Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa
File:                     f1432e62-acbc-3fcc-8436-8d1fb451f216.roa (raw, json)
Hash identifier:          1kzvkepAFsyPtpRcUWAyVUIF6zYIym4iPzsKylGdmFg=
Subject key identifier:   8E:53:59:9B:7A:C7:ED:1A:88:24:10:87:95:A1:4C:FC:E5:C6:2E:F7
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584754E0CF5075CA9DD08801B300
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     53856
IP address blocks:        142.202.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:cf:50:75:ca:9d:d0:88:01:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=e13087cb-02cf-43ef-8660-9b2b49f0aca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:c4:59:0b:66:4b:fc:d5:0d:84:f5:da:8a:
                    ef:38:3d:12:12:cb:c1:87:78:b8:d7:af:21:7a:6c:
                    b1:ba:ae:6d:e1:80:74:f4:27:9e:b8:69:6f:f9:97:
                    cd:68:5b:c0:eb:40:b0:18:5b:17:be:4d:bf:15:ca:
                    2b:30:b2:da:e6:52:9b:de:7a:90:9e:21:21:cf:4b:
                    37:ab:07:63:60:28:8a:60:38:78:fc:89:a9:b3:09:
                    65:93:f0:d0:02:34:aa:28:3b:59:1d:08:8f:72:7e:
                    e8:58:2a:8c:54:1d:ae:54:77:88:ea:52:d9:f5:fd:
                    77:db:ac:2b:3e:bd:27:1c:88:de:fd:1e:66:2a:99:
                    c1:42:cd:ed:d4:56:6e:60:c4:c4:35:c9:20:3f:13:
                    8c:34:0d:ce:e4:c4:6d:66:ab:5e:e4:cd:19:6b:07:
                    82:89:9f:d2:8a:a9:fc:47:90:c1:8d:57:f6:5d:ba:
                    e1:00:94:86:33:cc:c7:ab:c5:47:39:8b:43:a7:bf:
                    c5:e2:2a:f2:68:78:be:ef:77:14:15:8a:a1:1d:9e:
                    dd:8e:6b:9c:19:2f:20:8f:0f:f6:c5:96:36:a6:7f:
                    a9:a9:7f:7a:c8:62:14:9b:0e:56:3d:f9:ac:90:d7:
                    df:eb:54:81:40:c0:52:7e:42:a3:01:75:a5:b7:8b:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:53:59:9B:7A:C7:ED:1A:88:24:10:87:95:A1:4C:FC:E5:C6:2E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:23:88:62:25:9a:cc:4e:09:cb:09:b7:60:2b:77:b4:69:
         d5:0a:cc:d7:59:5b:7f:65:c2:39:61:5d:58:30:a1:0c:6d:d8:
         86:d5:41:12:40:6d:02:85:f7:8c:4a:81:57:81:ce:50:97:fd:
         22:ff:aa:ca:87:de:c1:f5:37:df:f5:55:a3:e3:1c:61:c2:df:
         e6:28:6d:23:5b:8f:d1:2a:c8:0b:88:9d:a4:29:2a:93:ac:26:
         5c:ef:40:90:46:94:05:05:db:ab:0f:79:7f:1e:8d:e4:f4:c6:
         42:8f:1b:79:03:59:0f:e6:89:3a:f4:9b:57:ec:b8:62:51:e8:
         14:1a:97:c1:ed:69:50:fc:4c:31:49:a5:94:9e:6c:f8:e3:86:
         5c:52:21:24:56:bb:78:87:bf:55:d6:2e:d0:3f:43:d2:d7:2c:
         61:7c:ba:16:9c:e9:c1:db:84:3d:12:01:59:31:1e:56:49:33:
         fa:55:c0:4e:c2:49:76:4c:21:1a:53:34:18:16:99:fd:11:a5:
         28:44:94:17:fc:87:5b:e6:83:f5:76:93:92:a2:b0:04:10:b2:
         db:33:74:79:2c:06:8d:05:81:e1:48:8b:7c:ab:34:ac:db:a2:
         ae:c9:50:22:f5:f6:a8:78:a3:30:58:b5:c3:ee:23:51:a1:a6:
         9d:81:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:27 2024 by rpki-client on console-ams.rpki-client.org