Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa
File:                     3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa (raw, json)
Hash identifier:          p+uXtKe9g2tXacVTFRl6Vu1psoL62zQJsEHLzof+Rps=
Subject key identifier:   4C:35:F2:31:F4:D6:B4:A8:C0:47:9D:9D:87:BC:CB:C0:AA:07:52:D8
Certificate issuer:       /CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Certificate serial:       010D0C9F43285845254044025F05020F41604FE0
Authority key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     8987
IP address blocks:        165.159.140.0/22 maxlen: 22
                          165.159.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:44:02:5f:05:02:0f:41:60:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=baf55a42-1458-4ad6-b7fc-8d721a4f3c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:80:57:8b:17:93:56:b7:92:06:80:3b:05:
                    95:e5:05:73:5f:56:d3:49:6f:9a:3a:3c:d7:11:76:
                    a2:63:33:2b:75:b3:9f:14:a0:63:37:1d:3d:be:ce:
                    f2:fe:7e:1b:e8:9b:ad:94:db:f9:d1:a0:22:cf:80:
                    60:64:27:71:70:ac:60:71:17:02:ea:9d:69:0e:55:
                    11:0f:0b:41:43:a0:17:b3:ba:e0:0f:fe:c1:93:c1:
                    cb:b6:bf:5e:72:b3:e2:c7:9b:2c:b7:31:5c:4f:f9:
                    83:e4:6a:0d:a4:65:8d:d0:63:81:a5:17:f7:4d:f2:
                    2b:eb:74:f2:d1:0f:8e:47:b3:ec:c0:f1:4e:22:19:
                    e7:4f:89:3a:08:6a:7a:99:5c:de:70:bc:ce:00:fb:
                    d1:10:37:f0:69:ac:79:f9:e9:12:1c:9b:ea:12:bb:
                    e2:5d:dd:a3:ab:2e:31:15:08:56:f1:58:87:0c:8d:
                    42:64:d9:c0:f9:f0:63:7d:8f:32:c1:d0:e4:fc:ab:
                    b1:1d:01:b9:34:34:70:0b:f6:1e:ba:cb:89:b1:b4:
                    e7:ed:2f:f3:1d:af:44:1d:7f:61:95:db:56:17:36:
                    7d:59:1c:50:0f:b2:0c:0c:9f:64:bb:5c:75:67:c0:
                    c1:9d:d3:ae:8f:53:2f:e2:56:5b:6b:32:57:a0:9b:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:35:F2:31:F4:D6:B4:A8:C0:47:9D:9D:87:BC:CB:C0:AA:07:52:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/3a9c4f6a-ef1d-3033-9843-e45765b56f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl

            X509v3 Authority Key Identifier:
                keyid:CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.159.140.0-165.159.147.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:bb:48:5f:51:d3:5d:6d:80:9b:b6:d6:f7:e5:a8:dc:71:
         c1:3b:fc:d0:a5:99:0d:1b:10:be:8f:50:f5:c8:9f:de:7d:92:
         24:03:1b:09:42:ed:3b:6c:b0:7d:b2:d7:21:b0:c4:7e:61:1e:
         30:60:8f:cc:06:20:20:56:99:4f:22:84:15:d6:22:88:fa:25:
         00:69:b9:77:88:1a:4d:0c:8c:7e:ee:f0:5a:62:32:ec:f9:64:
         cf:d5:7b:e4:c5:04:e3:ae:a7:e1:d0:15:ca:a5:b1:80:be:08:
         35:bc:d0:0e:0d:6c:45:19:79:d8:c4:a4:ba:d2:f4:7b:3d:eb:
         77:6a:4c:f8:d1:27:7a:2b:cf:3f:ae:4e:e1:0e:c4:06:2c:43:
         b0:0c:e2:eb:a3:33:c3:8f:52:9f:63:07:e8:ab:ce:2a:64:c7:
         65:81:9d:81:f5:7e:96:8e:8d:6a:b4:36:e7:c1:3d:b1:7e:ea:
         c2:a6:88:ec:ba:d3:c8:4a:94:78:c2:0c:85:12:ff:b2:ff:0f:
         94:6f:08:c9:01:60:5c:d5:f3:f9:d8:79:25:e0:b8:de:f0:09:
         9a:46:6e:03:c6:bc:4f:fa:93:3c:69:f7:96:d6:de:d6:8f:49:
         c5:4c:78:38:40:d1:34:20:09:07:dc:97:cc:5a:ab:a5:5b:0a:
         85:bf:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:24:13 2024 by rpki-client on console-ams.rpki-client.org