Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/487a6ec2-e7a3-3834-a97d-b29b84732cfc.roa
File:                     487a6ec2-e7a3-3834-a97d-b29b84732cfc.roa (raw, json)
Hash identifier:          H6kzKPvkXTSvklnECxc5/XHzMw9+ADG3JGCvsBWKO9I=
Subject key identifier:   45:14:94:F9:62:C6:78:4C:3C:32:29:94:25:36:79:6B:55:2C:97:A6
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584566BDB87DF3C2B25DDB25FFE0
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/487a6ec2-e7a3-3834-a97d-b29b84732cfc.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        142.54.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b8:7d:f3:c2:b2:5d:db:25:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=628cfa37-8c5f-46ca-9918-3dd39924e024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:c0:97:2c:cb:a8:33:a9:ba:51:6b:b3:f1:
                    8a:59:d7:e0:81:a7:b7:89:ce:c0:42:fb:3a:82:a4:
                    e8:d3:71:62:81:85:da:48:9f:da:ca:6f:39:9a:0a:
                    07:fe:4e:d6:4e:4e:24:51:e6:28:c5:36:1d:8a:25:
                    33:74:a2:cf:b7:c6:9d:84:21:c9:82:2d:8c:ff:97:
                    ec:05:37:85:2d:9a:85:04:7c:ce:d4:f7:92:db:36:
                    6c:e7:b9:8c:9c:91:68:0e:8c:95:4d:45:eb:06:70:
                    a2:bf:09:a8:95:42:92:5e:c2:53:2b:9d:6a:de:9d:
                    ac:9f:34:ec:4a:6b:09:0c:a4:3d:b0:7a:60:3f:37:
                    e5:0e:9a:bb:c4:64:df:96:b2:e5:04:c0:ef:6f:44:
                    27:14:7f:c4:66:a0:7d:f0:7d:47:a2:7e:21:78:12:
                    5f:69:e1:94:0f:33:17:f9:6d:2b:85:8a:a9:9e:3e:
                    50:d6:04:e2:0b:52:09:42:e9:ef:30:bd:aa:82:1b:
                    0c:0a:95:50:af:06:3b:f2:b8:25:0e:d8:18:47:29:
                    2a:d5:74:bb:a3:8c:93:1f:cb:40:42:6e:8e:0e:85:
                    ad:c7:a5:a4:22:a1:9d:9f:ae:f0:75:9f:5c:2d:e7:
                    54:7b:8c:57:31:88:30:b0:92:f4:5b:cf:82:38:f7:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:14:94:F9:62:C6:78:4C:3C:32:29:94:25:36:79:6B:55:2C:97:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/487a6ec2-e7a3-3834-a97d-b29b84732cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:51:57:f8:51:11:ab:85:5e:1e:c8:07:ba:e0:a6:65:16:16:
         52:c5:90:8a:b6:3d:e8:6d:0b:44:60:33:28:4f:49:1b:23:19:
         06:85:7b:8e:11:f2:3d:ae:c2:1c:40:cb:5a:38:99:f6:4a:36:
         47:34:6a:18:78:97:7d:a2:0e:30:27:17:a7:c6:63:36:dc:25:
         7d:d2:d6:d4:2f:ae:90:25:ff:17:58:ca:5a:76:26:7c:22:bc:
         f1:f3:bf:5e:f8:20:03:9f:92:ea:3b:d1:d7:a8:3c:57:79:ce:
         79:d2:f8:c3:15:7a:f6:7e:7b:93:21:7c:b2:48:ee:1d:5f:5b:
         9d:a8:bb:f9:c2:20:91:da:74:09:3d:c1:21:37:bb:9f:a7:9b:
         c0:99:1f:ba:81:20:ae:80:de:71:54:22:d0:d2:c5:ab:50:6f:
         01:8a:fd:ca:b3:a3:c5:e9:ca:3a:33:da:51:15:37:26:35:ea:
         20:f5:cc:8d:b4:29:79:65:47:96:a3:ea:e9:03:a7:33:c9:5e:
         c8:73:f3:2f:94:7f:ee:5c:eb:4b:c4:1b:89:90:bc:e8:ad:b0:
         ce:3f:92:5e:43:1d:64:38:7c:b9:97:50:39:88:a8:39:45:b4:
         ca:b0:9c:47:9e:96:35:f8:08:8b:ca:03:f5:a7:2f:6b:b5:d6:
         26:c0:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:17:08 2024 by rpki-client on console-ams.rpki-client.org