Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa
File:                     0cf7be41-62e0-3469-a068-cbd4f7928764.roa (raw, json)
Hash identifier:          kr5lnWqk0E/gk/W5W0vVXoZ5uprvWvAFQqp7w4zzNso=
Subject key identifier:   5B:E3:4D:D4:A2:40:89:45:31:C7:A4:6A:3F:46:F8:1B:18:71:26:B6
Certificate issuer:       /CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
Certificate serial:       010D0C9F432858453FA80ABED711E06B05544EE0
Authority key identifier: 56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     11666
IP address blocks:        216.168.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:0a:be:d7:11:e0:6b:05:54:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=aa852da2-a9d1-4151-ab2e-ae7ca434670c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:de:69:94:1b:0e:bb:5c:2b:83:6c:a8:2b:
                    47:78:b0:eb:99:c8:1c:3d:49:7f:39:dc:2a:1c:fc:
                    5a:ae:13:75:74:62:24:a3:4b:1a:27:09:bd:44:a4:
                    b0:cf:68:2e:b2:e6:08:83:a6:29:9b:70:cd:26:9a:
                    53:e5:6b:50:bc:00:df:b0:22:56:2c:86:44:70:bb:
                    64:fa:ad:16:1f:fc:ff:1a:0c:c2:c5:e5:49:a2:50:
                    f9:76:2a:31:e6:06:43:bd:a8:be:d8:fe:18:7f:40:
                    6b:e5:1a:1b:16:5c:9e:fb:90:f7:8a:87:92:56:55:
                    cd:b1:ce:d2:c5:e4:34:60:a3:75:5a:ef:d8:73:de:
                    77:16:08:82:6e:3a:59:45:5b:04:b8:3c:05:11:d6:
                    6f:c1:ff:74:63:77:2c:73:e3:bb:43:04:d2:65:18:
                    75:f0:01:d9:b6:21:23:1b:1e:61:93:1a:e8:ea:a8:
                    c4:95:51:8c:ce:eb:6a:c9:d9:27:f3:6e:ee:ed:61:
                    27:3f:21:1c:9f:d6:cf:cd:18:39:b3:e3:d0:da:4f:
                    19:80:c0:4c:99:83:b5:cd:36:d8:50:d1:20:dc:39:
                    c5:7a:5d:b5:18:03:28:a7:31:f0:2b:27:78:e9:a1:
                    a6:e4:9e:c8:df:64:f2:bd:39:16:d9:c9:85:27:4f:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E3:4D:D4:A2:40:89:45:31:C7:A4:6A:3F:46:F8:1B:18:71:26:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl

            X509v3 Authority Key Identifier:
                keyid:56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:e0:77:42:35:b2:33:66:83:b3:bc:9a:ce:05:7b:fe:df:
         82:42:00:4a:71:fe:37:5b:2d:c9:69:b4:08:d1:fe:73:5e:42:
         0d:25:79:df:ce:07:85:c9:9a:7c:c6:37:6e:4c:1a:60:7f:8f:
         b7:3a:d4:23:79:99:0c:6a:d1:86:6b:52:c5:29:0d:c5:d9:cf:
         26:5f:72:54:8e:cf:45:b8:3a:a7:6e:c6:b6:2d:e5:6b:e3:fb:
         d1:0d:4e:77:af:17:74:31:aa:35:a9:50:15:16:60:1a:9c:a9:
         b2:a0:f2:3a:7e:25:a4:e1:9b:9d:f5:c7:1c:85:0a:76:ab:d2:
         9b:6f:1a:31:73:ef:16:c4:1a:6c:7d:69:60:03:12:21:51:84:
         54:78:ec:99:2e:a6:e3:cd:39:bd:01:12:60:a5:c5:96:ce:01:
         a3:76:b1:b0:3b:6e:32:bb:26:e9:7c:90:a9:7b:ef:33:25:6e:
         30:17:34:ba:91:47:32:b1:b7:4a:44:2c:af:92:e5:3c:49:49:
         c0:ff:7b:2d:50:10:40:9c:6e:1a:33:dc:4c:db:1b:0c:be:b4:
         2b:a3:3c:d4:8b:6e:18:ae:ed:db:3f:cc:7f:c7:cf:98:1d:57:
         6e:79:99:72:8a:a0:68:9f:a0:34:7e:2c:53:42:95:ec:ca:7e:
         06:32:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:11:03 2024 by rpki-client on console-ams.rpki-client.org