Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/386116d4-0db8-32e0-8458-1f93640e0413.roa
File:                     386116d4-0db8-32e0-8458-1f93640e0413.roa (raw, json)
Hash identifier:          hW9OsX5+Ksc+wgqEls5Oh9KKxZhaIog2dsdgxTleKqY=
Subject key identifier:   E9:E5:71:0F:A1:22:A5:B0:B7:28:45:3A:02:A2:A9:39:09:90:49:3B
Certificate issuer:       /CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
Certificate serial:       010D0C9F43285845C5A8E5AA8ED808C1C876C080
Authority key identifier: BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/386116d4-0db8-32e0-8458-1f93640e0413.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     56647
IP address blocks:        142.54.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e5:aa:8e:d8:08:c1:c8:76:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=ab6ca93e-03ee-4b48-a2b4-4c0a3001e9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:94:06:4c:45:9f:a9:cd:51:13:9e:97:6b:9c:
                    bb:9c:43:21:2a:be:db:ff:6c:c3:f0:eb:29:04:d5:
                    d0:28:df:c5:0a:10:71:44:58:8a:6e:05:d2:75:79:
                    02:b3:0d:ad:a8:72:9f:bb:ce:e6:74:8a:63:55:29:
                    02:74:15:b7:db:bb:c8:0a:4d:02:8a:6d:8c:0b:d4:
                    64:51:35:07:cc:04:8f:46:bc:53:6a:41:17:31:27:
                    d3:a6:be:63:ab:9b:27:cd:99:d1:13:30:be:1e:4a:
                    b5:97:7c:b7:d5:70:1c:13:65:1e:89:1a:12:26:80:
                    06:d9:1a:f8:c4:f9:dc:7a:65:c3:9f:18:ee:73:51:
                    25:83:05:57:e4:58:ad:61:0a:b3:40:d5:a9:2a:83:
                    f2:cf:50:89:14:3a:38:d9:22:b0:63:1e:de:ab:30:
                    dd:66:d3:57:e9:be:d9:87:b4:6c:d0:c4:90:f6:11:
                    f3:55:e0:ad:5c:6e:40:f8:6b:d6:ac:1b:3f:28:61:
                    9a:26:8b:ae:97:58:24:45:84:1a:37:9c:00:a0:3d:
                    6c:df:48:5f:ec:ec:ef:5d:10:dd:8a:b6:c1:ec:d0:
                    de:70:9b:9d:0e:69:54:33:59:f2:c0:98:dd:b6:39:
                    ff:d6:be:60:71:11:0a:f8:a2:cc:8e:dc:1c:29:3f:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E5:71:0F:A1:22:A5:B0:B7:28:45:3A:02:A2:A9:39:09:90:49:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/386116d4-0db8-32e0-8458-1f93640e0413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl

            X509v3 Authority Key Identifier:
                keyid:BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:d8:76:e8:82:ca:b7:be:78:0c:c3:83:a8:08:66:88:2b:
         69:4b:77:bd:c5:35:83:d0:74:bd:db:5c:e5:a6:fe:e7:90:8a:
         4a:de:5f:8a:2a:61:a0:ce:79:ec:9e:4f:2c:f4:c4:69:b8:c1:
         18:81:59:3f:7f:ee:b2:5c:6d:45:6a:3b:b7:62:30:2b:f0:7a:
         5b:74:8a:b9:d1:e6:cc:75:96:d6:16:02:3d:95:ca:3d:95:13:
         65:09:e2:48:2e:cb:ac:e6:f8:32:e1:ef:27:55:16:8d:0c:e0:
         f1:1e:5b:7c:24:4e:37:46:63:71:00:01:8f:f8:5d:09:dd:7f:
         5a:d2:e3:c1:23:13:c7:33:07:54:b7:91:60:d2:c3:fc:df:39:
         ab:ba:79:63:42:ab:6a:66:94:10:88:46:42:3c:1c:e2:cf:ad:
         f2:71:22:8a:72:3d:05:c9:e9:b0:49:44:85:16:ca:a8:b2:e3:
         f7:c6:81:06:af:e9:85:00:23:98:c2:98:ad:69:a6:3b:21:b6:
         ab:5f:68:49:28:87:b6:82:bb:06:66:97:da:81:a9:7b:b7:4a:
         aa:fb:60:d4:19:8c:18:65:6e:33:d4:66:5b:4d:b9:d8:37:da:
         be:c0:96:c0:ab:8c:b0:67:b7:65:9a:41:94:2d:b5:f8:e1:15:
         24:6f:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 05:37:30 2024 by rpki-client on console-fra.rpki-client.org