Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa
File:                     d8100009-70c0-3912-8d76-a269e3657e98.roa (raw, json)
Hash identifier:          5Ich26t/FC5IafO2hglcqUuKmY1AZETz3mTKLeePkVI=
Subject key identifier:   8C:25:BC:52:A9:AD:5A:B1:C3:EC:DB:F8:B3:62:53:07:04:24:9E:CE
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584574B3166DEB65B90B3C38E5C0
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     25649
IP address blocks:        143.55.152.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:16:6d:eb:65:b9:0b:3c:38:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=0df27d71-dc72-48d7-9aa2-e432d2b2a7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:1d:8d:65:e7:dc:2b:e4:f9:e0:dc:4e:af:
                    cc:5d:91:94:63:da:16:ae:8f:26:4f:9d:1d:1c:5f:
                    ca:35:d8:5a:4e:0b:3b:9f:91:7a:f0:3f:09:8a:88:
                    8e:c0:3c:ee:d3:52:d1:76:f8:fb:00:54:ed:5c:5d:
                    75:83:e6:ab:c1:b3:6e:6c:b7:3c:5b:0b:9a:7a:d6:
                    b0:03:93:85:50:9d:08:94:a7:8b:9b:2d:40:a1:e5:
                    99:7e:f3:0e:0b:0f:3e:39:b4:4d:98:9a:3f:ba:cc:
                    b1:30:20:4f:9f:06:20:7b:7b:65:2d:60:50:08:c5:
                    8a:bb:de:b9:b2:4d:ab:75:68:59:03:62:5f:11:ff:
                    e9:ec:f2:56:0c:82:c7:4a:af:f4:c7:10:4a:f7:d8:
                    a4:e6:29:50:f5:08:9a:2e:d9:75:c6:f0:a7:d1:48:
                    46:74:7e:ee:b9:45:ab:3e:b9:8e:97:75:50:1e:53:
                    f9:4a:09:4d:18:fb:5a:c8:ea:54:c0:42:75:b8:79:
                    d2:39:fb:52:48:60:46:5f:2f:32:c8:4a:a3:b6:52:
                    43:82:c0:fd:3b:eb:d7:59:a0:9c:24:3b:38:be:cf:
                    62:9c:0a:1d:15:37:e0:61:5a:5b:54:f5:1b:c5:d9:
                    9f:e3:46:ac:27:7a:4e:be:ac:fa:e8:ab:53:55:16:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:25:BC:52:A9:AD:5A:B1:C3:EC:DB:F8:B3:62:53:07:04:24:9E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:25:8b:5a:46:89:87:f3:dc:d9:e7:ab:73:d5:df:4d:47:d8:
         93:5b:c6:3e:30:eb:f5:ff:2a:1b:67:95:05:a6:96:7c:e4:fc:
         e7:15:bc:72:81:ca:16:c3:85:fe:c3:72:2e:12:6d:2d:8e:7c:
         46:33:dc:48:ad:fc:ab:eb:20:1d:10:ba:04:da:3f:ae:c8:72:
         3f:90:4e:1b:e0:ee:e3:fd:e9:0f:5e:aa:ad:67:52:02:b7:fa:
         96:78:72:ce:8e:3d:b0:dc:26:cb:c0:36:00:d8:00:f2:f0:9b:
         97:85:6d:2b:04:6e:ed:1f:cb:fd:9c:ae:19:61:08:b6:65:90:
         0e:66:3a:bf:b7:71:d0:c1:d6:a3:e5:ab:43:95:a9:74:cc:dd:
         bc:33:ee:82:53:c7:70:44:ed:bb:82:8d:e4:f4:ea:a8:ff:ad:
         42:c0:c7:c3:78:99:e2:b3:7d:7e:8a:40:a1:16:cb:b1:97:df:
         47:45:09:aa:8f:19:8e:57:d1:4e:e7:ca:8f:bc:50:af:69:e5:
         0e:58:fe:5d:66:47:3b:42:2d:5e:ff:0d:78:ce:3e:28:58:8c:
         2f:28:d5:55:44:0c:03:1f:42:f1:14:76:a7:a5:7f:fd:fb:ea:
         02:ea:3d:d0:5f:87:ba:5e:69:da:68:80:9b:1b:8b:ee:ca:c1:
         a0:cc:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:05:52 2024 by rpki-client on console-ams.rpki-client.org