Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f113059a-060f-34df-bf46-c5b3e720653a.roa
File:                     f113059a-060f-34df-bf46-c5b3e720653a.roa (raw, json)
Hash identifier:          690dFLQbe4RZuc3rbMv2zL7zyD6UayCsC4HuUlN2xM4=
Subject key identifier:   3A:CF:C9:A5:4B:21:15:09:98:0B:3C:D8:75:72:43:1F:FF:63:48:F3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453B77FC02DA1ED80098E83880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f113059a-060f-34df-bf46-c5b3e720653a.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        99.199.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:fc:02:da:1e:d8:00:98:e8:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=d3621b36-ecfb-4ece-ad6f-43d6883e8496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:5a:36:5a:75:e0:d4:96:0d:bd:a9:d2:1a:
                    24:87:0f:ad:07:82:bc:a7:f6:3b:39:7e:f9:c8:f3:
                    91:a5:e1:7d:af:dc:0c:bb:c8:48:3a:17:c3:01:5d:
                    9c:5d:42:84:32:d3:18:7a:fd:0d:60:d0:a0:8f:1b:
                    c3:2d:9c:22:59:c1:42:40:78:59:37:e6:46:27:5a:
                    61:94:d2:bf:e4:28:34:01:e5:3c:5a:62:19:ab:0a:
                    72:fc:83:11:cd:1a:ca:4f:ae:0e:a6:43:8e:5f:c1:
                    fe:5f:3b:f5:9a:0e:b0:9d:d8:e5:23:53:6c:d6:10:
                    3d:12:b2:09:84:c7:65:b0:06:b0:1a:23:dc:77:a8:
                    37:03:04:a7:42:06:14:bb:8c:39:b2:b9:85:ad:31:
                    86:e2:c9:25:6e:90:58:d4:ca:df:1e:16:76:05:33:
                    fd:1c:4c:f0:20:87:a3:59:75:cb:58:94:1c:f2:b2:
                    e2:07:8a:5e:e7:05:c0:ba:7e:03:01:ef:a4:32:71:
                    74:db:4f:7c:65:bc:5a:39:fb:a3:ec:0b:d7:57:be:
                    59:b0:62:0b:8b:ed:ca:f6:c7:a5:ba:f9:9b:31:27:
                    e9:0c:51:85:60:f6:83:81:ad:b2:16:b5:49:55:0f:
                    c5:0b:32:a3:03:05:dd:8b:c1:15:c8:22:d4:be:f5:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CF:C9:A5:4B:21:15:09:98:0B:3C:D8:75:72:43:1F:FF:63:48:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f113059a-060f-34df-bf46-c5b3e720653a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.199.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b2:c6:ca:45:d5:e8:93:70:66:93:ec:b3:f3:32:53:44:d3:
         fb:ef:fc:5c:7b:d6:df:97:b1:9f:cf:e5:2e:1d:e7:ae:bc:71:
         13:ec:55:59:c5:6d:73:ed:5f:bb:a2:68:19:3a:56:b2:63:e5:
         db:af:06:d2:dc:11:cc:1b:78:93:f0:ae:67:47:8b:fe:3d:da:
         aa:16:4a:74:66:c6:74:ab:4c:6e:7c:a1:c5:17:27:56:3e:c6:
         77:26:90:cf:a2:36:86:c9:84:ac:05:63:db:e6:c0:fa:73:5d:
         01:2d:5d:90:7d:2a:54:1a:65:48:c8:59:90:9d:e7:b0:a6:ca:
         69:8c:9e:c5:7c:53:88:2a:5a:0e:f3:ab:5d:a7:90:40:41:2a:
         e9:58:62:43:47:21:f0:da:3b:95:8f:94:84:af:a2:b3:80:ba:
         3a:19:59:81:4d:e5:63:96:7d:1f:f7:04:16:4f:92:31:8f:87:
         9e:0f:41:e8:ab:33:82:f2:19:b7:76:6f:b4:5d:b3:b0:a0:38:
         a7:5b:a1:34:ec:ac:2d:a9:0f:9d:90:e7:34:35:bc:4e:b8:b7:
         a0:63:6d:a3:87:67:72:78:ad:40:65:a5:fe:10:23:a1:2b:83:
         2d:86:1b:9c:a4:2c:a0:cf:03:4b:d3:4d:ab:c9:c9:d1:94:0b:
         3d:87:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:04 2024 by rpki-client on console-fra.rpki-client.org