Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa
File:                     d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa (raw, json)
Hash identifier:          G5D1JrM83bE95VqjfO19AJ/RfePRi76FRPl2nJX3ZAc=
Subject key identifier:   13:2B:8C:0F:E8:FC:66:89:D6:9E:35:52:61:46:64:42:E4:FD:C8:17
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285845538012DC8D9302B499524A00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa
Signing time:             Mon 25 Mar 2024 15:36:13 +0000
ROA not before:           Mon 25 Mar 2024 15:36:13 +0000
ROA not after:            Sun 23 Jun 2024 15:36:13 +0000
asID:                     273452
IP address blocks:        200.15.12.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:80:12:dc:8d:93:02:b4:99:52:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar 25 15:36:13 2024 GMT
            Not After : Jun 23 15:36:13 2024 GMT
        Subject: CN=1efb398a-c635-4e5a-87f2-ce35f3bf1516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:62:8e:34:32:91:b2:cb:3c:0b:9c:9f:ec:
                    70:dc:db:6a:8a:45:6e:24:ff:9d:0a:b5:02:af:0e:
                    09:2c:d4:a3:a0:00:a5:3c:a8:20:04:53:4f:b5:5b:
                    ad:0f:31:f1:3b:88:bf:49:48:c8:9a:2b:60:3c:c7:
                    83:85:7f:68:6e:79:5b:b2:ed:dd:9c:8b:19:67:ae:
                    a4:56:e2:a7:de:e4:db:fc:7f:9a:b1:4c:c6:22:b1:
                    79:38:fc:2d:e6:0f:bf:6f:2f:14:45:e9:70:3d:b3:
                    03:0f:25:a9:ad:7f:b1:ae:84:27:f7:bc:ce:a1:90:
                    95:3b:c4:3d:90:e1:3a:4e:be:61:0c:69:0b:b7:91:
                    d5:ab:8c:7f:29:c8:3b:fa:c2:be:ec:9d:70:6b:6c:
                    cf:e5:74:ec:3e:3f:c5:66:51:b8:80:3d:d6:be:57:
                    8a:1d:4e:a6:71:fc:e3:41:f2:17:35:3d:13:b9:b9:
                    d9:c1:fa:bc:dc:43:de:5b:67:58:3a:0a:29:7b:57:
                    2d:90:ff:c1:78:67:35:0b:c0:71:b5:8a:66:76:be:
                    04:17:cf:6a:78:13:4e:6e:97:ac:49:16:07:47:9a:
                    07:c7:5e:f5:7d:50:91:e0:3b:a6:6b:5f:31:d2:6b:
                    a1:79:4f:f6:b5:74:28:6d:47:33:da:81:e1:e0:2f:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2B:8C:0F:E8:FC:66:89:D6:9E:35:52:61:46:64:42:E4:FD:C8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.15.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:52:f6:2f:f2:cd:70:9b:73:34:22:0e:3e:f8:ac:cb:46:
         a1:c1:80:e0:23:c4:c6:a4:52:3c:82:80:c6:e1:c5:1e:de:29:
         69:37:cd:90:e0:b6:de:7f:98:2c:61:26:20:ed:57:81:6a:63:
         0d:d2:0d:d1:5a:ef:47:1c:7b:df:21:dc:a1:89:f0:70:07:70:
         ae:b9:c1:ee:9f:5b:e9:00:5b:65:7d:8d:80:05:77:e6:92:1e:
         23:21:74:c9:10:9b:d6:15:59:19:25:01:3b:af:bf:e8:12:15:
         d7:8d:33:c2:d1:2c:cb:56:38:02:cb:8c:42:23:97:0f:a1:a8:
         66:97:34:44:04:f3:c7:3c:2a:17:cb:50:ad:80:5f:fa:36:9e:
         24:fd:6b:c2:bf:aa:f9:93:89:e6:87:99:35:e9:92:f4:35:c0:
         2f:d9:e7:6e:59:14:29:f2:ec:fb:72:4a:97:67:12:33:f3:ec:
         2c:51:da:91:6c:83:1b:1a:26:e7:7b:40:d5:da:46:59:f6:97:
         24:f2:c3:a2:9a:b9:ad:ff:e5:25:d8:43:58:74:cc:d4:cf:9f:
         78:8b:a1:1d:ef:d8:6c:96:ee:f0:d6:5e:0d:12:3f:1e:b6:7c:
         51:11:44:6a:41:e2:00:00:a2:c0:1d:8d:ae:d5:38:55:12:f0:
         a4:36:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:45:26 2024 by rpki-client on console-ams.rpki-client.org