Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/4e5e9259-3990-37d6-a833-50bb61a463de.roa
File:                     4e5e9259-3990-37d6-a833-50bb61a463de.roa (raw, json)
Hash identifier:          EOWnlW1KuUWKW2CBIZNBshCmjFQm5ZvCTrw6xnRECrY=
Subject key identifier:   03:95:74:E2:2C:F0:FC:45:3B:A1:BD:14:96:90:21:A9:E7:8D:39:FE
Certificate issuer:       /CN=53f93371-9395-4cf9-890d-3d0895304982
Certificate serial:       010D0C9F43285847336098F4A0B855AC14C53518
Authority key identifier: 3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/4e5e9259-3990-37d6-a833-50bb61a463de.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        142.202.46.0/30 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:98:f4:a0:b8:55:ac:14:c5:35:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f93371-9395-4cf9-890d-3d0895304982
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=6ef57ced-66a0-41a2-be32-05f44441af61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:a8:08:eb:1b:30:de:e1:b2:2e:6b:9a:1a:
                    3e:37:10:f0:20:c0:1e:61:05:ff:34:ef:e8:5c:df:
                    58:22:37:62:a5:b9:22:4f:07:66:c9:3e:d0:56:c2:
                    f7:a9:47:2f:dd:52:e0:f5:5f:82:69:c1:58:16:c8:
                    2e:43:ab:bc:b8:fb:9b:67:ab:1b:6d:1f:fc:8a:09:
                    89:c5:75:32:01:a5:47:7d:d0:da:12:38:4f:61:d9:
                    be:23:5e:29:d3:7f:b3:02:23:2c:c0:14:62:13:f7:
                    47:ac:90:92:78:1b:ba:32:97:c7:09:37:0d:ec:9e:
                    f4:9c:e8:20:de:a5:cd:0a:82:09:6b:d9:5c:49:09:
                    06:79:82:3d:d0:79:8c:e1:e1:8b:26:7e:58:5f:23:
                    1b:4e:9a:58:64:06:e1:1b:10:fd:e1:14:10:27:70:
                    e0:0e:33:18:47:8c:09:7a:8e:78:ca:13:de:98:08:
                    20:84:eb:f7:e8:be:5e:f3:ee:39:02:94:51:b6:34:
                    d6:e4:7f:ef:88:f2:cd:96:07:42:ee:3b:ff:7d:ee:
                    86:7a:85:7d:a9:87:03:f9:71:98:84:9d:54:bc:3c:
                    8e:bc:9a:c2:db:93:bb:d6:21:5a:17:5e:9c:72:99:
                    fa:ca:03:dd:c9:23:3d:7d:dc:56:19:6d:42:a6:6b:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:95:74:E2:2C:F0:FC:45:3B:A1:BD:14:96:90:21:A9:E7:8D:39:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/4e5e9259-3990-37d6-a833-50bb61a463de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl

            X509v3 Authority Key Identifier:
                keyid:3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.46.0/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:89:4a:a5:58:c7:78:95:9e:b8:25:b2:52:97:31:88:6e:
         0d:5a:b8:f8:80:b6:ba:cf:0c:56:ea:cc:cd:73:48:e1:69:38:
         ce:30:38:dd:28:7b:c7:a7:e0:13:ce:7f:3b:d8:4a:34:51:24:
         05:0b:72:f0:a4:fd:af:74:0e:70:d9:52:15:9f:73:ec:03:7a:
         ac:9c:52:e0:9a:dc:33:cc:d2:e8:5a:42:c0:3a:86:8b:6f:fe:
         cf:9c:b2:76:90:4e:55:e0:c7:f5:d8:ce:5b:ea:a6:97:15:62:
         3c:63:47:b7:d0:d6:f3:74:0e:4e:0f:a0:03:37:e3:51:c7:bf:
         13:04:f6:b0:1e:59:df:aa:87:32:48:f3:59:0b:63:12:38:dd:
         be:7a:b4:06:97:64:27:5a:09:2f:f5:39:39:4a:02:ce:6d:e8:
         78:e7:17:d0:51:aa:18:9a:19:33:95:b1:0a:98:36:ce:9d:f5:
         56:ab:17:0e:2c:d0:7f:97:b7:5c:1c:5a:fc:20:3e:f1:59:fb:
         6c:f0:bb:ee:9e:59:f0:46:26:39:0e:b7:fb:c3:41:29:d1:cf:
         1e:5a:23:95:5d:6a:0c:c3:9c:76:18:5e:7e:d8:4a:dd:80:3b:
         12:e2:d4:24:06:5f:51:e9:a8:16:d7:50:9c:36:2e:ef:89:2b:
         7f:e0:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:11 2024 by rpki-client on console-fra.rpki-client.org