Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
File:                     b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa (raw, json)
Hash identifier:          abtwY09C3yhQRfR53/TV22RtSDd2nGlQauh4/hj6yoI=
Subject key identifier:   65:EE:79:90:A4:71:DA:65:AE:8C:5D:7D:29:21:BA:D7:77:CC:3A:F2
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285845CE08ED09C6B207852021CA80
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     4181
IP address blocks:        217.143.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:ed:09:c6:b2:07:85:20:21:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=9340c394-7e37-4ddf-a603-05ef70040b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:13:ce:76:92:0b:9d:38:bf:45:27:23:dd:
                    b5:9e:b7:0e:d0:d8:36:a3:19:b4:1d:23:93:bf:78:
                    cb:2e:34:ee:75:ec:7f:b9:ec:07:25:6a:56:5a:42:
                    cd:25:21:a7:a0:c8:8e:81:1f:24:be:a6:08:66:12:
                    6a:53:61:41:52:d7:81:cf:e7:27:b3:5a:7b:e4:5c:
                    40:04:77:f6:6d:97:cf:79:9c:4d:ed:d9:7f:99:0c:
                    66:42:2a:a4:20:09:18:9e:9e:de:15:35:63:56:94:
                    91:be:e2:4c:92:a0:f0:ea:90:7c:d7:cf:7a:75:9c:
                    17:a3:ba:0c:15:49:32:ff:71:87:60:1b:1c:76:40:
                    3e:21:1f:67:af:22:17:05:fa:6c:40:64:3f:51:12:
                    c2:83:96:3f:dd:04:97:b8:86:aa:4b:5b:d3:84:6d:
                    10:b3:07:1e:fa:74:20:6a:91:59:2b:a3:0f:6c:43:
                    70:56:9e:f9:9f:0a:67:fb:d0:5c:fa:a4:5c:02:d9:
                    9d:51:91:0f:1e:ae:a5:04:85:1f:74:77:fa:fb:e3:
                    49:06:74:dd:2c:9d:d2:35:b4:74:37:23:01:1f:4b:
                    52:c9:9a:5f:a9:14:ad:df:10:88:d3:81:55:1e:eb:
                    6b:e6:91:66:ee:a3:0a:af:60:34:7c:c0:83:94:9b:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:79:90:A4:71:DA:65:AE:8C:5D:7D:29:21:BA:D7:77:CC:3A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.143.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:28:5a:a9:d4:5d:30:27:ae:8a:ca:d2:32:9b:8b:97:51:fd:
         0d:27:4d:e7:22:86:36:9d:98:14:c7:ab:1e:ec:6d:3c:1e:b2:
         b4:dd:3b:c7:93:16:22:bf:b0:48:96:31:8e:ce:61:fb:a7:e5:
         bd:d2:7a:98:bc:ad:78:a9:06:25:42:14:56:da:b3:aa:e7:81:
         ea:43:65:b7:c0:d5:b7:97:e1:c8:8e:60:99:f2:50:90:15:e1:
         cc:a7:cd:76:e5:27:28:ba:2a:82:50:46:4d:a6:67:56:7e:e2:
         04:ce:1a:2f:b4:29:b7:c9:4d:9d:ad:de:62:55:70:01:6e:e4:
         e4:c6:61:a2:e2:c7:49:b4:d4:52:aa:bf:8a:b4:e6:b2:7d:c0:
         28:4d:8a:3a:35:65:31:04:62:ee:30:da:37:cb:00:93:dc:ee:
         19:44:3e:f2:c4:6b:21:88:61:9f:87:dd:66:b8:41:3f:8f:e3:
         10:c2:2d:37:02:47:d1:cf:a5:d6:c6:12:1e:2a:b6:2e:16:6c:
         39:04:6a:e5:cc:32:72:f4:ce:57:6f:9c:77:79:af:52:f0:9a:
         27:33:58:50:3d:3e:8b:59:01:58:63:aa:c8:e8:03:44:86:48:
         fb:4d:46:f6:7a:40:fe:31:32:39:e1:2e:c5:11:87:a0:f9:0f:
         36:1f:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:14 2024 by rpki-client on console-ams.rpki-client.org