Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa
File:                     b72371d5-0193-3c24-ba87-0c8deffa2219.roa (raw, json)
Hash identifier:          1KPue+cP+XsyPohb1dbiCUTW06TKHNIpWuAXeMte6Zw=
Subject key identifier:   ED:81:66:FC:B0:FD:5C:C9:91:24:F5:2C:92:83:BE:7D:F7:94:19:0F
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845A15E02E5B630BCBA2DFEDF30
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     13414
IP address blocks:        199.16.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:02:e5:b6:30:bc:ba:2d:fe:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=c8e4c970-bde3-4e76-aac1-29fb2f358c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:c1:84:5e:f0:9a:16:fa:49:97:a0:ca:c2:
                    ae:8f:5f:dd:6d:b3:89:45:6d:ce:99:5c:55:59:eb:
                    0a:71:8a:a3:f7:96:44:2c:d3:22:93:36:86:50:bd:
                    38:d0:ec:e0:b3:50:45:4c:68:46:1a:33:a4:a4:3c:
                    50:9e:b5:02:20:5b:a9:37:8f:ec:bb:c6:3b:0a:23:
                    af:dd:9f:1d:f8:f7:2c:8c:bc:e3:96:e8:f9:d9:4a:
                    15:91:17:d6:f9:47:ab:3c:f3:b4:a0:a1:01:b8:d0:
                    43:da:2f:4a:45:b8:b6:c4:94:0a:1c:ca:bf:51:8e:
                    78:55:6f:93:8c:db:7d:15:d1:0f:91:84:65:d8:4e:
                    97:78:23:7a:41:e5:41:40:fd:cf:31:ed:73:fb:15:
                    da:b6:53:ba:46:f8:3e:25:cf:2f:25:fe:07:40:1e:
                    66:b2:4a:0d:55:9e:f3:c7:32:5f:56:5a:fd:f4:12:
                    17:72:06:aa:72:12:9f:39:a5:35:da:ac:57:05:90:
                    85:01:08:91:7b:cb:e6:c6:4b:67:6f:25:85:fc:cd:
                    e0:8a:05:75:51:4d:c2:85:bd:2d:92:70:69:e9:6a:
                    8f:7f:21:79:8b:ee:1f:d3:92:59:3e:63:a7:ab:30:
                    c2:7a:bc:cd:2e:e7:19:2e:0b:f9:2b:fe:da:bb:c8:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:66:FC:B0:FD:5C:C9:91:24:F5:2C:92:83:BE:7D:F7:94:19:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:69:c5:73:4d:65:94:38:c6:13:8d:a6:b1:58:39:0c:df:
         09:29:35:2e:9c:27:c8:cb:79:c1:c8:2e:60:d4:6f:47:c3:88:
         80:da:26:15:96:34:0e:13:c3:a6:28:ef:e1:70:1e:53:6d:92:
         b2:24:10:2e:ea:25:c0:38:79:d7:ec:b3:f6:ce:ca:77:db:f4:
         52:d3:52:2b:d3:7f:5f:4f:fb:ab:45:1c:22:25:78:14:c6:d1:
         39:49:e6:5c:03:35:6c:2f:5a:8f:c1:3c:b4:fa:74:b8:76:dd:
         10:28:5d:11:63:47:64:7c:86:a8:c9:88:70:2a:43:d0:f6:db:
         70:95:8c:05:30:82:83:c2:97:a0:06:97:b3:1a:10:3e:cf:17:
         73:30:da:ec:87:97:4a:72:d9:28:60:4e:be:af:fd:c0:40:fe:
         20:44:7e:d5:4c:f4:31:f1:aa:7c:12:14:a3:0d:73:e8:6c:43:
         0c:1b:80:b3:54:89:c6:b7:f2:93:59:93:51:32:d5:f9:ff:8e:
         fa:9e:40:6d:1d:7e:58:54:da:df:86:6d:c9:37:18:11:23:ef:
         3a:75:64:c6:17:fc:6a:eb:51:bc:8d:b4:fc:81:54:59:7c:08:
         55:07:48:b7:c1:c0:55:c4:38:84:6b:0d:8c:d5:72:05:c1:fd:
         28:fb:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:09:42 2024 by rpki-client on console-ams.rpki-client.org