Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35f017bd-1516-368b-819e-5d1fb97766d8.roa
File:                     35f017bd-1516-368b-819e-5d1fb97766d8.roa (raw, json)
Hash identifier:          x+4k+QZEyckvBOQksfCmPBt7eYqfUKKBpGWJ00j7RQY=
Subject key identifier:   23:C8:21:49:32:23:80:C8:F2:67:F1:00:05:52:BA:07:28:5F:0F:E1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584542CD22F4777111C0DEE11B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35f017bd-1516-368b-819e-5d1fb97766d8.roa
Signing time:             Tue 19 Mar 2024 16:02:45 +0000
ROA not before:           Tue 19 Mar 2024 16:02:45 +0000
ROA not after:            Mon 17 Jun 2024 16:02:45 +0000
asID:                     21743
IP address blocks:        180.131.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:cd:22:f4:77:71:11:c0:de:e1:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 19 16:02:45 2024 GMT
            Not After : Jun 17 16:02:45 2024 GMT
        Subject: CN=e428955d-a9a7-466d-b297-23488c8fc14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:e2:7e:f0:b1:79:b8:ee:f6:49:ff:99:8e:
                    94:6f:f8:94:c1:3c:2d:56:38:39:17:2f:9e:34:ab:
                    a9:f0:0f:fc:c3:26:37:a9:1b:8a:29:22:84:eb:39:
                    a1:4f:5f:29:f0:d0:45:5d:9b:a4:5b:ef:30:43:c0:
                    f9:76:74:74:8b:89:96:75:a6:34:28:50:ec:97:cb:
                    dd:89:ba:8a:d5:17:39:47:61:46:44:8a:f7:cd:49:
                    0e:b2:79:a4:68:9f:ce:ca:66:22:37:c0:f8:c8:28:
                    48:28:a8:b9:51:1e:4d:63:32:16:98:08:d9:7a:0f:
                    32:ca:16:0f:9b:29:6d:31:85:c5:13:38:b0:aa:f8:
                    19:d4:bc:ce:1a:29:fb:8b:e9:60:e0:1a:67:0a:bf:
                    02:8e:41:0d:cb:68:58:31:f6:45:79:ae:89:e2:ea:
                    e7:17:72:e4:64:f6:d6:55:ea:3a:b4:de:bb:01:7e:
                    2d:83:e0:1e:cc:d1:00:00:08:8f:c2:79:92:29:8d:
                    8a:ee:b4:23:3a:79:fd:6e:ee:2c:74:63:a6:82:39:
                    8d:ec:85:e7:4d:6e:9f:ad:47:df:50:55:23:35:75:
                    d2:90:0a:a2:02:15:9c:e1:76:b5:87:f3:8f:5d:b8:
                    33:f8:dc:50:32:77:e8:0f:bb:b8:0a:37:3e:88:4d:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C8:21:49:32:23:80:C8:F2:67:F1:00:05:52:BA:07:28:5F:0F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35f017bd-1516-368b-819e-5d1fb97766d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:54:6d:0d:3f:72:1b:c5:72:a1:be:70:3b:55:0d:6a:35:8a:
         43:80:e1:60:da:82:2a:f2:05:0a:1e:1d:ae:d4:a8:a0:f5:90:
         8c:61:dc:e6:ba:ef:ae:1c:2f:6a:89:03:06:df:bd:08:7e:95:
         50:2d:5c:97:4f:88:b1:f5:43:fd:51:bc:98:a4:7c:5b:bc:d1:
         b0:49:ec:b5:00:25:f4:43:b1:c2:02:4d:67:5e:b8:63:66:90:
         c1:15:91:11:1d:80:ad:f4:f4:11:da:a1:43:70:b6:aa:7a:88:
         67:cc:0f:33:bb:b7:d5:f7:bb:3e:be:4b:e9:e1:38:84:37:2c:
         4d:37:b5:7a:3a:64:d7:c4:70:f6:ad:23:b5:c0:17:f4:e6:b9:
         21:8b:74:53:b6:3e:73:c8:88:ed:98:48:58:0a:9f:c1:c5:b6:
         e4:81:26:e6:98:f4:90:9d:66:ca:ff:bb:51:f5:47:bc:42:d8:
         6f:36:81:ea:4e:8b:3c:7c:28:c5:ac:ef:99:d7:fa:21:7c:f0:
         2a:19:97:e9:35:24:49:c1:84:3f:93:f1:80:4d:4d:76:6f:d5:
         1b:f3:68:68:5b:fc:da:09:32:9d:fe:75:3c:19:f5:9e:ba:13:
         1d:4d:60:f6:c5:e5:33:49:1f:06:37:3d:05:e0:4a:a7:b9:6e:
         af:28:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:33 2024 by rpki-client on console-ams.rpki-client.org