Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
File:                     fed315c7-e9df-35c1-b17c-1e75b08b0642.roa (raw, json)
Hash identifier:          b7tPi2VxE45E2MLC9luqO7ll4xVIlml+fKg06wneZKo=
Subject key identifier:   56:0F:FF:7F:D9:C0:3C:0A:BE:B2:23:22:FF:28:DB:75:36:B1:E0:BA
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285844F0F146EF990E5306D765BE40
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
Signing time:             Mon 19 Feb 2024 08:19:17 +0000
ROA not before:           Mon 19 Feb 2024 08:19:17 +0000
ROA not after:            Sun 19 May 2024 07:19:17 +0000
asID:                     399471
IP address blocks:        163.123.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:f1:46:ef:99:0e:53:06:d7:65:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb 19 08:19:17 2024 GMT
            Not After : May 19 07:19:17 2024 GMT
        Subject: CN=86b8fa06-6e1d-454c-8f42-5a23f24c576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:1e:7b:c0:0a:3c:67:7c:1b:5f:9e:dd:c6:
                    4b:3a:e9:48:90:74:11:65:73:10:d9:be:cc:86:27:
                    a0:d2:c0:06:52:5f:75:a4:dd:0d:bf:69:e7:64:1c:
                    17:17:0b:cd:da:45:34:52:f2:7a:6a:2a:68:d0:1d:
                    2a:e1:4a:2c:14:dc:42:b6:8b:92:dd:79:66:e8:a4:
                    96:50:c9:83:ea:b8:28:81:21:56:0c:e5:6e:e0:40:
                    08:56:f0:ca:77:4c:28:4d:31:5e:1a:4b:7e:51:65:
                    c4:88:69:fa:75:26:66:e6:57:bb:da:d4:ad:cf:03:
                    b2:56:37:6f:96:a3:67:30:1a:23:5b:81:c5:c9:a4:
                    3d:56:8a:97:00:ad:c1:f0:36:40:97:0d:ee:18:d4:
                    09:91:63:a1:f7:81:a7:1b:b8:6c:11:8f:8d:f7:18:
                    84:47:72:14:77:a5:51:54:f7:5a:7a:8f:49:4c:13:
                    e5:3c:58:b3:d9:fc:97:a1:1b:0e:94:d4:a3:f0:77:
                    9b:b2:53:ba:51:10:27:f4:eb:13:4c:fb:b4:cd:70:
                    78:28:11:d2:e7:01:6f:dc:27:ee:d3:e0:23:02:ad:
                    8a:be:e2:2c:64:12:09:c4:28:d9:b6:81:e8:f2:e0:
                    4b:8a:f3:ba:cd:d1:2e:44:f0:62:af:15:91:b6:39:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:FF:7F:D9:C0:3C:0A:BE:B2:23:22:FF:28:DB:75:36:B1:E0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:93:77:52:d5:53:3c:95:cb:80:7b:36:f0:e5:55:b5:e7:
         1b:76:b2:97:62:2e:af:84:f5:4f:14:72:79:44:21:f0:6f:e6:
         c7:59:d7:c8:34:29:e9:5c:44:e6:c4:65:ef:84:0e:1b:8f:3c:
         09:d7:59:0d:b9:1f:9f:0e:3a:87:dd:b7:06:ab:d6:ec:a3:dd:
         77:fb:8b:4d:d6:28:60:05:98:f6:77:d7:89:27:0c:bb:4b:e4:
         98:c5:74:76:2e:7c:33:82:22:04:61:ca:84:2a:5c:17:d2:d0:
         96:15:a6:59:dc:65:10:65:b6:ad:91:64:35:22:7a:b4:99:68:
         9b:e3:f7:47:28:3d:9a:20:92:61:78:e9:9f:31:67:af:9d:f7:
         1c:07:65:27:fe:fe:fc:48:f0:31:ae:a1:97:1a:68:eb:89:dd:
         54:0e:c2:6a:dc:66:f2:d4:b4:21:33:51:02:74:1c:80:7c:06:
         1f:01:3b:6b:82:7c:92:26:9c:f6:c5:98:81:d0:c7:99:2f:4e:
         7f:cb:e6:00:c8:b6:a7:e4:71:e9:3b:f2:3f:1b:a7:28:4a:58:
         51:15:c8:94:9c:6a:a2:32:6d:81:e1:70:03:70:c6:bb:7f:70:
         6d:2f:33:53:83:5f:5a:20:fd:de:8b:44:d3:64:a8:8d:5c:af:
         97:79:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:08 2024 by rpki-client on console-ams.rpki-client.org