Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa
File:                     c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa (raw, json)
Hash identifier:          ICNAnwHKon3aHMIXrfuUP3Wdt+tJMpwS6xJq3BUbFTM=
Subject key identifier:   A1:1D:9B:C5:0B:1D:8A:33:5D:AD:32:8D:93:59:AB:6A:E5:A9:9E:26
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858476C9DB3D2963901D6D51F2D80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     399471
IP address blocks:        163.123.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b3:d2:96:39:01:d6:d5:1f:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f8bba573-b8c4-453a-a17b-d1310fad121f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:85:b3:ef:3f:f7:64:2c:03:cf:69:ba:00:
                    bc:01:1f:85:98:5e:c0:d7:bb:9f:07:a9:d2:c8:6c:
                    35:bf:6e:9b:06:ab:fb:5f:90:a6:b5:09:92:cd:c6:
                    b4:d2:e4:ff:cc:4c:cd:5a:c2:41:d6:a9:21:4e:b4:
                    a2:e3:12:20:b4:15:04:0a:b0:96:7a:b2:9d:26:25:
                    e4:bd:34:0b:01:e9:9e:53:fd:ea:8d:7a:d1:65:fa:
                    51:31:9a:44:bd:e5:98:b4:45:06:dc:72:59:ba:0e:
                    b2:5c:1f:fe:0d:43:9b:9d:9e:c3:51:3a:0b:49:28:
                    30:15:e9:48:4d:e6:57:40:6a:8b:f5:c1:67:ed:1b:
                    a5:50:dd:6c:b5:cd:bb:5f:02:b5:99:2c:40:0b:0c:
                    63:b6:b2:04:85:13:fc:33:c7:fa:18:ae:9c:db:0f:
                    bc:78:e9:2a:0b:26:2e:09:51:af:b9:03:e4:9d:6f:
                    1f:18:ff:29:dd:aa:cc:80:36:37:e7:92:30:00:63:
                    b5:a3:af:ee:93:06:e0:2f:66:11:b9:66:38:b3:57:
                    f3:75:58:1a:e9:86:95:5c:d0:a9:9d:44:ee:a7:ef:
                    bb:38:26:ea:4a:9b:43:b4:62:9a:de:1e:42:e0:34:
                    f9:e4:e6:89:ed:ce:79:c5:63:3a:cc:81:2d:f9:19:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:9B:C5:0B:1D:8A:33:5D:AD:32:8D:93:59:AB:6A:E5:A9:9E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:e9:f1:be:b5:dd:56:c9:42:c5:0f:f9:59:52:ef:76:df:
         74:fa:23:b8:07:e5:d7:fe:da:3d:5f:15:52:37:f4:83:b8:91:
         c1:c7:4e:d6:42:e1:ad:60:9a:24:e7:c0:32:49:4e:7d:36:88:
         73:dd:e1:88:57:d0:d2:34:75:f3:62:f0:13:1f:54:4f:90:b4:
         e0:65:49:92:17:f8:d5:c9:12:df:14:96:b1:ce:04:66:7f:1b:
         0c:3d:3d:8b:ef:db:c0:2d:ed:9b:cf:ca:f4:f7:22:94:47:4e:
         87:ab:a8:eb:60:ce:11:ba:28:f0:8e:37:d2:59:55:db:c4:66:
         d2:b8:23:c3:f3:f9:9e:80:8a:ab:72:70:6e:87:73:2c:32:43:
         be:03:df:c5:8f:0b:59:ef:21:ba:38:ea:a7:fb:1a:ad:e9:e2:
         6a:dd:0f:7b:5c:67:0e:da:79:32:1e:56:54:06:e5:57:f2:3d:
         c6:fa:b2:67:61:72:d7:f1:c0:bd:f1:e3:7d:27:a1:84:d8:08:
         a3:c9:48:bd:07:8d:51:08:0a:4c:28:3d:a2:a5:cc:02:62:b1:
         43:13:a4:9f:b2:28:f3:08:38:49:d7:ac:db:66:c4:73:cd:fa:
         bb:73:51:2c:ec:94:47:7f:63:03:0e:e0:0b:41:0b:ab:d9:96:
         50:a2:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:12 2024 by rpki-client on console-ams.rpki-client.org