Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa
File:                     b3df106d-b438-3e20-8914-1fe7a07853fe.roa (raw, json)
Hash identifier:          5vkJYbliZMEoMAFPzhO2ejqBXCw0Ff+oy//kBF8QR4s=
Subject key identifier:   2A:8C:04:05:8E:1C:AA:DF:1D:99:10:E8:BA:24:13:F0:6E:6B:B9:7C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453CDD57C297F44686E22CEB80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        142.59.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:57:c2:97:f4:46:86:e2:2c:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=798d4701-99e0-4aaa-9bd6-849d75ffed86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4a:0f:44:75:2e:c4:1b:ed:e3:5b:ef:69:ac:
                    80:16:98:11:b6:0a:7c:e9:a5:2c:08:1e:e6:95:5a:
                    6f:23:c0:b0:b4:68:2b:d2:69:d9:21:cb:96:6c:91:
                    a1:20:9b:f2:d9:88:eb:70:b8:a7:eb:05:ae:2d:5e:
                    69:8e:73:db:aa:46:06:95:5c:68:47:03:cc:a0:2c:
                    ed:27:4b:75:db:8d:ee:05:ad:3a:13:75:7e:a3:c3:
                    f0:09:3f:5a:75:62:ca:ab:3d:2b:2a:00:9c:5a:be:
                    29:1f:2e:48:98:5d:a7:b8:f0:f7:94:34:bf:bd:8b:
                    a5:d9:c5:70:18:bc:60:36:63:ca:65:53:5a:2e:64:
                    eb:65:fe:95:38:16:ca:5e:1c:08:31:c2:ea:21:e8:
                    7b:57:8c:9c:d6:dc:81:a8:42:24:d4:9b:f1:67:71:
                    3b:09:8f:c3:20:e0:48:7e:32:c9:ba:fb:47:17:bc:
                    d2:55:52:1b:3e:50:34:c1:1c:dc:6a:e6:eb:80:2a:
                    01:ee:07:2f:bb:2d:85:a4:ce:2a:47:9a:ad:81:f4:
                    87:cb:1e:2d:be:33:5f:a5:18:f8:a9:8b:09:df:93:
                    aa:c5:2d:f7:c7:84:64:ec:63:72:54:6f:fb:32:47:
                    e7:17:03:a7:e7:18:27:a9:91:77:54:2e:38:ce:7c:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8C:04:05:8E:1C:AA:DF:1D:99:10:E8:BA:24:13:F0:6E:6B:B9:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b3df106d-b438-3e20-8914-1fe7a07853fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.59.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:be:5b:31:52:92:2c:62:50:d7:54:38:cf:d6:5e:2c:e0:e2:
         ea:79:04:97:ca:bc:a3:2a:fb:7b:97:7e:12:e7:43:2b:f7:33:
         2c:9e:4b:91:08:4e:5c:b8:41:8b:b6:47:f6:1f:68:09:54:54:
         1b:cc:48:fd:c3:49:1f:3a:7a:8d:4a:b8:ad:2f:69:2a:06:32:
         f2:4b:4f:c3:11:0d:17:fa:4d:e2:4e:35:48:39:30:26:29:65:
         1c:6f:18:f1:b2:4f:ac:17:e4:96:54:35:8d:c7:cf:bb:26:65:
         9f:49:bd:5f:04:2d:ee:e4:d2:21:84:87:77:fb:91:db:2d:92:
         2b:33:57:cd:bd:9a:37:54:79:88:6b:c8:6e:cb:a9:12:19:c7:
         59:52:2d:a4:46:57:8e:fe:17:59:47:53:37:44:73:55:86:bb:
         96:bd:aa:ac:84:d9:7a:7f:ef:9b:11:f4:33:7a:a4:3c:19:c8:
         9b:ee:7c:69:b0:bd:2f:2b:6b:20:88:85:4c:e1:c4:e5:80:84:
         88:7d:1b:ca:a4:20:a1:37:c3:03:5a:63:7b:7b:7a:ce:0a:99:
         75:75:52:f1:12:f2:ca:1d:2c:cd:90:eb:d2:21:26:a9:e9:37:
         75:09:11:3e:55:a9:8a:4e:7b:85:13:46:33:03:b4:dd:af:b0:
         48:cf:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:56:47 2024 by rpki-client on console-ams.rpki-client.org