Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7143da1-33d0-39af-8a35-c73fa40814d6.roa
File:                     b7143da1-33d0-39af-8a35-c73fa40814d6.roa (raw, json)
Hash identifier:          RbPVHzUGr7C+92PEkiXLyuHbmOR5YHGep7mTSOyL6BQ=
Subject key identifier:   29:DD:9C:CC:34:1E:E2:75:40:13:A3:FE:BF:51:91:9E:B0:85:B9:51
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D7EFB29333DC56E860780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7143da1-33d0-39af-8a35-c73fa40814d6.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        142.147.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7e:fb:29:33:3d:c5:6e:86:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=23e422ea-d88b-4b25-b7c8-d2cbed21d694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:68:43:c0:97:09:22:65:87:28:8a:9b:ee:
                    6b:99:a8:eb:d4:d7:01:55:3a:d7:b6:8b:d8:d0:65:
                    d8:2c:57:37:43:bc:57:7c:be:a2:88:4a:39:de:9f:
                    ab:2a:ea:37:90:11:03:1c:f1:46:50:4e:87:b7:f0:
                    6a:cb:65:ac:c4:be:c1:fb:b8:42:a4:80:5a:6d:14:
                    93:7c:d1:4a:7b:5c:f7:96:91:98:ed:94:83:af:13:
                    ce:3c:15:4e:36:a8:62:b4:0d:f0:1b:fc:e6:38:e3:
                    76:8a:22:66:92:9d:23:f9:92:fd:54:c5:34:f2:18:
                    a1:23:37:06:da:f1:9b:a1:f7:ff:d3:8f:cd:b1:0a:
                    81:b0:2c:c6:52:f8:d0:5b:29:a2:10:3f:b8:31:04:
                    86:08:96:01:68:58:28:ba:e4:66:fc:62:58:f0:50:
                    e3:dc:af:2b:a8:6e:94:4d:7f:72:52:5c:b1:ff:40:
                    c5:91:a3:47:05:2f:5c:04:94:75:be:d3:d1:15:f2:
                    7b:37:d4:e3:f1:eb:8d:5d:62:06:a2:ac:b9:09:7a:
                    ae:9d:ce:f1:25:2c:3d:fd:60:76:5b:a3:b5:59:09:
                    36:63:a1:bc:f7:45:96:e9:bd:9a:8e:ea:8f:3f:0c:
                    b8:06:7e:bb:5e:0e:67:44:a5:dc:c5:85:fc:f9:b1:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DD:9C:CC:34:1E:E2:75:40:13:A3:FE:BF:51:91:9E:B0:85:B9:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b7143da1-33d0-39af-8a35-c73fa40814d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:05:aa:59:4b:f9:60:94:cd:e8:78:37:d8:bd:89:a3:fa:3a:
         cf:17:93:bb:fc:96:1e:a2:47:72:6d:83:f1:04:75:51:92:ee:
         a6:4b:9a:40:39:93:22:5e:ac:40:d8:83:57:68:00:af:36:ce:
         b2:5f:5d:96:d2:7e:ef:ca:86:d6:36:34:06:e4:f4:bd:92:7d:
         f2:55:b6:2c:71:ec:f1:81:83:47:ad:96:c5:0e:e3:85:20:f4:
         28:f1:4c:df:e4:e1:ab:c7:23:b9:04:3b:45:44:25:80:d0:e1:
         48:8a:d2:00:f8:83:88:f8:b6:0a:62:2e:74:6a:3e:ee:ef:7a:
         83:9d:1b:c2:39:5b:2d:5e:c0:59:14:6f:9d:3c:77:3d:d8:c4:
         3d:62:37:9f:aa:62:0c:71:56:dc:a1:1c:7e:4e:65:85:08:f0:
         3f:18:07:7e:5d:7d:20:3b:04:15:34:fb:74:70:fe:35:9b:52:
         0b:82:13:42:57:70:1e:3d:af:c2:a1:5a:2c:02:b2:d8:70:e9:
         2b:cb:02:50:2f:d1:58:b7:0e:a7:af:8c:c1:f1:09:64:6c:60:
         c5:6c:07:8f:6e:36:d4:a4:ef:2f:c9:6e:07:d3:b6:f0:33:e3:
         ab:46:ca:0d:57:b9:37:cd:c8:4f:87:5b:89:cc:54:c3:01:c5:
         c7:c1:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:08:49 2024 by rpki-client on console-ams.rpki-client.org