Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e644b99-ae10-3667-8c4c-09186c4cddae.roa
File:                     8e644b99-ae10-3667-8c4c-09186c4cddae.roa (raw, json)
Hash identifier:          Tx5gs+YHjR7u5xIGoS3QsqV08yIO0uxDLI4V8rxtjEk=
Subject key identifier:   C8:2F:26:67:EF:BE:20:4C:60:82:86:32:B5:12:AE:BB:53:23:4B:3B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838398CB0A8525F2430A7AB0EA0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e644b99-ae10-3667-8c4c-09186c4cddae.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        142.196.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:8c:b0:a8:52:5f:24:30:a7:ab:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=4dfcb0ee-2d6f-445d-9009-297c84ab9210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:4e:bd:ec:57:c0:fe:15:4f:ab:5c:10:e0:
                    32:22:fd:e6:41:ea:f0:0f:fc:ed:e5:20:60:fb:23:
                    9e:f4:19:1e:bc:c2:fb:48:62:70:8a:69:9d:7d:40:
                    09:11:86:c0:4a:69:94:03:2f:74:2c:dc:73:ca:1f:
                    5c:9a:d6:39:14:80:73:6d:f8:ee:de:16:11:ff:f8:
                    9b:18:ab:1f:7a:0c:32:db:a2:b8:aa:25:c7:e6:2c:
                    51:18:e4:af:61:b8:51:99:f0:7c:ac:c6:57:eb:1a:
                    da:3d:30:9d:74:25:bc:78:19:3a:b8:ff:a4:09:83:
                    83:9c:7c:0b:4d:86:9e:64:a5:30:7f:a9:59:b4:be:
                    9b:48:15:fd:13:58:83:19:0c:e3:15:27:74:7d:fe:
                    72:a5:8d:13:f8:3a:43:46:f0:9f:f8:77:80:b7:56:
                    44:cd:1b:7b:ff:d8:a3:e2:6d:97:22:bf:24:0c:97:
                    40:61:a9:f2:43:dd:bd:49:d7:e1:69:b9:1d:72:d9:
                    43:13:35:e5:50:be:04:2f:04:6b:e6:cb:86:75:31:
                    28:30:ea:98:62:bd:cc:73:b0:e8:e4:5a:d2:f0:d7:
                    dc:a2:6f:23:29:4d:10:3b:52:4c:2d:22:55:76:59:
                    0e:b1:af:e6:1e:57:dd:cc:a4:3c:4c:cd:0b:0a:aa:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2F:26:67:EF:BE:20:4C:60:82:86:32:B5:12:AE:BB:53:23:4B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e644b99-ae10-3667-8c4c-09186c4cddae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.196.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:28:98:5f:a0:6a:3e:92:75:3f:a9:1f:f7:37:0b:bd:91:
         c1:51:6b:ff:2c:95:42:a0:5d:77:0f:de:21:dd:e3:df:cc:63:
         10:24:cb:b3:53:d0:e2:5f:29:e0:b7:66:8e:b0:22:eb:66:a2:
         ca:bb:11:3f:eb:be:0c:34:a2:56:3b:53:62:56:03:6e:3f:c0:
         f9:ea:c1:3a:6f:b4:31:c9:1a:3c:e4:fc:8f:96:62:b8:f5:f6:
         aa:c2:d6:c1:2b:1e:ff:2a:88:d0:02:e1:6d:8c:ab:93:20:e6:
         7b:b4:b4:12:4d:14:e7:71:b3:b6:90:0a:8c:00:1d:0d:89:23:
         a1:cf:c6:a9:f5:b5:44:34:0b:a5:26:18:b5:39:ec:d8:a9:7a:
         66:64:d0:3b:31:7d:a2:7f:30:41:ea:87:bc:ec:21:33:e6:55:
         fc:48:da:a4:15:24:a3:69:5b:6b:80:e8:a0:98:51:17:aa:52:
         58:b1:45:0f:c7:28:c0:c4:b6:a8:5f:e8:7d:78:a1:26:38:c2:
         16:d9:c7:90:a1:b7:b7:72:4c:28:d0:b6:97:b0:fb:c7:21:76:
         ce:b8:61:0f:f7:cd:0c:ac:ff:72:51:bc:69:c5:c1:15:e0:2b:
         b0:08:0b:6e:ac:82:7f:0a:f8:74:53:77:c3:da:d6:0b:c5:9b:
         f1:6b:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:33 2024 by rpki-client on console-ams.rpki-client.org