Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa
File:                     d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa (raw, json)
Hash identifier:          JOO41VfEQ7u4+We9bhy8l33CultMv6PW1uxhqnWqP80=
Subject key identifier:   CC:CE:F1:E8:03:23:4D:38:F2:3A:1B:0F:3F:B1:49:93:EA:5C:34:5A
Certificate issuer:       /CN=1b8f9be3-65c4-421d-a760-278a00443898
Certificate serial:       010D0C9F432858450D8583DE3247C1DF0A60B360
Authority key identifier: 7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     63020
IP address blocks:        141.193.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:83:de:32:47:c1:df:0a:60:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b8f9be3-65c4-421d-a760-278a00443898
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=b703bac9-b60f-4419-b8c3-17060356b28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:6b:8d:d6:15:c1:a7:1c:fb:d6:53:36:bc:
                    54:14:35:21:90:91:81:d3:d9:15:6a:2d:f1:23:88:
                    42:32:ed:c3:80:0c:7a:d5:b4:a5:99:9f:06:0b:cc:
                    0c:b7:93:8d:93:36:45:c8:fb:38:e4:a2:07:14:c5:
                    76:8b:c8:65:be:59:45:a1:a5:52:09:05:87:cd:1a:
                    f8:05:7d:d1:33:f0:45:bf:f6:3e:dc:da:c4:d2:7f:
                    2a:1e:05:0f:aa:11:9a:37:b9:97:30:e8:94:47:fe:
                    1d:a4:8c:63:19:a7:94:cb:d5:24:77:ea:dc:74:8b:
                    14:86:29:45:b6:89:99:03:6f:77:14:d2:5e:bb:b9:
                    bb:61:9d:97:40:25:c7:ea:09:93:d4:82:97:0c:c1:
                    c4:83:df:d0:2f:d3:1c:d9:12:0b:6d:ea:76:71:d1:
                    3f:d4:fe:cb:ee:98:61:ae:ff:0e:5d:4b:8a:9a:b4:
                    7e:bd:7a:70:c3:16:f4:dd:b2:7c:02:a6:12:36:83:
                    6b:fb:56:72:f3:eb:14:ce:b0:45:3b:cb:f2:b8:4b:
                    86:fb:16:3b:5f:51:e4:a5:f4:0f:4d:97:10:f9:06:
                    9a:26:de:70:10:68:68:61:51:68:b9:f9:dc:7d:8e:
                    db:0e:f3:34:09:0c:6b:27:a4:68:aa:c9:0a:78:3b:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CE:F1:E8:03:23:4D:38:F2:3A:1B:0F:3F:B1:49:93:EA:5C:34:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/d43aed7a-207d-3fc7-945a-92ca85a7ac8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:0e:41:52:e2:14:2a:59:93:79:5f:60:b8:c6:d6:73:08:
         e2:9d:37:df:35:b1:99:2d:83:c0:0f:c8:77:e1:47:f7:60:2e:
         00:fe:f0:53:91:aa:ad:db:fb:59:89:62:39:b3:ee:1d:3a:37:
         7b:4f:a3:c8:6f:9a:15:91:c7:ee:42:5b:4e:47:b0:58:04:9d:
         52:09:3a:04:78:f4:9d:7a:c5:c8:b0:4e:2c:81:3b:72:6f:c4:
         28:bf:e2:41:0f:bb:a7:77:5d:f6:a3:ec:3b:ca:5a:ea:fa:1a:
         94:3f:20:62:e9:a4:81:57:e9:a9:26:d6:bc:cf:e8:00:e3:69:
         10:db:05:c6:58:52:c2:3f:17:68:a8:6d:c7:bf:9a:0a:40:8d:
         cf:d7:97:0e:04:ee:0f:2e:c7:1b:f1:86:3f:a7:2f:71:90:1e:
         ac:af:fd:87:4a:98:cf:9f:ec:02:fe:ac:97:04:2d:c0:15:48:
         e3:b1:9b:08:f0:e8:18:22:b0:c0:66:8a:7c:ab:a4:1f:41:cd:
         7c:4c:85:fa:24:df:2b:a7:91:49:f4:61:1a:b7:28:48:4b:97:
         d7:ad:b3:41:86:b5:18:21:d6:c5:dc:77:70:55:87:09:98:bd:
         5e:6e:06:14:d7:ed:22:f6:bb:1c:db:89:e0:14:0a:38:3a:ca:
         3e:53:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:26:59 2024 by rpki-client on console-ams.rpki-client.org