Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa
File:                     3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa (raw, json)
Hash identifier:          CDQ+r+HF1BAhCamNcEan6r+AmoiB+MxiEjW1YvxUwz8=
Subject key identifier:   C2:A0:B4:5E:11:CA:1E:89:A3:39:D8:13:3E:B4:06:D6:7C:6B:5D:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845CE0B650CB1EB81801AE76AE8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa
Signing time:             Wed 08 May 2024 13:05:33 +0000
ROA not before:           Wed 08 May 2024 13:05:33 +0000
ROA not after:            Tue 06 Aug 2024 13:05:33 +0000
asID:                     0
IP address blocks:        199.16.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:0b:65:0c:b1:eb:81:80:1a:e7:6a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 13:05:33 2024 GMT
            Not After : Aug  6 13:05:33 2024 GMT
        Subject: CN=f9fe8ba9-0be7-4521-b1f9-bfcd6e0c6bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:12:2c:ee:ee:ae:40:e9:7c:c9:84:b2:e5:
                    8b:bd:08:b4:f6:87:23:cc:ea:e3:9e:0d:17:36:eb:
                    77:88:68:ac:f3:75:b1:48:d4:5b:fc:bd:ad:2c:d5:
                    0c:1d:e0:ab:84:c2:a7:36:21:1d:1e:29:3f:ac:fe:
                    25:7b:98:07:4d:d6:7e:a9:7e:b0:ec:21:c1:e3:0f:
                    89:6e:22:01:b0:09:a2:26:51:1e:74:ea:53:5d:a5:
                    e0:7e:46:1d:8d:87:f1:ac:f9:95:ff:7c:0b:07:67:
                    45:b8:be:2a:92:97:3a:0e:2d:6e:3b:1c:ba:b8:be:
                    68:2c:a9:71:30:95:4d:6c:1d:d9:2d:e9:2c:7c:2c:
                    ac:f3:dc:7a:23:f6:d9:ac:4c:e6:78:0e:b2:21:2b:
                    9a:ef:a3:77:26:f9:f4:a7:10:9c:b0:e9:d8:f3:06:
                    7e:30:f1:28:7d:90:20:fe:e6:e0:e2:7c:e2:f9:b5:
                    31:d5:45:82:90:21:05:db:b7:a0:82:f0:77:01:6c:
                    e1:5c:6f:f8:98:09:9b:1e:ba:08:89:c3:9d:d4:7e:
                    5d:0b:7a:e1:29:40:c2:09:a3:26:fa:0a:73:a1:a2:
                    4e:5b:4e:40:8c:88:c6:d6:a4:c5:93:66:57:fd:fa:
                    b3:ed:e2:27:38:12:87:62:f1:87:aa:e5:94:89:c4:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:B4:5E:11:CA:1E:89:A3:39:D8:13:3E:B4:06:D6:7C:6B:5D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fff6d29-9074-3d04-ab3a-dc669e8a6da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:0d:29:eb:90:49:1a:d7:a4:72:b5:3a:31:cf:18:be:99:
         62:0c:64:65:fb:97:3c:8c:13:8b:c0:2d:4b:e8:ce:31:8e:93:
         68:41:cc:ec:3f:c5:5a:92:8f:03:ec:ac:8e:cd:d0:2c:17:df:
         b1:e3:d5:9e:4d:b8:4e:25:90:9b:24:54:35:f6:83:1b:78:36:
         b6:be:c3:b6:91:63:81:1e:d9:71:5b:45:5c:53:86:c1:9a:a9:
         99:2d:16:68:23:62:3e:cf:c9:8f:3a:40:81:5d:4a:c1:42:9a:
         b0:29:d7:fb:3e:84:bd:e2:59:6c:9a:8a:5a:38:f9:c4:f8:73:
         b9:d7:63:05:d2:fb:de:70:a6:96:29:11:75:67:00:10:00:35:
         9a:57:fc:53:6c:c6:2c:f7:cb:7c:3b:af:1a:eb:ab:4b:52:3a:
         ee:5b:d5:ea:35:0b:bb:a5:69:2a:8e:85:cd:8a:ce:b2:1e:52:
         8e:0c:de:da:73:a0:63:f1:2c:c5:eb:03:ff:37:4c:5d:63:d4:
         b0:1f:ab:f6:4f:76:52:55:3b:1b:0e:08:49:5f:5b:25:a6:03:
         5d:54:a8:74:90:36:b9:3b:81:cf:68:7f:ab:19:43:2b:cb:55:
         1c:66:cb:38:33:16:3b:92:6f:59:fa:e1:2d:fc:8e:04:07:e8:
         50:a2:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:06:58 2024 by rpki-client on console-ams.rpki-client.org