Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa
File:                     c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa (raw, json)
Hash identifier:          JmP4isEMHSkNU43rn+utNYQzTucPIzzMjjd1CRDWePY=
Subject key identifier:   13:31:92:00:E5:EB:7D:63:A9:F8:19:CF:EB:9E:7A:12:6C:1E:C2:42
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285844CBEBADDCE521C50309EC4880
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa
Signing time:             Tue 06 Feb 2024 02:00:26 +0000
ROA not before:           Tue 06 Feb 2024 02:00:26 +0000
ROA not after:            Mon 06 May 2024 01:00:26 +0000
asID:                     399471
IP address blocks:        163.123.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cb:eb:ad:dc:e5:21:c5:03:09:ec:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb  6 02:00:26 2024 GMT
            Not After : May  6 01:00:26 2024 GMT
        Subject: CN=1c47a8c4-7c45-4946-b542-f4068eada5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:40:77:6d:74:15:8b:83:bc:4f:cb:8e:08:
                    8e:0d:a6:9d:5e:21:e7:e4:0f:d5:3e:c3:92:9a:42:
                    f6:53:83:b4:87:a8:03:18:60:8d:d8:1c:ae:e3:6b:
                    d9:a2:00:14:28:d7:61:d7:36:e8:e1:08:8a:7a:71:
                    33:b6:a3:c8:b6:d6:2b:6a:7a:6c:a6:c7:c2:08:e8:
                    78:e2:0f:62:51:d6:fa:14:fe:c9:e2:86:b7:39:a5:
                    8e:c7:20:aa:9c:62:88:30:95:da:d5:60:bb:82:87:
                    32:fa:19:eb:9a:dd:55:ea:84:73:ca:f4:3e:25:a8:
                    07:14:f4:cb:83:73:aa:b9:85:de:b6:aa:f4:63:f6:
                    81:6a:83:be:2a:e5:16:2a:93:fa:fb:01:c2:48:73:
                    ef:77:23:07:7a:b9:69:11:d6:38:e1:cd:a1:65:17:
                    6a:43:7a:56:fe:b3:a6:1b:e3:f9:77:dd:92:e0:ad:
                    27:37:55:60:17:45:28:e1:1e:58:b0:d6:b2:7c:54:
                    14:76:33:aa:48:7f:fd:bf:0d:71:c5:6a:f6:1d:60:
                    b4:64:9c:36:87:45:bd:14:55:b8:54:c0:b0:d3:d8:
                    d7:ae:3c:9b:26:51:d0:f2:c2:37:b1:9e:e4:23:39:
                    0e:66:5c:04:1a:31:a4:ab:38:78:0f:1b:fc:fa:46:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:31:92:00:E5:EB:7D:63:A9:F8:19:CF:EB:9E:7A:12:6C:1E:C2:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1235fee-d871-3a37-b9a8-bc16c6cb3be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:39:ae:d8:b4:41:56:93:4d:ed:5a:dc:b4:47:84:6e:c3:
         51:93:f5:99:fa:86:7e:b7:6f:ec:96:1e:66:f4:eb:0c:3a:8b:
         98:e7:c7:e8:ce:78:3e:aa:14:2d:39:9f:9c:ac:82:ea:88:cb:
         f0:0f:59:7b:8e:2c:15:53:06:e1:58:a1:4f:cb:2f:60:4e:94:
         12:82:34:68:bb:24:99:d5:13:fd:30:bf:aa:f6:1f:12:73:e6:
         79:03:1d:b6:46:4d:fe:e6:73:21:59:99:fd:a2:fc:70:20:71:
         f0:28:88:33:ea:d5:15:ab:24:2d:67:ca:f7:2e:2f:d8:64:ad:
         d2:84:25:ba:9d:91:e3:bd:23:cc:7e:c7:bb:14:41:a1:f7:75:
         c0:14:c3:33:63:cd:c4:94:05:58:5b:b4:d1:50:8a:2a:4b:a4:
         7f:03:2c:2e:95:5a:2b:d4:33:32:03:56:7c:58:8c:df:12:6c:
         cd:45:d2:55:ec:07:ce:fa:6c:b0:ce:64:b0:33:fa:06:d2:94:
         7b:30:75:f0:77:85:68:44:44:8f:d6:00:a7:4b:1f:86:5f:b7:
         9b:ae:b2:38:dd:da:20:9c:a7:87:46:63:c8:b9:af:dc:cd:58:
         31:21:48:90:b8:ab:c5:83:5b:c8:9c:16:46:ba:3c:42:0f:9a:
         c4:f2:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 01:32:15 2024 by rpki-client on console-ams.rpki-client.org