Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa
File:                     d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa (raw, json)
Hash identifier:          ROVx2fxQJfVrueA5xYmNMtX9vK9idQkIhIblOYvwsro=
Subject key identifier:   D4:83:9B:B0:71:30:8C:EE:39:54:8E:A9:FB:90:B2:41:4D:EE:06:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845CE0C6E501CA575A5E56C1C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa
Signing time:             Wed 08 May 2024 13:07:38 +0000
ROA not before:           Wed 08 May 2024 13:07:38 +0000
ROA not after:            Tue 06 Aug 2024 13:07:38 +0000
asID:                     0
IP address blocks:        199.16.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:0c:6e:50:1c:a5:75:a5:e5:6c:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 13:07:38 2024 GMT
            Not After : Aug  6 13:07:38 2024 GMT
        Subject: CN=7c4e4794-624d-452e-9fc5-16aa590710bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:99:5a:4f:59:14:14:db:79:db:fd:ee:ed:
                    dd:eb:5d:c9:3e:01:bf:1b:90:88:6d:95:2e:e4:ea:
                    d3:59:b3:a5:b5:20:28:1f:16:e6:01:f4:f6:52:bf:
                    7f:37:41:14:5e:0a:62:f0:43:3f:c7:fa:00:bf:6a:
                    14:bd:84:b4:ad:85:9c:5f:cb:bb:a4:50:40:b8:a9:
                    6e:1c:b3:5f:15:6e:42:6b:62:20:0f:d3:38:7b:68:
                    83:20:1b:5c:ff:9a:65:0c:d0:ca:ff:5d:5f:54:36:
                    a2:96:b8:5f:aa:52:4d:54:9f:a4:a0:39:1a:77:ef:
                    67:79:37:b4:e4:42:b1:ee:7a:53:55:70:3f:98:7f:
                    b9:a4:8d:f9:f2:56:c6:4f:52:72:f9:da:3a:88:99:
                    e2:d8:59:cd:ba:82:11:ef:d6:ca:d4:e9:92:75:e3:
                    aa:6c:ca:ff:b0:58:8c:83:ba:c2:2a:63:b5:4b:49:
                    f4:8e:81:b9:62:2f:1a:a3:26:34:73:bf:82:0b:97:
                    4f:45:bd:5b:78:8f:d1:94:54:d2:eb:01:03:a6:27:
                    2c:cb:30:0d:f0:c5:7d:ca:5c:18:81:79:80:cc:91:
                    2b:a1:96:3e:66:f8:e9:a9:a6:7c:f9:78:df:4d:e9:
                    e2:25:94:de:31:2f:1a:19:80:fa:92:b6:ad:f1:aa:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:9B:B0:71:30:8C:EE:39:54:8E:A9:FB:90:B2:41:4D:EE:06:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:54:e1:b8:93:ba:1f:0e:fb:9e:92:3f:b5:d8:e7:1b:07:dd:
         68:4c:8d:dc:ea:a5:e4:bc:06:fe:8e:b8:88:c4:94:74:7b:3b:
         75:c4:00:ea:27:05:89:6d:93:12:36:37:b5:da:53:7e:ed:4f:
         58:11:a9:12:cb:de:92:d0:9b:e2:b1:30:38:08:49:83:ca:04:
         ad:a8:ee:7e:68:a6:43:54:78:46:2f:ac:cc:c0:4b:bb:48:10:
         63:8f:73:9d:c6:48:b5:ef:2e:ed:d6:60:a2:ab:27:00:d1:76:
         18:9f:25:d2:1c:f1:c9:10:d8:50:42:63:57:04:c4:bf:0c:2f:
         a9:c4:86:65:19:6a:be:e7:f6:1e:f8:a6:81:00:25:bd:7a:12:
         6c:c0:ad:66:11:db:7d:65:9a:39:3a:18:90:b6:91:51:33:fe:
         c1:ea:2e:6a:c5:f9:a8:da:5f:ae:20:cb:76:2c:fb:e2:c0:ba:
         17:04:de:39:76:89:2a:14:46:9d:6b:ee:e0:71:4f:57:83:de:
         c4:d5:e6:bd:5b:01:4e:20:80:13:ac:b5:ba:b2:b0:3a:16:22:
         dc:5c:76:97:17:fa:8d:0d:08:9e:21:93:4b:4b:7c:ce:ba:d6:
         0d:9a:b2:70:e9:58:44:91:74:9e:0e:98:93:44:32:5a:02:de:
         30:48:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:58:35 2024 by rpki-client on console-fra.rpki-client.org