Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa
File:                     9f904d6f-04cf-31be-817e-18ee7663b54b.roa (raw, json)
Hash identifier:          sVNDV0g0TuZRj1WwTZj/eXypTN8kQY10xur62ybJOyE=
Subject key identifier:   CD:C4:A9:07:26:33:49:89:C0:15:BF:16:32:71:42:CC:B0:B4:C5:31
Certificate issuer:       /CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50
Certificate serial:       010D0C9F432858455CF82FBAA07FCD821A6CE540
Authority key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     13552
IP address blocks:        199.202.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2f:ba:a0:7f:cd:82:1a:6c:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=fe0c9e56-fb20-4841-ab1d-1d0c018b3a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:fe:9f:36:6b:e0:dc:a5:56:d9:3a:82:89:
                    91:4f:4c:48:4f:7b:ae:27:7e:9d:12:19:f6:9c:ee:
                    43:85:c7:a2:2e:28:c3:c9:06:d1:04:e2:f4:5b:a0:
                    c8:68:0c:5d:63:4e:8b:8d:3a:f0:88:23:b8:12:bf:
                    bc:69:a8:c1:02:c7:4d:03:50:cd:89:59:d8:f0:23:
                    58:f4:c7:dd:c5:5b:94:ff:cb:8e:41:8b:60:1c:d9:
                    a1:e5:21:6a:ea:fa:db:9c:53:d7:01:e5:e4:5b:b2:
                    eb:66:84:b5:7b:85:d3:6d:bf:f1:d5:ff:ee:99:eb:
                    af:de:86:c7:05:62:1e:eb:70:88:6f:f3:b9:f6:55:
                    25:f6:a4:c4:a0:11:1d:6d:78:28:8b:e5:7d:fc:d6:
                    6b:21:71:bc:7a:ee:b9:c8:1c:f2:01:7d:ec:82:0b:
                    f2:1c:48:c4:c6:ae:cc:0a:c8:af:33:af:80:a6:e4:
                    75:b4:7c:c4:72:16:0a:1d:94:6c:45:c2:23:cd:21:
                    1d:70:06:da:3b:ea:bc:2d:73:19:bb:cc:eb:a4:67:
                    f5:b3:78:22:60:2d:c0:d8:c2:6e:95:70:86:b9:e3:
                    ae:d2:64:38:d5:cf:1b:ab:67:94:1a:a4:3a:f5:f7:
                    53:fd:8b:9a:d0:f1:e5:bc:5d:38:3d:12:b0:43:12:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C4:A9:07:26:33:49:89:C0:15:BF:16:32:71:42:CC:B0:B4:C5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl

            X509v3 Authority Key Identifier:
                keyid:88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:dd:99:5e:34:98:2c:30:f3:a9:5d:bc:60:f2:62:ef:1d:
         a9:b1:89:39:b5:1b:a3:5e:7d:11:0b:06:18:d9:db:8b:1c:a4:
         b7:f2:b0:f6:4d:58:61:80:b3:f9:51:9e:27:24:a4:a4:bb:45:
         fd:24:11:ff:d5:b5:c0:79:df:d3:32:63:83:db:f4:c8:10:3d:
         9f:a1:22:8a:93:0f:a6:22:46:40:b9:a9:1f:43:f6:9f:b3:97:
         a2:1e:63:81:8a:c3:d4:17:a7:f3:5e:f4:4f:e2:ed:81:b9:0b:
         5c:c5:c8:84:0c:10:3d:59:76:f6:c6:aa:69:a4:e2:77:88:08:
         a0:12:b7:3e:61:0a:77:9f:c0:f7:03:88:b0:18:c1:a1:b0:a0:
         d7:2e:4d:2a:97:7f:9d:41:36:0b:ee:eb:ee:92:5f:7e:44:1b:
         5b:db:a6:24:41:20:1d:9c:13:77:9a:c3:a0:67:c4:8c:a0:e7:
         d8:f6:2b:56:3d:cb:6a:ca:28:d6:bf:cf:42:cd:55:a0:d5:c1:
         8f:d2:a6:2f:07:49:00:8b:32:8f:85:cf:9a:2c:df:ad:0b:85:
         11:4c:61:71:eb:07:e4:55:16:0c:65:ec:8d:49:01:ed:53:d2:
         0f:f0:93:96:d3:6e:f3:c9:1c:a0:1f:2b:80:85:15:cb:91:c9:
         57:6c:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:33:03 2024 by rpki-client on console-ams.rpki-client.org