Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa
File:                     6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa (raw, json)
Hash identifier:          DukzRgphH9K9A294UUAYHUR6UK69u2TAJMnSRhfKOsk=
Subject key identifier:   CE:D3:D6:DF:1E:F8:44:B5:0D:53:8E:18:B2:1E:F0:BA:67:F1:2D:C7
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285840B70F55F10F615B61502A9100
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa
Signing time:             Fri 27 Jan 2023 15:03:07 +0000
ROA not before:           Fri 27 Jan 2023 15:03:07 +0000
ROA not after:            Thu 01 May 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        149.143.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b7:0f:55:f1:0f:61:5b:61:50:2a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jan 27 15:03:07 2023 GMT
            Not After : May  1 04:00:00 2025 GMT
        Subject: CN=1fa340eb-fa29-450d-9577-7622cfb2863b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:81:f3:96:15:bd:9a:00:f7:9a:12:96:9b:
                    7d:0b:26:96:72:d1:76:67:00:40:f7:7c:03:dd:cc:
                    4b:2b:99:df:31:a4:da:7f:5a:74:2a:13:74:41:d3:
                    ab:0c:b0:fd:50:0e:d2:ea:a1:d6:64:22:37:9b:61:
                    68:dd:e2:de:cc:42:95:e2:a5:b1:cf:f2:ca:ab:21:
                    8b:97:41:a0:28:b0:32:94:34:5d:81:a9:74:af:dc:
                    fc:18:e7:e1:a9:a0:7c:9f:aa:b6:9f:c7:2b:01:bb:
                    07:ba:59:a5:b7:c2:32:ee:45:b2:bf:42:e2:b9:56:
                    b3:7d:e4:5d:b8:18:a5:da:2f:95:21:1c:51:84:e4:
                    9b:c5:e1:0a:31:8d:d9:00:b6:23:6e:3d:cc:fb:f2:
                    61:0b:3e:c1:21:3d:3f:e5:f5:e9:8e:e0:57:d4:76:
                    f9:8f:fe:0e:96:f5:bf:e6:d4:ed:d7:6c:ca:68:81:
                    c9:dd:2a:f8:99:dc:84:49:cb:99:c8:2d:72:57:43:
                    21:7c:bf:9c:2b:4b:e3:50:00:22:53:c1:58:91:87:
                    4c:47:c3:c6:7a:c8:1d:01:c0:dc:87:ba:fc:d0:c5:
                    a9:a8:f3:16:41:75:f0:e2:66:5e:da:ef:49:0b:94:
                    fc:ad:e2:6c:d7:7e:94:59:86:47:64:f9:fd:be:a8:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CE:D3:D6:DF:1E:F8:44:B5:0D:53:8E:18:B2:1E:F0:BA:67:F1:2D:C7
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier: 
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.143.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:92:a9:26:29:2c:a2:b2:7a:ff:ee:c2:e9:56:ae:72:19:d0:
         fb:ed:69:eb:3a:9a:ac:c4:1d:52:9a:f0:c9:40:71:53:36:bd:
         bb:b8:92:64:07:b0:4d:36:d9:94:94:47:87:15:b6:c1:9a:08:
         19:89:85:f9:c7:68:89:d9:da:82:1b:be:cc:66:4b:99:67:0a:
         4f:80:51:09:e2:f5:53:f6:9f:d3:e2:dc:13:e8:3b:a8:16:3e:
         e4:37:b2:77:65:9c:af:ca:8c:2d:ea:cc:2c:5b:b3:fe:1c:77:
         ef:19:97:21:21:bb:41:ed:87:5e:e5:b6:09:29:5b:82:d3:00:
         d6:98:28:25:c0:45:f8:aa:d1:e6:1d:d2:79:64:18:41:ad:b9:
         8f:82:bf:7d:64:da:24:1b:77:5c:73:2b:94:56:59:37:04:fc:
         7e:63:f5:b7:6e:de:e7:eb:62:d5:80:38:36:8b:1d:5a:03:d7:
         62:c0:4e:7a:6a:89:2d:fe:1e:ec:ab:46:e2:19:4c:b9:1c:d0:
         26:dd:0d:0c:47:e2:9a:68:da:d1:6c:57:a1:45:9d:dd:1c:8b:
         61:7f:f1:75:b9:1e:b9:82:bc:f4:1c:59:4c:51:48:37:d7:af:
         90:0b:7e:52:bd:da:87:5c:3c:10:e2:ec:2e:af:3a:90:83:ea:
         f5:7f:95:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:56:42 2023 by rpki-client on console-fra.rpki-client.org