Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa
File:                     edf7067b-47be-35b5-80dc-82c3ba48aa19.roa (raw, json)
Hash identifier:          roF0eZQDWTVk4kxrelH5QRXpYVTWLbrZywuY6KMCMYw=
Subject key identifier:   0E:E8:A2:61:A2:66:52:6F:03:2F:C1:E5:E4:0E:AF:77:C3:D0:71:8E
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584571E86F5249C64F6BEBB28360
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     139267
IP address blocks:        142.202.192.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:6f:52:49:c6:4f:6b:eb:b2:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=9ec1ee9d-7d7d-4eac-a3f1-dcf48e4f94c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:1e:e2:d4:e7:00:47:31:75:e5:eb:ef:04:
                    ab:62:33:c8:50:eb:76:e6:6b:33:58:33:21:6a:14:
                    ce:d5:57:25:d1:e0:e2:8b:7e:e6:00:23:34:93:b7:
                    7d:10:76:e2:18:cc:17:50:d8:47:8c:7a:2d:fa:47:
                    42:8e:17:e5:c6:e6:93:1c:94:c0:16:4d:5b:5a:09:
                    b8:8b:3c:f3:c0:b0:3b:a2:dc:d8:1a:b0:c8:c2:46:
                    5a:d0:ff:ac:e0:a9:5a:24:4e:c9:f1:20:34:13:7c:
                    e8:47:4b:47:c0:5a:59:9f:4c:ed:b8:c3:d1:9d:0a:
                    31:d5:2a:27:7b:1b:8e:e1:ee:2d:a4:93:92:27:e7:
                    ff:78:80:40:dd:0e:07:23:02:12:ce:92:dc:a8:3b:
                    ae:ba:2c:b2:47:fc:cf:69:b0:b7:1d:9a:06:57:44:
                    71:bc:7e:34:06:76:8a:9b:00:ea:ff:91:09:a0:f8:
                    56:d5:6b:67:aa:95:3d:67:c7:e4:f8:69:31:00:e4:
                    f1:53:72:98:56:f4:b2:a2:18:8f:6d:63:dd:d0:82:
                    6e:d5:4a:aa:a5:57:88:e6:8b:e1:eb:0f:94:3b:e7:
                    fd:41:e6:30:29:b6:ad:93:91:f4:4e:d7:19:7d:c6:
                    ad:36:ed:fb:9c:01:3d:c2:e8:5f:fc:d8:0b:19:7f:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:A2:61:A2:66:52:6F:03:2F:C1:E5:E4:0E:AF:77:C3:D0:71:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:97:81:d3:c7:16:91:93:79:f7:79:ca:d7:33:2b:c5:29:f6:
         d7:03:5a:39:8f:2c:fb:98:2f:d7:c1:80:41:87:c5:f8:1f:e4:
         09:de:9f:70:82:73:d1:10:32:c6:82:91:aa:a8:45:d6:90:8e:
         af:1e:14:57:5e:0c:36:e7:d3:94:e1:e9:9b:b1:8b:44:a6:23:
         ba:4b:e4:d7:38:05:24:00:fc:ca:11:e3:c8:b2:32:c5:47:df:
         6f:f2:08:c4:c3:2f:9c:b0:3b:78:30:a8:78:70:b2:49:3e:8a:
         63:d5:03:28:05:d5:14:bc:dc:7b:54:47:e6:68:5b:f6:fd:c0:
         c8:7b:dc:8d:2d:b6:ae:83:7c:19:4b:0c:94:90:85:f8:66:e3:
         e5:92:23:c6:7f:c8:94:9e:4b:1b:c4:dc:74:43:4f:3c:2c:41:
         45:ff:e5:cb:6f:86:99:ff:7c:f6:64:b0:d7:2a:d5:04:b9:15:
         8d:36:fb:d3:53:d8:da:f4:27:35:fb:d3:02:b6:a3:99:87:d5:
         ef:d6:6f:4c:31:b7:10:d0:f8:f4:ee:59:7d:ed:a5:dd:59:06:
         27:35:6e:ff:7e:e2:49:0a:27:80:c7:28:1b:9c:f4:15:9b:fc:
         36:33:13:66:49:1d:b4:58:0c:4d:16:84:e9:c7:26:6c:20:37:
         a3:81:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:59:15 2024 by rpki-client on console-fra.rpki-client.org