Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
File:                     a789ba80-8aff-3b9c-92e1-e386d72187ea.roa (raw, json)
Hash identifier:          AEx1WH+x5LX7J7v8uu8fmCExWUmXgtsCYzMspIa+Pps=
Subject key identifier:   C5:A9:89:31:58:EE:5C:0E:5F:67:46:AE:89:DB:FB:96:08:E0:AD:7A
Certificate issuer:       /CN=0ace9928-8310-4c75-a54b-a4085ec0045a
Certificate serial:       010D0C9F432858464FD9BB5452F1842310D84F80
Authority key identifier: EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
Signing time:             Mon 24 Jun 2024 01:00:24 +0000
ROA not before:           Mon 24 Jun 2024 01:00:24 +0000
ROA not after:            Sun 22 Sep 2024 01:00:24 +0000
asID:                     16668
IP address blocks:        199.181.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4f:d9:bb:54:52:f1:84:23:10:d8:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ace9928-8310-4c75-a54b-a4085ec0045a
        Validity
            Not Before: Jun 24 01:00:24 2024 GMT
            Not After : Sep 22 01:00:24 2024 GMT
        Subject: CN=f95ea3ec-aef5-43e2-baac-b6878b71ac3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:d5:d4:be:c5:17:86:b0:f8:6f:64:23:32:
                    b1:b7:e9:9b:73:cb:6d:e3:8f:cc:46:b3:8f:d8:3c:
                    90:b0:c0:a6:ad:48:f4:ac:77:9a:59:41:23:0e:4c:
                    2f:ae:63:37:d1:3d:a0:66:23:57:fc:44:3c:f1:24:
                    17:c3:5c:43:64:53:13:45:80:2f:35:41:76:d3:fd:
                    88:29:89:25:7d:80:ce:03:19:e2:2e:34:99:08:3a:
                    aa:9b:76:ab:13:90:61:d3:d0:f0:5f:dd:13:1c:98:
                    e0:e1:56:e2:95:31:ef:00:dc:94:00:e7:b4:2d:c2:
                    1c:09:28:59:50:51:ba:3a:b5:3a:1d:37:48:f3:39:
                    61:37:94:38:71:1e:34:20:0f:3d:13:f6:d3:0a:61:
                    57:81:04:2c:af:da:48:7a:7e:84:49:37:28:4f:75:
                    7a:c0:61:c0:ed:8d:9f:35:68:ce:9c:d1:f7:64:61:
                    f5:a6:92:98:e8:be:ad:5f:94:2b:ca:c0:aa:e0:9a:
                    cb:b7:21:5f:22:a1:6a:c0:d8:de:e3:25:af:7d:69:
                    47:dc:29:ba:07:a5:bb:95:dc:05:73:70:c2:a0:f5:
                    d4:1f:60:cc:90:12:0e:36:8e:c6:ec:d5:d0:cc:8e:
                    55:72:c0:6a:e3:cb:49:2f:ef:6a:01:04:95:48:20:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A9:89:31:58:EE:5C:0E:5F:67:46:AE:89:DB:FB:96:08:E0:AD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:57:b2:c9:9e:66:c0:56:f6:af:0d:54:74:93:b1:9f:6d:a3:
         24:1c:94:15:ae:87:56:50:09:1a:cb:d7:8f:ec:bf:b9:54:c1:
         7d:99:d5:38:64:c7:40:ba:52:c1:7b:d5:34:31:71:43:48:49:
         8a:e9:ac:83:a8:b1:8d:d0:d7:be:b3:5a:02:5d:8b:90:23:e1:
         4e:6a:1b:8d:8a:c4:2e:26:ae:62:58:c9:a2:45:17:50:75:5f:
         c9:dd:d6:a9:4b:c8:3c:fd:ff:d1:23:9d:a6:fd:d3:97:79:ed:
         76:fe:47:26:fb:54:b4:ce:6f:ba:f6:d8:31:5a:d1:08:68:13:
         f4:3f:e2:3b:6b:da:1e:40:aa:5d:60:05:9e:d2:68:96:80:4d:
         d6:ae:0e:d8:64:3e:b4:a3:26:90:21:e5:c3:d8:fa:50:01:a2:
         6e:dc:a1:e3:04:d4:f6:2c:ea:8f:1c:0b:46:1b:b6:40:ac:41:
         76:0d:57:66:4b:12:2f:04:a5:ae:08:7b:5c:e5:bd:80:09:ca:
         50:da:ca:e4:fe:80:05:4c:cf:23:95:44:2d:5b:2d:b0:a7:5b:
         32:61:fc:f7:ad:de:1a:10:85:30:b8:2d:2d:be:7f:6a:d1:25:
         3a:73:fd:4e:66:4c:59:83:bf:07:4a:d0:6b:2a:b2:09:fb:fc:
         6c:80:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:53:08 2024 by rpki-client on console-fra.rpki-client.org