Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa
File:                     d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa (raw, json)
Hash identifier:          D7sj/LK52UP7vdoBrDd81HnsdhBLItOV8Z8RrBfHIi8=
Subject key identifier:   56:60:9B:9C:BD:7A:05:87:39:34:F2:60:60:A8:8B:EC:EF:6F:1A:BE
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584571E869C71387725C4F871F00
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     62707
IP address blocks:        142.202.192.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:69:c7:13:87:72:5c:4f:87:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=575b8e0f-930d-4c06-98f5-609f5f0e1934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:48:0c:a6:82:10:6e:30:c3:86:ce:33:bb:
                    9d:28:21:2b:6f:4b:f4:25:3b:42:32:46:44:40:3b:
                    d1:d2:08:09:69:2a:9f:80:79:c8:ba:14:a0:86:6a:
                    3e:93:a8:74:fd:d4:b5:62:6a:fc:1f:58:9e:4c:df:
                    2f:fb:44:05:2b:d4:1b:10:33:96:31:6e:2c:ba:7b:
                    df:0c:db:27:78:40:6b:7d:1c:28:ee:28:f7:d7:1c:
                    84:e3:1f:ac:ba:1e:35:56:c9:a4:7a:bd:eb:66:cf:
                    ed:01:67:e2:5a:53:ec:e0:29:a4:95:13:5e:33:2d:
                    0a:b4:05:58:8a:ce:82:92:78:a6:7b:7e:85:1a:8d:
                    e1:6b:f2:d5:cc:00:86:fd:a1:2a:e4:85:a6:2e:6b:
                    72:c5:7d:16:a2:aa:9a:5d:1a:c6:df:b5:28:8b:74:
                    3a:ab:ef:0e:f3:3f:a4:3c:f0:ba:ff:d2:75:cc:c5:
                    c9:65:62:f8:a8:ee:af:cb:94:73:89:18:cf:ea:c2:
                    86:c2:3d:50:2c:9d:e5:dc:92:53:02:45:bc:3e:7b:
                    2d:78:2e:c6:df:1d:90:f4:64:16:1c:9b:38:21:1a:
                    a5:34:6a:af:e8:cd:77:43:a0:82:a0:d2:b6:85:10:
                    45:d1:0a:0d:65:45:df:ee:7a:c3:29:41:ff:bc:83:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:60:9B:9C:BD:7A:05:87:39:34:F2:60:60:A8:8B:EC:EF:6F:1A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b2:65:50:72:e0:69:25:e9:b2:1a:f3:3f:2c:20:72:e6:62:
         30:2b:a4:a9:bc:2d:26:37:11:de:d1:fd:59:a0:f2:ff:bb:66:
         a5:8c:bf:09:e6:4a:d1:bb:b2:42:84:25:ab:7e:97:9b:97:df:
         e3:fa:27:9c:2c:b1:70:ca:d3:9e:8d:11:b9:0d:29:1a:f7:fa:
         51:82:f8:a1:ea:e8:48:df:a5:b4:5c:0f:fd:7b:57:15:d2:41:
         63:c5:3c:21:60:56:c5:c5:3b:78:f1:c1:2a:51:4c:ec:05:6f:
         ef:79:36:e1:9c:0b:31:55:42:ac:ce:42:ea:d5:07:78:60:ee:
         c6:0e:c8:42:c2:a4:99:c6:1b:8c:20:c6:c5:93:fa:37:51:82:
         0e:97:83:06:af:b5:51:f1:d3:69:1f:25:20:9e:50:79:86:38:
         b1:a6:0e:6c:d6:61:a7:4b:25:59:22:17:5b:f4:4f:c0:ee:26:
         9f:bb:3e:14:b2:e1:b9:33:08:eb:ad:28:34:a3:61:68:4e:2c:
         56:c3:60:88:93:dc:f4:b8:17:b3:e7:96:c9:52:4a:66:40:e6:
         fa:04:df:50:12:d8:bd:5d:77:c1:09:38:31:13:c3:20:21:64:
         8d:04:a0:22:99:7b:f4:19:f7:65:7a:3c:68:51:3d:ff:12:13:
         a3:5a:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:46:03 2024 by rpki-client on console-fra.rpki-client.org