Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa
File:                     77ff4321-a6aa-3770-a76f-656f4a193421.roa (raw, json)
Hash identifier:          XgYdN/Ck6cecqkrbIFMG6sy1me3tjeGx9Q8aqIBCppo=
Subject key identifier:   57:43:D0:C1:D5:EA:DB:D0:1C:76:39:2E:3E:6C:EB:3A:2D:5F:6A:85
Certificate issuer:       /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial:       010D0C9F43285845D98036A38EE43EEBAC965D80
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa
Signing time:             Sun 12 May 2024 15:34:49 +0000
ROA not before:           Sun 12 May 2024 15:34:49 +0000
ROA not after:            Sat 10 Aug 2024 15:34:49 +0000
asID:                     6939
IP address blocks:        173.249.160.0/22 maxlen: 24
                          2602:fb15::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:80:36:a3:8e:e4:3e:eb:ac:96:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Validity
            Not Before: May 12 15:34:49 2024 GMT
            Not After : Aug 10 15:34:49 2024 GMT
        Subject: CN=23ba1c95-4c23-4893-a971-3496d6e70171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:89:28:a9:96:4e:32:61:40:be:d2:96:31:
                    eb:05:68:ca:4d:a8:0b:e0:69:df:8d:3d:fb:aa:f6:
                    50:aa:0c:ec:a1:a4:b3:4b:ea:4b:59:c5:f6:57:a7:
                    fe:85:5f:de:6c:c4:31:7a:39:98:91:57:b2:81:f4:
                    f0:97:f0:20:49:d1:e2:e6:f1:cb:1f:28:2e:09:f3:
                    46:7d:1b:b4:f1:fb:11:5e:bc:60:9f:bd:9e:5f:98:
                    9a:a5:f8:75:31:c1:5a:60:b6:9d:2c:bf:82:3e:af:
                    ea:e0:da:4f:c0:cb:aa:02:81:01:f1:ee:ed:0d:b7:
                    8b:cc:3d:c2:41:39:24:cf:02:bb:d4:ca:84:a4:00:
                    4c:bd:12:4e:37:3b:16:5c:c9:9f:a5:a0:0a:7d:e2:
                    92:d7:f5:be:c3:db:80:04:14:dc:4d:e3:17:c2:5c:
                    91:10:66:a3:28:08:bf:06:50:06:f8:b2:7a:88:3f:
                    9e:e0:b6:1d:83:55:8e:6b:5f:ab:87:bb:aa:95:ef:
                    c4:66:3e:24:07:34:90:c9:42:6f:11:96:ac:61:83:
                    05:cb:95:1b:b2:33:52:ba:8e:6c:4d:f2:25:f3:56:
                    a0:09:a4:18:76:07:8f:c6:0b:15:49:86:4e:1b:c8:
                    b6:57:de:41:bf:af:fc:8c:09:02:cf:10:85:47:a9:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:D0:C1:D5:EA:DB:D0:1C:76:39:2E:3E:6C:EB:3A:2D:5F:6A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl

            X509v3 Authority Key Identifier:
                keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:73:ae:07:13:f6:c5:ec:37:8b:29:42:2d:7d:eb:f8:2b:
         16:ba:4d:49:f2:08:f1:84:ba:a9:3b:56:97:7a:3f:fe:7d:39:
         66:1a:0b:a7:a7:ea:f1:b0:7b:86:6d:7e:f6:00:1b:71:6b:05:
         7b:81:b2:d0:e4:20:e1:ad:17:80:8e:a1:79:df:58:e0:e9:14:
         0f:9d:e1:48:14:f5:e4:14:09:b5:f8:d4:29:25:b6:78:10:53:
         83:81:20:6a:0e:54:63:22:58:d3:d1:0a:3d:6e:fa:4e:46:cd:
         30:ff:94:af:42:92:14:9c:eb:79:81:8e:21:1b:23:64:17:bc:
         08:f2:d9:d1:4a:a4:ff:44:a6:87:fb:84:f2:eb:eb:33:d7:22:
         30:2b:9f:2d:15:10:c7:82:09:e3:fc:e7:b8:cc:11:ef:83:5c:
         ba:8e:0d:fd:3d:51:b3:4b:87:21:02:ea:c9:b7:a4:85:2a:1a:
         f3:e7:ec:de:16:17:50:61:58:78:37:07:81:4c:89:e7:6c:9f:
         f0:f0:1a:8b:e3:9a:d1:e4:a3:54:33:80:33:fb:a7:62:a9:fa:
         a5:9b:26:7f:07:ae:54:20:0b:e6:9d:49:02:67:63:9e:8b:58:
         ed:a5:68:e3:dd:0b:56:96:dc:0d:d6:1a:78:c5:19:3c:1f:f8:
         de:16:3b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:43 2024 by rpki-client on console-ams.rpki-client.org