Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
File:                     d384f6c1-81ba-3117-b845-8648caee45fe.roa (raw, json)
Hash identifier:          oCocGuk9NBasMiuMw8Rl5LNgpeGCpOuaYy9ZnAudQx8=
Subject key identifier:   D0:9A:DC:D4:EE:6A:EF:2F:98:0B:9A:E4:40:39:73:BB:11:67:D8:3B
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F4328584882808FCCD12EEB08EADBBB00
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        142.147.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:8f:cc:d1:2e:eb:08:ea:db:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=a9ef7fcd-c5ce-4043-9d95-e44a434a02d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:72:6c:d4:26:e8:13:a4:a1:ea:6a:e2:c6:
                    c3:18:7e:53:df:4d:86:f4:a1:b7:36:8e:70:e5:11:
                    30:f3:79:75:50:ea:74:18:ae:be:eb:90:a4:62:4c:
                    fc:8a:3a:fe:6d:fa:04:42:7c:cd:a2:c5:29:ce:2b:
                    fb:72:48:70:11:99:e3:82:ed:fc:bd:ba:a5:99:f0:
                    14:1c:69:f1:8a:e8:4c:2c:66:08:c3:52:10:33:a0:
                    97:cb:89:87:dd:6e:33:83:4a:74:a2:f9:80:8e:77:
                    5a:94:86:db:aa:c8:5d:bb:30:9a:3c:4a:f2:a7:cc:
                    15:62:cf:eb:7b:a4:46:2a:c1:e7:84:89:4c:fb:f5:
                    69:1a:d5:a4:79:a7:c6:a9:c9:15:6c:65:03:0e:9e:
                    b0:61:f4:53:db:d2:e9:77:0e:9a:7f:24:cb:05:12:
                    5c:09:7f:64:db:34:b5:01:0c:d6:79:a6:bb:29:83:
                    45:5f:36:80:dc:22:3f:d0:4b:fc:7c:78:3d:13:db:
                    d2:ff:38:41:2d:27:d9:8a:02:00:e0:0c:02:a2:72:
                    5a:32:75:90:17:20:53:dc:be:91:97:82:5b:eb:ec:
                    33:74:3d:2c:a0:a9:87:e8:02:2f:60:91:ec:3b:bf:
                    b8:2c:76:f7:bd:e2:8a:de:ae:bd:f3:c9:8d:3d:be:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:DC:D4:EE:6A:EF:2F:98:0B:9A:E4:40:39:73:BB:11:67:D8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:99:78:3d:bb:3c:02:02:4a:24:fa:7b:11:d6:02:1e:6f:3c:
         5d:c9:95:7c:39:5c:46:aa:e3:ea:43:e3:1f:e4:67:27:3e:eb:
         5c:b5:1d:54:c6:1f:81:b7:89:62:29:07:5b:06:e9:69:b0:61:
         8f:30:3a:32:83:2f:b3:ac:7f:58:a3:06:38:32:e6:1a:55:8e:
         52:f6:18:3e:c8:ce:ef:24:3e:fc:1e:ce:78:0d:89:73:e9:86:
         2a:9b:16:22:02:73:11:4e:d0:5d:31:e5:1a:a2:5c:5a:3e:a9:
         09:4b:63:bc:88:25:b7:b4:a8:6a:5b:1a:e2:75:21:9e:f9:3c:
         49:8b:99:05:70:5d:04:45:9f:38:a2:c0:53:ff:b6:a7:aa:2e:
         fd:3e:bd:72:44:6f:f8:3b:81:07:6c:d3:a0:10:8b:49:6a:b2:
         ff:c8:f1:d2:84:79:b8:4e:66:1b:6c:09:c0:5a:ed:bd:51:df:
         5a:f1:05:50:98:75:45:c6:4b:15:95:98:4c:e7:20:08:be:ac:
         9f:6f:c6:73:01:e3:10:5a:bf:72:12:22:0b:32:c1:a6:d8:73:
         65:54:cd:e6:c4:ae:9b:6f:48:b6:be:e3:43:05:dd:a4:1a:3f:
         8e:f2:50:8c:af:6a:66:4b:1f:31:3d:40:85:41:2c:60:98:cb:
         ac:d3:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:55 2025 by rpki-client