Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/c9b97be0-5239-3ca4-ae16-f49f27bcdfbf.roa
File:                     c9b97be0-5239-3ca4-ae16-f49f27bcdfbf.roa (raw, json)
Hash identifier:          DO1g3vffgBg0OVnPldst9E2Bi6wv3uDLEzFpjBGg9qk=
Subject key identifier:   59:97:59:4A:13:A8:3B:F5:58:F8:CC:9E:37:3E:78:2C:97:01:D7:05
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285845A15E1CFFA6679E684E890BF0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/c9b97be0-5239-3ca4-ae16-f49f27bcdfbf.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     10430
IP address blocks:        216.186.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1c:ff:a6:67:9e:68:4e:89:0b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=a333b120-ebc6-4ee6-a687-40b306b94496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:42:84:8e:38:4c:91:84:09:39:42:13:51:
                    ee:d7:e2:69:59:5b:05:85:3f:21:27:5e:7e:0a:f3:
                    f1:43:9f:3f:84:95:a7:1f:57:f6:b8:1d:9e:dc:f7:
                    e8:45:69:53:f2:13:77:0e:a8:15:7f:e7:34:b9:dd:
                    b0:30:80:b3:4f:cb:ec:0d:ca:d8:72:fc:4b:ff:d4:
                    34:9d:69:dd:2b:62:b6:f3:6d:0c:48:84:4f:3c:b5:
                    81:bb:f7:8b:42:1d:58:e0:6e:51:00:1f:62:78:c4:
                    9f:a9:83:7c:da:85:31:e0:ef:a9:83:9b:72:88:c0:
                    10:e9:16:c9:88:5d:9e:75:e6:29:2b:0b:62:73:db:
                    85:fc:95:25:f8:ce:72:6c:7e:45:49:8d:c5:20:a9:
                    2a:6a:e8:51:62:d0:ee:db:f6:90:0a:34:0b:f0:b1:
                    69:d9:18:3b:28:5e:74:61:23:b7:88:eb:23:d6:e6:
                    ab:84:9f:bb:b1:8c:da:ea:82:b3:98:c9:3d:57:49:
                    89:ab:17:c6:51:37:0c:2a:ac:d9:6c:25:b8:66:34:
                    a5:35:3f:30:e9:6d:e2:53:e0:cf:15:fe:dc:9f:1f:
                    b0:6e:ee:e1:ce:0c:ab:a2:8c:ca:5f:ab:77:14:97:
                    67:e6:f9:e6:d4:6b:e2:a4:9b:ee:6f:95:12:bd:22:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:59:4A:13:A8:3B:F5:58:F8:CC:9E:37:3E:78:2C:97:01:D7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/c9b97be0-5239-3ca4-ae16-f49f27bcdfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.186.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:cd:e9:1d:a7:8d:23:35:10:47:c8:f5:e9:ab:66:7d:41:bb:
         23:c3:46:0a:e8:69:5f:92:e2:17:d1:ad:3b:27:ff:63:0e:d3:
         10:df:36:17:7d:35:cf:c0:97:65:bb:80:77:c7:9f:21:06:b3:
         0e:da:e9:d9:c6:38:33:6c:7c:c2:4a:ed:35:3e:c6:af:a3:eb:
         b8:e2:64:be:86:39:b2:d5:56:e8:e8:12:96:5d:7d:99:7b:2d:
         e1:3d:c4:e3:65:b5:b1:18:8a:9b:3f:17:b8:01:5c:dc:66:a3:
         b4:04:d3:f1:11:32:0b:16:74:29:fc:4b:b4:da:dd:8d:cb:73:
         73:52:c7:77:81:96:03:12:50:1e:19:0d:e9:63:b4:25:b5:67:
         63:1b:7a:20:f6:e6:15:d0:09:e2:b7:58:52:4d:e4:e4:15:9f:
         48:ae:02:f0:d6:b8:9b:79:bb:ab:09:9c:67:21:12:4e:e5:ea:
         74:8f:9a:2a:bb:a5:2a:b6:59:e7:34:87:e6:c6:cc:77:f2:11:
         60:01:87:64:34:4a:f2:55:01:0c:97:9b:e7:5e:23:0b:f1:6f:
         7f:06:e6:24:cd:4c:fe:10:9c:7c:ea:6c:d9:d4:62:93:d5:ec:
         f8:30:9b:0c:01:74:03:96:1f:58:ba:b4:f7:6e:61:33:6c:53:
         5d:9b:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:15 2024 by rpki-client on console-ams.rpki-client.org