Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/59446c6b-cb08-31a0-b527-ae078eb58aeb.roa
File:                     59446c6b-cb08-31a0-b527-ae078eb58aeb.roa (raw, json)
Hash identifier:          oxP523HnC9aI/M0IxKnS1eLimYQM0khFQrti3MAK4tg=
Subject key identifier:   E0:D1:A5:4C:02:D2:CE:06:D6:22:13:34:0B:F9:5D:ED:56:0E:C7:C3
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285845734DA8286C39F9830E887F00
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/59446c6b-cb08-31a0-b527-ae078eb58aeb.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        144.81.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a8:28:6c:39:f9:83:0e:88:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=70a76da5-96c1-4fce-b10d-ff4de7d02440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:4b:77:82:ed:11:73:85:e8:9f:a8:42:4e:
                    6d:fa:70:99:eb:09:8a:b1:06:ec:17:bb:16:3a:f5:
                    de:99:17:a6:16:2d:f0:a0:5c:c6:51:39:c3:8e:70:
                    65:90:80:85:a6:04:f7:5b:8a:88:34:80:72:4d:1c:
                    63:f2:61:97:ea:8d:ec:9c:d1:b0:50:a4:25:ea:ed:
                    5f:ea:c6:26:81:9e:9f:06:65:d8:f3:16:da:37:c1:
                    03:4f:63:02:71:56:97:a6:d8:4c:01:34:38:02:f8:
                    46:9c:87:c4:8e:3d:56:ac:2e:96:dd:c7:63:c7:21:
                    ea:ab:f9:78:d1:ec:56:90:94:94:2f:51:2b:b7:bf:
                    9b:ad:eb:f5:9b:db:66:54:0d:d1:36:53:ca:09:05:
                    62:0c:e1:b0:f7:a4:3d:6a:1c:0f:e3:87:fb:e3:44:
                    f9:5f:7e:d4:d7:15:d1:de:49:19:89:3b:e6:f9:45:
                    57:4e:1e:a1:20:0f:b1:85:d5:cd:e1:ba:8a:ea:eb:
                    65:cc:56:fd:fa:d0:76:08:6e:6a:c6:60:b8:00:9f:
                    3a:e5:98:3b:65:34:7b:fb:dd:91:d5:ac:7e:d7:af:
                    6f:a3:b0:46:7b:13:cd:21:12:b1:46:94:e8:f9:e5:
                    f5:54:d5:7a:7b:9e:9d:65:56:a2:08:88:a2:c1:06:
                    aa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D1:A5:4C:02:D2:CE:06:D6:22:13:34:0B:F9:5D:ED:56:0E:C7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/59446c6b-cb08-31a0-b527-ae078eb58aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:dd:3c:59:58:1b:ac:f6:24:3d:45:f9:b8:66:73:aa:27:
         20:9e:9f:e0:ad:b1:f6:8d:7b:de:b5:52:0c:37:76:fa:a7:9a:
         46:75:31:dc:c5:00:10:3d:f3:68:fb:7f:3b:b7:68:ba:4b:d5:
         6a:81:0f:8b:0b:63:72:b9:83:78:f2:31:eb:79:8f:df:c3:7c:
         91:e5:e7:20:15:e7:2e:c9:ef:f7:a6:b0:d0:26:7d:36:52:eb:
         db:d1:23:db:c6:f4:13:71:01:e9:89:ad:a2:4e:ec:1c:d7:2d:
         0e:18:29:1b:92:a6:39:75:65:52:92:d1:27:32:b0:a5:5d:4c:
         76:84:e9:6f:de:17:ab:10:97:08:00:8e:0e:de:4e:be:ea:9d:
         67:58:d4:b9:95:12:e7:09:92:95:27:36:f8:50:82:fc:ed:fc:
         21:92:10:80:0f:65:53:b1:f3:07:37:db:e2:bd:b8:31:80:c2:
         2c:71:58:95:9b:b9:97:41:14:a4:af:98:ae:23:e5:8d:dc:4d:
         4b:28:b7:f3:34:f6:68:cf:f4:70:57:40:9b:35:ba:d6:9d:ae:
         c5:4e:bb:c3:34:7e:82:19:22:37:3e:96:04:0e:e2:20:e2:01:
         17:ec:e2:a5:ee:92:45:d9:a1:df:25:a9:f8:81:09:4f:73:6b:
         3f:42:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:04:03 2024 by rpki-client on console-ams.rpki-client.org