Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa
File:                     412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa (raw, json)
Hash identifier:          xcbHjW504oIhya1LlJnm3QJzrUvUtrYVxA8e/e2KrWI=
Subject key identifier:   EA:03:19:F0:A9:68:65:9D:05:82:BD:F7:FE:E8:E7:2A:42:E0:B8:44
Certificate issuer:       /CN=12e662f6-4810-4bf7-8722-8635fb0c7747
Certificate serial:       010D0C9F43285845A15E1A0C84DBF6706489D200
Authority key identifier: 60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     33403
IP address blocks:        128.254.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1a:0c:84:db:f6:70:64:89:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e662f6-4810-4bf7-8722-8635fb0c7747
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=63658a8a-fa95-45a2-ab37-b3e0086754af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:5a:62:82:24:f4:86:d1:06:44:57:f2:a0:
                    01:60:26:54:e2:de:23:f7:37:12:05:cc:ee:18:11:
                    41:af:57:83:ad:17:8f:a2:01:81:45:3a:27:8d:c3:
                    d4:41:aa:50:e6:73:6e:d0:41:54:a1:73:b6:eb:e8:
                    3d:3b:b3:ca:86:ab:45:30:01:78:13:b6:5f:81:cb:
                    ce:58:fa:8c:a7:66:dd:fc:0c:ba:f7:d9:be:85:f2:
                    bd:c0:39:53:3d:eb:8a:0c:1a:83:03:b6:f7:9b:7b:
                    34:2a:27:4b:7d:64:d3:3a:63:b0:18:ea:c5:ff:34:
                    79:2f:b3:62:01:0f:a1:e0:e1:71:ba:40:17:d3:b4:
                    6a:73:1a:1d:c4:ca:9d:ff:ce:8f:c3:00:bd:ab:03:
                    cd:41:20:fd:8f:05:f2:a0:2a:79:84:54:e0:35:a5:
                    38:8e:14:73:28:72:c2:5e:68:cb:f9:c4:17:1d:84:
                    dc:4a:72:4a:1f:e0:4a:63:44:e3:7d:57:8d:fe:59:
                    14:6c:a4:e0:46:4d:9d:ee:a3:bc:f3:b4:27:e5:ae:
                    cb:3b:8f:8d:d5:b5:c3:86:47:18:bf:4d:c4:44:a8:
                    bb:11:af:71:06:27:b8:20:e1:54:fa:c0:31:83:93:
                    0a:5d:1d:64:70:74:f8:b2:60:f2:fa:af:32:75:e0:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:19:F0:A9:68:65:9D:05:82:BD:F7:FE:E8:E7:2A:42:E0:B8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl

            X509v3 Authority Key Identifier:
                keyid:60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:09:0f:fd:d9:cd:a0:39:55:54:07:28:57:1d:4b:51:53:
         cd:07:a8:fb:6c:a6:56:33:a0:d2:6d:6c:d8:43:1d:cd:35:0d:
         f7:00:12:8f:8f:06:bb:97:ea:5a:0a:4b:21:2e:6f:72:a3:5d:
         07:7f:f5:4c:54:e8:6c:15:d8:cc:d4:c6:da:49:25:f4:2e:b2:
         6b:1a:14:6a:18:06:ed:9d:77:b6:df:87:e6:f6:ad:c5:c6:a8:
         c1:61:64:be:43:cb:49:f6:09:ac:e8:4d:18:68:3a:00:48:51:
         ee:a9:69:8a:30:1f:e8:fe:31:8a:f0:4e:11:a0:bb:6c:68:c5:
         d3:1d:1e:c4:6a:36:5d:7f:a7:58:53:f3:68:22:9c:3c:71:b0:
         a7:92:ba:23:35:a2:4f:32:bb:78:dc:45:f4:b8:6f:8b:08:25:
         13:28:2b:65:94:35:5e:27:2f:a5:d1:e5:5a:f1:2a:db:77:af:
         87:4e:d3:a6:a3:57:a2:1c:34:23:94:0e:93:d2:7a:58:8a:0d:
         1d:4d:22:b8:ba:97:a2:54:70:a4:51:40:6b:aa:c3:66:c5:c6:
         b2:e3:29:d2:f6:ae:17:c7:a3:ab:31:00:70:70:ec:3b:06:f4:
         fe:ee:b5:87:aa:60:5f:0d:89:aa:d5:01:8c:a4:7b:f3:39:a9:
         12:01:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:22 2024 by rpki-client on console-fra.rpki-client.org