Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
File:                     3f3593ee-3773-397b-a47c-3d02f42f64d4.roa (raw, json)
Hash identifier:          Dzr2v4GwUhYQr+25hzqwU7Tq0echKGPq5Xy3qvPfYvE=
Subject key identifier:   12:81:55:6E:7D:F2:93:D9:50:8A:86:1B:2B:3E:43:F8:8C:48:6E:40
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844E66FEB05A90B2FB2B161D380
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     1239
IP address blocks:        158.115.228.0/23 maxlen: 23
                          141.193.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:eb:05:a9:0b:2f:b2:b1:61:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=385d3ac4-411f-4bcb-a00f-d57efda3d8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2d:fe:38:d7:6f:64:1b:ca:f0:69:14:96:e6:
                    91:fe:41:38:35:f4:dd:ac:f1:aa:1e:54:30:9a:91:
                    42:92:65:7a:39:21:78:23:6f:65:21:3c:0f:25:87:
                    e8:7a:c3:70:72:1f:99:da:7b:77:20:4e:0c:1d:54:
                    07:b2:19:a3:d1:80:73:11:18:6a:9d:4c:a0:76:80:
                    98:57:5c:6e:af:3d:09:a9:e3:76:29:78:fc:3a:d5:
                    e9:68:1f:1a:fc:8a:cd:ff:0c:a6:5c:e3:77:4c:15:
                    a4:cb:72:fd:9d:66:98:f4:c1:24:ab:6a:1e:4e:45:
                    04:b8:22:ee:b4:15:7f:36:bc:b8:e7:f1:b1:75:ab:
                    df:8c:58:6e:2d:67:ca:6f:4f:d2:eb:ca:00:53:eb:
                    28:04:d2:29:9e:c0:18:4a:99:51:e1:cc:97:7c:c3:
                    c5:06:00:52:58:20:22:63:3e:2d:d3:1b:1b:99:70:
                    49:8a:c6:0e:7d:43:37:b9:5d:36:33:75:ac:79:a6:
                    71:fa:cf:ba:1c:df:2a:b7:b4:d9:81:20:b3:0e:55:
                    45:c2:99:d3:b5:83:05:b7:7a:57:b7:8d:04:e9:93:
                    e4:bc:75:74:5e:eb:15:10:ab:1d:50:c8:5b:12:7f:
                    83:09:8d:f6:35:20:20:3f:b4:67:e8:77:3f:a2:2d:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:81:55:6E:7D:F2:93:D9:50:8A:86:1B:2B:3E:43:F8:8C:48:6E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.96.0/23
                  158.115.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:44:81:2f:fc:4b:31:52:a9:6d:9f:4b:fd:7c:d1:53:25:25:
         ea:6f:57:08:12:14:61:2e:93:5d:6f:bb:9f:c1:e5:b6:22:5e:
         96:89:90:01:57:57:d3:d7:83:4b:09:24:9b:94:23:6e:68:48:
         b2:f1:d0:86:ac:f0:c7:f1:1d:af:3d:ac:d1:6c:f6:92:8c:a0:
         5f:e5:6f:23:36:ea:dc:37:8e:67:bd:fe:4b:da:e4:f8:6d:7d:
         28:ac:19:af:bf:1c:0e:a6:10:d2:c1:6c:ae:22:6e:ef:74:47:
         ea:cb:97:a5:5b:ca:22:2a:f6:c9:9d:0a:1e:75:de:36:35:7a:
         c0:23:31:35:d6:1b:27:3c:93:18:43:e1:3c:fb:86:3e:08:f5:
         2e:94:00:e1:a2:af:a1:d1:4e:e5:c6:f9:8e:ae:ab:42:ab:45:
         37:d3:92:4d:cd:35:0c:59:8f:c6:37:0e:f5:2c:75:de:08:51:
         b4:bb:0f:a0:fa:8c:d6:08:37:a6:ce:30:78:d6:2e:23:f4:e0:
         12:43:ec:33:eb:dc:ad:3a:dc:2e:0c:f8:dc:c9:b8:f4:11:c6:
         04:62:ec:b6:87:ab:6d:46:9a:09:c4:16:aa:8c:f0:3b:73:11:
         cf:ef:76:14:f1:f8:10:9b:9c:35:02:91:c4:95:45:78:a8:f1:
         ac:31:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:32:59 2024 by rpki-client on console-ams.rpki-client.org