Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa
File:                     bcf274df-5509-357c-a371-e2d4c72b0723.roa (raw, json)
Hash identifier:          tKWvD+6XiEHVUTblWQ0HC9LU5q81ABaFf8HtvRg10HY=
Subject key identifier:   F9:60:9D:FD:52:29:7B:6E:88:A4:91:76:E9:E8:77:21:E7:9A:74:8E
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584510502AF7A760C7F89C1A2C00
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     53768
IP address blocks:        162.134.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:2a:f7:a7:60:c7:f8:9c:1a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=d94d5a6a-7e1a-4787-bb07-911b8439ad0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f3:97:e1:15:76:05:76:7c:c9:9a:15:41:2d:
                    be:35:5e:24:2e:25:f1:20:a8:b0:6b:95:92:70:10:
                    3c:2e:26:28:c0:62:5a:b8:61:0e:f3:4d:59:0b:17:
                    bf:e3:44:a3:bc:e5:49:44:e5:7d:70:6d:49:7e:3d:
                    7e:f5:19:6c:d4:f1:d4:a1:eb:59:1a:ae:20:0d:3c:
                    e8:a4:e1:59:b3:49:d5:bc:13:71:8e:b3:75:7f:45:
                    d2:85:84:9c:b8:0e:36:84:72:a6:da:3d:36:94:fd:
                    a3:49:1f:82:c7:73:ef:db:b0:84:fc:15:cb:61:51:
                    b8:6f:84:d3:03:06:d3:58:1d:68:41:91:4a:22:66:
                    f1:21:cb:38:c2:a5:f2:02:62:b1:00:c3:1e:9d:72:
                    5e:ea:28:7c:f4:f0:a4:30:04:fb:c6:2c:a2:fe:ee:
                    f6:53:73:b4:ff:e9:6a:4a:ed:22:9b:f8:0d:87:ba:
                    28:7f:66:d7:f2:67:6e:63:c0:55:4c:72:82:c6:a6:
                    5f:73:4a:74:42:f3:ec:a0:f5:92:f3:d1:c9:a6:5e:
                    f3:3b:51:13:fe:7b:f5:b4:9d:c0:15:b2:09:87:d4:
                    6b:92:f2:63:c8:bd:5d:39:0b:b4:fb:73:a4:be:e6:
                    5b:fb:1e:ca:c0:d9:94:98:a8:b5:14:16:ad:d6:d5:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:60:9D:FD:52:29:7B:6E:88:A4:91:76:E9:E8:77:21:E7:9A:74:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:10:aa:88:f9:78:b5:bd:c2:d1:ad:e3:ec:66:82:7c:96:
         db:90:0e:2c:ae:8a:d9:8a:6e:15:2f:3d:27:be:fe:39:04:d4:
         c7:cb:4e:d5:54:bc:1c:a1:5c:bc:d5:cb:92:23:67:f4:bb:21:
         98:cc:e1:d1:54:03:af:1a:11:4e:7e:32:be:b6:d9:e1:d8:e5:
         d5:ff:c9:a5:dd:7d:b0:86:78:d6:8e:55:29:9d:57:31:95:fd:
         c1:ef:bf:33:93:18:d7:4f:03:41:f6:fd:46:60:09:20:f6:42:
         5d:d3:14:3f:09:17:ed:05:ed:b4:19:99:76:4e:6b:18:11:60:
         1c:26:aa:f6:6b:7a:6e:fc:f7:57:9b:de:fd:93:86:df:6f:aa:
         49:af:c6:36:8c:98:b4:52:0c:f9:e0:49:1e:2c:a0:ed:d8:4b:
         da:a8:b8:71:fe:cd:e1:d7:9e:50:94:40:71:56:36:19:7b:09:
         71:c1:e9:06:39:2a:e7:05:dc:ab:3c:0a:53:c9:bf:d9:aa:73:
         77:7c:d4:3c:0e:e5:ad:a4:99:f2:4d:5b:e7:31:6f:d3:f2:08:
         76:f0:8d:16:3a:30:0b:3a:62:b1:9f:eb:fc:6c:9b:8a:c6:fe:
         d5:7d:d1:12:b5:7d:9d:ab:46:c4:d4:8d:28:0b:d3:25:11:53:
         d0:6e:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:39:21 2024 by rpki-client on console-fra.rpki-client.org