Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa
File:                     971c127d-3b4c-3c7a-841b-6314c4d14d35.roa (raw, json)
Hash identifier:          56Q/gBbUytmTpXuOtDracDnPNmRlhAuGc4GTt1eAzOg=
Subject key identifier:   10:28:49:5B:B2:C5:7B:8F:34:2C:72:0D:2C:90:FE:14:76:A0:D7:47
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F432858455F1061EDBF43596EBBC8DC80
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa
Signing time:             Fri 29 Mar 2024 19:00:53 +0000
ROA not before:           Fri 29 Mar 2024 19:00:53 +0000
ROA not after:            Thu 27 Jun 2024 19:00:53 +0000
asID:                     14618
IP address blocks:        165.1.12.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:10:61:ed:bf:43:59:6e:bb:c8:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: Mar 29 19:00:53 2024 GMT
            Not After : Jun 27 19:00:53 2024 GMT
        Subject: CN=75b7e9e3-3a2c-4a7a-b6e4-256a9ea61aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:59:27:88:6b:d7:a5:b4:54:4d:07:91:2e:
                    a3:ea:7d:35:52:2e:12:0b:69:dd:0d:1f:13:f3:4a:
                    6c:66:c0:2d:aa:95:75:aa:4b:d5:c5:f5:c9:90:cb:
                    a1:a9:48:24:00:3b:38:1e:27:d5:12:5b:df:fe:0a:
                    13:ba:f5:25:87:47:62:74:4c:55:0a:18:a9:8d:7f:
                    01:98:f1:ae:4a:31:78:7d:c4:8b:f9:5a:76:4b:8d:
                    5c:c5:5a:f3:14:d2:03:1a:44:ce:e3:76:3f:d3:49:
                    5b:6a:c5:70:da:9f:a6:8a:50:81:f8:47:0d:2e:23:
                    e6:e6:ad:85:37:d4:95:a5:5d:a4:13:2e:3f:88:d2:
                    be:61:2f:59:2b:aa:8d:7e:11:32:4d:43:2e:5f:4c:
                    31:f7:5f:1f:36:c0:49:e9:e2:2c:d1:89:e3:54:18:
                    af:32:b7:29:4a:b0:8d:00:60:eb:61:34:a3:f5:29:
                    ed:3e:78:40:1d:4c:64:95:99:3b:61:e9:db:99:b0:
                    db:e3:01:3e:c0:aa:c6:75:77:ba:cf:3d:d6:3f:a2:
                    53:63:00:91:6a:75:4d:3e:33:5a:ba:3d:15:32:19:
                    27:30:97:1e:e1:46:73:e5:d2:eb:0c:5f:1c:82:e9:
                    51:ba:c7:68:8d:e8:df:96:3f:3f:67:a1:af:5d:d1:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:28:49:5B:B2:C5:7B:8F:34:2C:72:0D:2C:90:FE:14:76:A0:D7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:70:e7:c4:a0:63:f1:a2:11:1f:98:6f:48:6e:93:b6:1a:e4:
         08:0c:ae:2e:bb:2e:59:3f:a4:57:79:5a:6b:8b:c7:7d:d6:3e:
         f2:ec:24:08:cb:d7:cd:e1:c0:59:e6:02:79:7e:70:7e:36:e9:
         45:c5:d4:16:63:d7:27:12:d0:54:dc:f9:ad:d9:83:9f:90:72:
         56:97:53:a3:ed:ec:74:48:87:b4:e4:8a:00:2b:bb:b4:55:17:
         aa:38:ad:a3:1f:a8:39:16:0e:f8:25:9b:11:bb:76:7e:02:81:
         49:ed:fb:7c:ed:8e:12:e1:9c:b4:bc:9a:00:6e:c8:6b:c7:1b:
         e4:35:e1:3c:14:47:5e:cf:d6:29:47:d7:46:c6:ff:2e:34:1f:
         e7:0b:c5:ba:05:50:ca:a9:a3:15:b7:a1:b6:b9:83:19:9a:ab:
         de:e4:48:56:40:69:fd:77:44:9f:88:a6:3e:8e:d0:81:e5:f6:
         58:70:17:b5:a1:2f:72:4b:43:ef:29:a8:a8:39:0e:c6:74:b0:
         e0:ce:d2:90:4e:d8:fe:32:3d:e3:d1:de:98:7f:95:0f:ec:bb:
         a5:40:5e:18:16:c8:a9:58:66:fb:f4:19:b6:4b:3b:9c:8a:6f:
         2d:a0:23:06:1e:a5:75:a6:99:ab:57:0f:5f:da:c1:f6:61:b7:
         b2:d8:21:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:30 2024 by rpki-client on console-fra.rpki-client.org