Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
File:                     d384f6c1-81ba-3117-b845-8648caee45fe.roa (raw, json)
Hash identifier:          EOmJ5ypLBmFzfXZCbLwr/JoWuMHSpcj4YphWfOco0Ro=
Subject key identifier:   A8:5A:73:D0:FD:3F:D4:FE:E8:7B:CF:6F:2C:6D:FE:BB:A7:1D:38:22
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F43285845E45E80611D9F4F4D0CF0E040
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     396982
IP address blocks:        142.147.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:80:61:1d:9f:4f:4d:0c:f0:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=1af709f2-5686-4dce-8b50-cffe5b8c4efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:04:ac:d5:2f:e3:25:90:0e:93:1b:ec:c7:0c:
                    12:8b:ba:a9:40:6d:a9:ec:72:ef:d8:f4:ab:24:e5:
                    70:56:ad:a9:31:47:96:27:0e:7f:ae:35:60:cd:c8:
                    1b:39:ed:53:8d:d8:a2:43:68:1f:91:9b:0e:57:40:
                    40:47:03:19:cc:57:0d:45:dd:28:1d:b1:3b:a8:62:
                    b1:ef:43:9c:c6:e3:0d:c8:d0:7a:ed:cb:2a:76:14:
                    86:0d:5f:2d:83:38:94:6b:88:bb:62:04:e3:6e:76:
                    c5:c0:04:96:fb:61:52:aa:39:cd:4b:5c:18:95:53:
                    7b:ca:fd:76:16:30:bd:65:7a:1d:a7:14:13:40:d1:
                    64:af:6a:67:40:e5:e9:0f:40:41:77:02:09:c6:60:
                    30:79:13:46:ff:ed:34:a8:1a:27:93:5c:fb:06:dc:
                    4a:db:b5:f7:0a:46:39:77:77:25:0d:bf:9c:df:1b:
                    bc:15:e4:bc:f1:c4:d5:f6:0d:de:cc:cf:81:cd:1b:
                    13:7e:91:c6:c5:4e:8e:e0:68:b8:ac:d9:e2:e5:32:
                    e2:f8:4d:cb:07:9b:ed:8a:80:44:7f:9c:a6:d4:5a:
                    d8:e7:3d:a5:82:0c:3e:9f:64:41:7c:06:0d:cc:00:
                    66:2d:63:00:ef:0a:d4:34:d2:50:9a:37:94:7a:c7:
                    4f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5A:73:D0:FD:3F:D4:FE:E8:7B:CF:6F:2C:6D:FE:BB:A7:1D:38:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:71:f2:2b:45:99:cd:a7:c7:9c:68:4a:7f:cd:38:73:af:
         81:67:36:9f:3d:5b:da:49:8d:ea:58:1c:f1:51:92:18:29:2e:
         ef:bb:e9:d4:66:5b:5a:7f:62:57:b6:20:8f:52:f1:32:ee:27:
         34:12:46:0f:b4:4f:12:e6:d6:5d:e8:50:42:96:f4:12:0d:49:
         e2:a9:d2:36:40:d6:66:de:d0:2a:06:25:a4:0e:ed:b4:ee:92:
         bd:e8:7b:6c:86:e3:65:23:6f:af:32:c4:4d:30:3f:13:8c:ac:
         52:b0:38:5f:72:52:b8:8c:51:a8:eb:88:2f:b3:44:f1:23:9e:
         4b:96:73:f6:4d:3d:a4:ec:3e:b4:96:14:aa:5a:80:ec:5b:86:
         9c:84:fa:96:79:8d:8f:50:bb:82:ed:ce:ac:9d:07:a0:83:d2:
         8d:db:15:ff:3f:a4:43:e5:36:82:b3:48:bc:d9:0a:60:0d:6f:
         03:9f:e8:6c:8b:06:31:71:6e:90:75:3a:05:93:03:bb:92:45:
         8c:8f:7f:d0:8c:81:d7:27:02:9d:cf:93:ef:a7:a1:a0:4f:8d:
         82:a9:a4:77:43:b2:88:26:58:54:36:61:ec:b5:41:d0:01:5f:
         ed:bd:8e:33:a3:c4:4c:cb:28:b9:88:c9:d2:32:7c:ac:42:51:
         cf:4b:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:48 2024 by rpki-client on console-ams.rpki-client.org