Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/be7d7222-ec8f-3d84-8528-575f93c55d91.roa
File:                     be7d7222-ec8f-3d84-8528-575f93c55d91.roa (raw, json)
Hash identifier:          HHWWHrgnAAGL0tiSDFYVhi5Sk6JOwqKr5dVXxYdIpzc=
Subject key identifier:   51:68:56:14:42:17:CC:37:B1:81:14:E3:FA:DA:70:91:A9:FF:46:32
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F432858458C6DD64DC80F1FC312EEA600
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/be7d7222-ec8f-3d84-8528-575f93c55d91.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     398465
IP address blocks:        165.140.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d6:4d:c8:0f:1f:c3:12:ee:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=059d6958-0f6e-4c36-85e1-b3015426d8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:58:50:f6:60:20:10:c5:8c:39:2f:f3:53:
                    8c:ea:63:54:47:ac:f9:44:8c:a9:f6:63:4d:f4:e8:
                    c9:70:7d:29:69:04:82:4c:26:11:37:87:14:47:16:
                    5f:7a:da:c9:4a:27:60:15:83:7b:2a:0e:52:f2:66:
                    26:87:03:ec:fa:a3:65:5b:8f:03:e2:5b:c0:a1:19:
                    15:e5:c8:f4:52:66:43:8e:bd:e0:f4:19:92:25:3c:
                    b8:7b:36:1b:ac:c1:79:0e:9f:3d:79:60:4c:fa:23:
                    84:fa:ea:43:17:48:be:c9:7f:6a:e8:f4:bd:07:7f:
                    a2:ed:69:c0:f3:90:82:74:6e:c9:94:cd:2a:67:f3:
                    ba:61:da:85:7d:c2:8a:0b:fc:71:18:b0:0d:d9:59:
                    ce:64:b0:bb:cb:ba:c4:32:55:3b:4f:6d:8e:af:14:
                    bb:4a:e3:34:7a:3c:64:5b:fa:68:2e:c0:84:5d:99:
                    28:8b:7b:1c:3a:48:c9:c4:a8:5d:4b:53:df:a0:cd:
                    df:6e:8f:34:39:a0:ff:6a:f7:47:36:40:86:01:1c:
                    d6:06:d2:10:83:8a:af:18:7e:38:00:7d:41:6a:5f:
                    4b:25:f7:84:70:ad:1a:4f:10:cb:1e:83:01:06:59:
                    d0:76:96:14:40:a0:77:48:0c:60:73:18:0a:47:cb:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:68:56:14:42:17:CC:37:B1:81:14:E3:FA:DA:70:91:A9:FF:46:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/be7d7222-ec8f-3d84-8528-575f93c55d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:1c:71:45:27:2a:ef:3f:aa:d4:dd:d2:b6:dd:da:dc:26:
         a1:2c:6a:66:f9:84:dd:80:31:78:96:24:74:e3:be:51:27:3f:
         eb:80:f4:aa:7b:7b:3b:27:a9:c0:53:6a:8f:78:a1:db:46:d3:
         4b:0d:ce:b8:5a:65:3a:c9:60:27:83:79:d4:f9:72:01:ea:ea:
         05:fb:51:d3:ff:d4:c4:f1:6c:d7:e0:01:e5:9e:46:2d:4b:a0:
         f3:88:6d:0c:5a:78:b7:8b:54:a1:b0:85:3c:95:cb:24:4a:a8:
         cf:fe:b9:1b:8d:3c:b7:6b:1d:c1:6d:e2:17:1e:79:b4:4b:e2:
         50:da:b7:04:90:03:4f:ee:f0:a6:36:9b:4f:d9:96:9f:f4:df:
         63:f5:fa:41:15:d5:0a:fe:d5:82:b6:27:2d:94:eb:06:f6:14:
         66:19:52:e6:ce:59:e8:c2:4b:79:28:f3:d1:e5:ab:6e:3b:ac:
         69:0a:88:e6:0e:8d:10:b9:f0:fb:cd:bb:4c:2b:60:e4:06:88:
         0e:1c:d9:4d:b0:1c:62:45:84:27:a5:70:29:95:ab:8e:95:16:
         01:a1:a4:42:6e:29:a4:e6:c9:32:0b:ed:46:45:1b:ec:80:70:
         3c:d6:44:96:7d:36:40:47:73:ad:c4:ec:72:58:81:c6:d6:71:
         d4:ad:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:36:25 2024 by rpki-client on console-ams.rpki-client.org