificate issuer:       /CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde
Certificate serial:       010D0C9F432858477660FF6A58A571B2FC0FB980
Authority key identifier: F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     400637
IP address blocks:        142.147.75.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:ff:6a:58:a5:71:b2:fc:0f:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3c7d65-1451-4936-b2db-39ad3eca6bde
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=0410be05-4316-4605-9f44-4b6da5d36bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:0f:22:b2:7e:04:b2:4a:b7:43:c8:bb:7a:
                    c9:d3:b3:8b:2f:44:53:ec:84:05:ca:f3:a5:af:b4:
                    5c:b9:bb:0b:5e:13:09:42:a9:85:c8:0e:0c:f3:dc:
                    7a:37:57:05:20:b8:ef:db:c2:91:c2:fe:ae:9a:37:
                    07:f6:f8:fb:bc:7f:36:11:ea:4b:8c:2c:54:57:f3:
                    ea:07:80:36:0f:76:de:a7:8b:59:78:21:07:51:47:
                    8f:48:20:1a:4e:e1:c3:d8:41:8e:9c:6f:ab:16:22:
                    38:d8:f4:d0:06:ab:cb:d5:d6:35:e4:91:ef:b1:76:
                    78:9e:d0:74:d8:18:22:f6:d3:b1:05:e1:ac:85:a4:
                    ac:1e:e6:a2:e9:97:b6:d9:51:78:76:fb:48:16:5b:
                    99:48:33:59:b8:af:30:c4:c4:72:08:21:e5:df:95:
                    f6:52:71:13:49:98:34:e0:53:67:5b:ea:2e:33:74:
                    0d:62:93:4d:39:da:12:8c:cd:fd:80:f4:d4:4c:80:
                    53:02:0b:91:e0:85:e5:23:7c:e6:d8:1b:3f:4f:2c:
                    be:38:45:eb:6b:fd:09:7e:90:04:49:f3:63:15:2a:
                    9f:ba:12:6b:78:05:cd:fd:72:6f:39:a1:f8:2b:44:
                    92:2c:5e:17:f8:3c:97:eb:fe:da:ef:7c:22:97:0e:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:37:4A:D2:4D:0D:F3:C0:25:64:02:91:D7:3A:7D:FF:FF:2C:8C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/2356dd69-9e73-32bf-9ea7-b58042dec355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde/8f3c7d65-1451-4936-b2db-39ad3eca6bde.crl

            X509v3 Authority Key Identifier:
                keyid:F2:44:02:53:B8:5A:29:4D:EC:C9:3C:32:AF:A8:BE:68:5D:6C:0C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f3c7d65-1451-4936-b2db-39ad3eca6bde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:23:a7:6b:cf:c1:41:23:aa:56:4e:1f:7b:45:44:e6:a3:c0:
         d9:30:3a:73:30:52:9c:4e:6a:81:db:97:28:d6:3e:3c:29:78:
         ab:af:f7:a7:23:33:c2:db:e7:39:2f:df:f6:a4:16:44:6f:0a:
         e1:9b:cd:40:b4:e8:78:04:58:22:64:81:db:2f:ab:2e:04:f4:
         79:85:1a:cb:b8:90:7d:e0:b1:69:67:47:2d:30:10:61:4d:cb:
         e8:ad:e9:46:4f:5b:e9:97:6e:7d:a1:e4:b8:6f:99:59:a9:27:
         e7:09:a6:d3:88:a0:d7:b6:83:18:a0:12:29:73:a8:73:61:ed:
         6c:36:5e:78:79:a5:3a:9f:0c:34:20:e7:e6:ad:1d:f4:d6:9b:
         7e:c9:df:9d:f5:d3:80:a9:3d:5e:06:c9:54:4b:a4:ff:9c:c3:
         da:d4:b7:3d:9b:a5:22:01:f9:cb:db:4a:c3:82:ad:1f:32:3f:
         f6:64:35:e8:ac:c8:63:c5:41:bc:02:45:a8:27:99:cc:a5:fc:
         bc:1c:da:5f:29:49:6a:5f:6f:25:70:0f:5f:54:72:29:12:c5:
         62:11:be:c1:b3:9f:62:28:46:2b:a5:04:5c:74:72:30:21:50:
         17:30:d1:7f:22:b5:fa:64:42:33:83:b6:9c:ae:d4:34:7f:48:
         13:7d:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org