Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa
File:                     f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa (raw, json)
Hash identifier:          ZnKnJjipoPdvKKfDd9bmFzLbqrIvfHnkXIx+HcAcXdU=
Subject key identifier:   6B:31:42:71:84:D1:67:2A:B1:95:EA:DC:85:A9:F6:33:7B:AD:17:72
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F43285845AF53679221983E6F94335B80
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        142.54.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:67:92:21:98:3e:6f:94:33:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=958be3f1-8be8-47fa-878c-bdcaf540c32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:8e:85:1d:ca:5b:81:5f:05:cf:72:9a:be:
                    ea:23:df:ad:3a:d2:9a:d8:be:ae:2f:6a:c2:ce:c7:
                    27:db:79:ba:5f:b3:af:30:1d:6e:19:09:06:ac:29:
                    b6:2d:3e:07:0c:6c:2d:57:4c:67:90:fb:35:20:d1:
                    d3:80:34:31:a2:0f:74:60:75:eb:d4:4c:db:b0:69:
                    04:7a:a7:9a:5d:59:c3:fa:5f:f4:06:f0:d0:98:89:
                    0d:11:ae:44:4b:a1:14:a6:32:f3:87:0b:df:44:c6:
                    78:0e:2f:bb:da:05:73:1f:cb:98:91:f7:b2:f7:87:
                    65:29:5d:6d:58:a0:7f:f4:de:05:44:38:1d:1c:c4:
                    d7:28:1e:99:e3:f8:6c:5d:c7:01:ab:07:ed:78:fa:
                    3e:54:c8:b2:be:49:1c:b8:e1:05:04:93:b3:44:fc:
                    61:72:3a:55:7d:1c:d6:70:36:f5:5a:b3:b9:96:88:
                    ed:3a:e9:d0:3b:f6:01:4b:50:20:b0:bb:29:63:d2:
                    ad:98:96:69:c9:b5:35:08:03:f0:48:e8:20:82:e9:
                    b5:d6:2a:b2:3d:79:e2:fc:80:db:52:e4:82:1f:14:
                    5c:81:ad:3c:86:51:a7:98:4a:d8:18:83:c4:18:cc:
                    ad:f5:68:51:fa:8a:27:4a:5d:91:ab:5e:64:3b:90:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:31:42:71:84:D1:67:2A:B1:95:EA:DC:85:A9:F6:33:7B:AD:17:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/f728ed6d-d8ac-322b-9a23-45d4c6fc8a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:25:26:86:2c:e4:a8:84:f5:79:e9:2d:cc:5a:40:3f:28:42:
         2e:7f:ac:aa:de:9a:81:56:df:9e:9e:3f:e1:d3:7d:ac:fa:74:
         15:2c:7d:63:2e:06:bc:6e:a6:e3:26:0f:8e:fa:a7:de:03:86:
         2b:52:76:21:4c:45:2f:59:98:38:a6:1f:b3:2f:fb:a8:30:86:
         be:c6:21:a9:de:74:d1:25:17:2c:50:fa:4b:15:8a:87:cd:22:
         86:25:84:2e:83:de:4f:a3:37:31:b7:a6:52:b1:aa:92:d0:c7:
         b0:9d:23:59:16:21:97:ba:23:cc:18:58:8f:f2:3d:1e:e8:47:
         50:b3:5c:c9:88:c5:ec:b1:59:10:92:66:5b:3f:5a:6c:46:02:
         2c:ce:7f:c4:fc:6d:e1:0e:b0:84:22:80:ae:8d:9c:c1:11:8a:
         68:a3:21:e5:f1:1e:50:a1:d1:bd:f5:6e:64:4a:4a:d1:88:08:
         04:19:ad:85:a8:90:93:c5:dd:60:5d:b7:5c:0e:f6:dd:c2:29:
         f7:70:61:89:0d:45:41:38:c1:eb:f9:c5:32:67:a3:03:8f:28:
         e0:4f:3e:76:7b:70:17:3d:ae:65:5a:b2:63:a3:c1:d8:d7:f0:
         7b:f0:78:c3:73:06:75:64:c5:12:2a:43:2b:f8:d8:34:04:a2:
         9b:77:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:09 2024 by rpki-client on console-fra.rpki-client.org