Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa
File:                     2db60313-820c-3bb6-85f6-8c85184ca8a4.roa (raw, json)
Hash identifier:          Isd13ESvDneWICcM0aCRFh3LvkRae7Sq6nbyJoxBxBE=
Subject key identifier:   58:4E:05:1F:2A:2D:EE:37:3B:5D:9D:29:E6:F7:05:75:1A:1E:A3:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858458D7579DAF60DD96B863DEB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa
Signing time:             Mon 15 Apr 2024 09:51:45 +0000
ROA not before:           Mon 15 Apr 2024 09:51:45 +0000
ROA not after:            Sun 14 Jul 2024 09:51:45 +0000
asID:                     16625
IP address blocks:        96.16.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:75:79:da:f6:0d:d9:6b:86:3d:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 09:51:45 2024 GMT
            Not After : Jul 14 09:51:45 2024 GMT
        Subject: CN=e652bd4b-9706-48cc-9dc7-f44080ad34f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:b3:92:c2:0d:31:f2:d8:3d:68:26:48:22:
                    cb:31:ce:d0:1f:a4:0f:20:97:cb:bb:87:b4:74:c2:
                    0a:4d:3f:61:5b:b6:a1:f7:15:80:9e:d6:6c:ef:c3:
                    d2:ef:19:36:0b:8f:57:63:a5:1b:e3:10:c7:3e:54:
                    df:02:5a:0e:b4:b7:84:ab:bb:a7:90:dc:51:ce:4a:
                    f7:9d:c8:7a:78:57:c9:2b:43:90:3d:60:12:bf:84:
                    84:2f:e2:ab:93:25:85:1f:99:5a:7f:1e:d8:9e:c4:
                    32:c5:2e:56:70:77:e4:49:0e:b0:93:dd:9e:64:ba:
                    00:37:c8:7a:24:f9:9a:9c:2e:ca:24:04:3b:68:47:
                    1f:bc:1d:cc:84:1c:40:d4:8e:29:89:2e:85:3c:f6:
                    bc:06:9b:e2:68:3a:65:ca:f7:b7:69:ad:59:bc:d3:
                    3d:c6:18:fb:e9:15:c6:24:67:2e:67:c1:9a:ed:6d:
                    9d:bc:47:07:84:b6:35:3d:10:b8:4f:6e:09:8b:d2:
                    8c:9c:df:97:89:ab:8a:e9:cb:e4:e9:4e:16:0a:83:
                    64:58:a5:52:d6:00:2c:22:b8:12:c8:45:bd:b8:47:
                    81:e4:94:cc:e1:4e:d1:cd:8e:52:d6:cb:16:4f:ef:
                    6f:17:2a:9c:c4:4e:c4:e3:8b:7a:fa:93:17:46:d1:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:05:1F:2A:2D:EE:37:3B:5D:9D:29:E6:F7:05:75:1A:1E:A3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:9d:64:29:fd:d8:85:d8:96:b3:d4:32:ba:96:00:f7:75:
         a8:3e:06:65:3c:cd:5f:38:32:54:64:0e:da:32:eb:00:d8:f7:
         11:14:0e:80:9a:84:2f:52:75:b5:fa:10:a3:d1:29:b0:58:5b:
         19:4d:62:58:5b:11:ba:64:50:4c:b5:53:29:f9:77:f3:83:cd:
         5c:ef:61:8b:ba:13:89:44:82:c1:42:71:2a:57:15:ca:07:44:
         7a:25:41:51:78:34:e5:b1:71:ee:69:4b:eb:73:52:dd:14:3f:
         06:84:e9:75:e0:73:44:e4:ac:e0:b0:ca:da:cb:04:56:d2:d3:
         ca:41:e5:d0:ed:34:06:f9:90:97:c7:84:44:bc:d2:6b:4d:b5:
         03:4d:fc:8d:e3:b9:b1:19:3e:1f:9e:ce:02:a5:9e:b5:cd:cf:
         f1:5f:e6:9d:8a:c3:8a:65:9e:11:0f:4b:ac:ce:0c:20:82:c3:
         c6:72:be:30:9d:61:1b:46:ed:25:67:40:c4:92:14:03:77:e6:
         8e:74:d6:0e:ec:dc:57:70:95:39:d8:ec:6c:ff:57:84:db:0d:
         7a:ca:c3:d0:54:45:8c:a4:4f:7b:16:1e:02:c0:e9:19:fe:b4:
         74:9c:cd:47:fd:8e:5b:5e:d7:a2:0d:51:15:de:25:84:36:2d:
         2c:32:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:02 2024 by rpki-client on console-ams.rpki-client.org