Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa
File:                     9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa (raw, json)
Hash identifier:          aDU/9t3riCZZqMkQkOeftmi5b+Vi3dWg3+V+3tZeCng=
Subject key identifier:   62:AE:1A:1C:97:48:8C:C3:40:02:E2:38:EA:23:A4:1F:39:96:C7:51
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F432858460313FB188B785BA3C69EDE00
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     393981
IP address blocks:        142.207.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:13:fb:18:8b:78:5b:a3:c6:9e:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=97baa72b-4172-4fb8-9524-0cc11cc7ec43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:7f:91:35:67:91:2f:4f:d1:8d:a9:56:88:
                    74:df:52:50:c2:60:f2:cc:f3:a8:1d:9e:44:63:41:
                    b3:5c:6b:ed:73:98:33:51:29:31:33:e5:96:80:cd:
                    b1:1c:7f:f3:74:ab:c6:08:11:9d:26:60:ba:79:e9:
                    26:1f:cc:d5:13:e7:f8:9b:8c:c8:08:d8:b1:19:0f:
                    0d:1f:4f:5a:e5:55:89:2a:1b:01:27:87:3f:f7:bb:
                    34:31:ce:10:c5:7b:08:0d:95:20:86:7d:4d:e7:14:
                    92:b7:83:88:62:3e:22:66:26:c6:2b:07:10:d1:43:
                    2f:42:ea:ac:33:26:49:50:71:84:1e:1a:6c:36:fe:
                    80:23:79:2e:39:48:65:34:da:a1:5e:7a:62:94:e3:
                    54:08:cb:49:3a:d1:3b:c0:da:e6:23:20:13:41:95:
                    be:88:04:0c:af:79:ef:b1:3c:50:ba:d3:1c:1c:fd:
                    b7:d4:b9:5e:65:50:33:2f:6c:2d:5a:7a:4e:c9:d0:
                    23:06:95:56:7f:ab:c9:f7:32:8d:fc:a7:fe:62:c3:
                    5f:00:a0:d7:66:b6:a0:f9:07:20:4d:86:00:55:34:
                    57:ce:17:a8:28:6e:8c:6a:dc:91:67:2c:ba:d8:08:
                    22:50:6c:72:3d:aa:fc:b5:47:d1:4c:63:06:15:0a:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:1A:1C:97:48:8C:C3:40:02:E2:38:EA:23:A4:1F:39:96:C7:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.207.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:49:76:c3:57:35:e7:9c:0e:8d:4e:d7:a3:72:dc:cd:05:
         7f:4e:98:58:8e:5d:2c:41:03:9f:3e:d0:35:cf:9b:c5:b3:3a:
         91:4d:54:cf:7f:99:b5:65:d2:22:2e:6e:9f:5c:95:86:24:90:
         cb:3e:e8:7a:c6:53:b0:6e:e2:d2:7e:1b:89:2b:62:30:1b:bb:
         22:0b:fd:06:c6:96:cd:b8:00:a0:5e:05:39:31:f9:da:62:78:
         23:2e:b1:ab:7d:1c:13:f6:9e:06:f1:3d:53:19:dd:b5:dd:5d:
         1b:e1:5a:b3:57:a9:ba:c3:ef:c2:34:c7:85:53:7c:ef:8a:90:
         68:3f:2c:c1:b7:f1:f8:ed:1e:9f:2e:14:24:4f:5e:f8:a0:04:
         04:c5:71:07:94:4a:bc:1e:a1:2f:f5:83:c4:55:01:33:af:65:
         ca:3d:b6:d5:74:d0:5d:96:d4:ad:46:c4:04:38:b8:a8:19:1e:
         dd:d0:79:55:ac:55:7c:1d:78:3c:98:46:90:30:03:39:b0:4b:
         58:3e:06:c7:3d:52:57:7d:7b:d9:ff:3e:99:19:ef:d4:0b:d9:
         7f:02:fc:7a:6d:d2:96:09:60:b5:0f:c7:d8:47:23:e2:22:dd:
         34:3f:ac:77:a6:c6:44:f7:3f:06:a0:22:1e:98:87:22:d5:24:
         de:a5:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 00:00:11 2024 by rpki-client on console-ams.rpki-client.org