Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa
File:                     9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa (raw, json)
Hash identifier:          b8Tlnc2b2UuNEgv+9fYRvU8liVCzXPSWYqebu+YzR3Q=
Subject key identifier:   A3:7E:E5:65:50:FC:34:84:28:F8:CE:25:D3:D6:5C:A7:5C:3F:2F:B9
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584574B31658CAA5897F6347A580
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     25649
IP address blocks:        143.55.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:16:58:ca:a5:89:7f:63:47:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=4a0a0588-74ec-472c-9e5d-c72637d19d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:3c:8c:3f:63:22:15:04:a0:cc:a3:86:c3:
                    df:48:c5:1e:31:e8:57:c3:21:39:6a:30:9a:9e:34:
                    56:89:f1:75:dd:94:a4:b6:4a:c0:25:a7:e2:6e:df:
                    31:ca:83:f1:bf:59:ae:86:ba:5f:76:cc:27:d4:9e:
                    eb:b5:cc:43:99:2e:00:d3:81:4a:be:c9:81:e2:43:
                    c8:ca:50:4b:59:46:2d:cd:54:99:d8:d0:b2:70:65:
                    e9:b4:62:b5:e5:7d:df:42:61:4e:6e:7d:95:39:8e:
                    e0:30:fb:c5:6c:ad:ce:57:2e:01:bd:3a:86:a3:35:
                    90:ab:d9:35:0a:e9:d9:b4:c8:c7:23:6a:07:37:a2:
                    a0:b1:7b:62:b9:85:cd:eb:91:bb:3f:e2:12:e7:9f:
                    5f:a9:7d:5e:01:ed:76:9d:96:8c:33:8b:c2:da:64:
                    60:64:2b:20:34:65:f0:3a:c7:1d:db:a2:c5:61:00:
                    72:7e:0a:6e:c6:de:24:73:66:77:7a:06:ce:82:42:
                    b7:aa:fe:88:88:65:19:d6:e5:6b:cf:56:29:b6:de:
                    3f:e4:ee:23:4a:9c:16:ab:c5:c9:5a:e6:39:37:db:
                    ad:79:9c:2a:6e:2e:a7:be:90:e8:79:e9:e6:52:35:
                    79:d5:98:ab:94:52:b8:4c:61:ff:28:ba:18:eb:57:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7E:E5:65:50:FC:34:84:28:F8:CE:25:D3:D6:5C:A7:5C:3F:2F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:bb:6e:ee:13:6b:d4:55:c3:5c:2d:1b:4e:c1:f0:96:ba:
         cc:fd:58:1c:05:91:bc:1a:d7:3a:21:8f:5f:e6:3d:38:17:b2:
         ac:54:c4:b9:0b:f4:cd:a0:53:74:c4:e0:1d:4e:6f:97:f2:ea:
         67:3f:98:41:bc:35:31:99:bf:59:fb:ea:d8:5a:ad:d3:0e:c1:
         0f:37:42:68:ef:39:e5:60:7c:03:16:e4:5e:a6:8a:5e:f7:31:
         8b:68:6a:6d:84:a2:cf:3c:46:75:89:1c:a1:9f:46:95:2a:d6:
         d4:43:87:ca:2e:8f:08:76:a5:90:fe:84:95:4d:9d:3d:41:07:
         ea:44:60:9f:91:fa:db:4c:c6:fc:6a:92:60:b1:84:59:39:1a:
         e2:c3:2e:ab:6d:55:02:72:76:76:83:07:de:a2:40:7c:12:84:
         ff:0d:53:c1:1d:e6:96:2e:62:41:32:d9:3f:53:42:67:79:5f:
         0a:c6:96:b4:a5:9a:00:a7:2f:03:de:6b:9a:4f:73:7a:ed:69:
         95:0d:4d:d3:25:6d:c4:2a:e1:a4:58:b5:86:d7:41:d1:b7:50:
         2a:39:2b:5d:d4:f7:43:fd:cf:90:a2:86:7e:fc:ee:73:c8:8b:
         ec:f9:35:c9:8a:7f:f6:40:00:f4:22:dc:d4:ef:42:a7:fc:8f:
         23:dd:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:45 2024 by rpki-client on console-fra.rpki-client.org