Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dab6c398-b647-3567-a92a-f6b0b0613e73.roa
File:                     dab6c398-b647-3567-a92a-f6b0b0613e73.roa (raw, json)
Hash identifier:          SZmNEayVaDV1JKgP3lm3TyjHeLQ2DANKfSybQ2+sklk=
Subject key identifier:   9C:0C:18:F2:5F:4F:29:FE:28:08:26:02:03:A8:80:53:27:35:F5:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858458D757CD492767FFD153C2558
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dab6c398-b647-3567-a92a-f6b0b0613e73.roa
Signing time:             Mon 15 Apr 2024 09:51:46 +0000
ROA not before:           Mon 15 Apr 2024 09:51:46 +0000
ROA not after:            Sun 14 Jul 2024 09:51:46 +0000
asID:                     16625
IP address blocks:        96.16.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:75:7c:d4:92:76:7f:fd:15:3c:25:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 09:51:46 2024 GMT
            Not After : Jul 14 09:51:46 2024 GMT
        Subject: CN=afe16e1a-4f06-4ae2-8bda-da916cbfc76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:45:73:f4:d5:d2:36:c7:e4:41:f9:4f:2d:
                    6d:a3:0e:2e:f2:7d:c5:77:ed:31:fc:29:49:e5:72:
                    44:37:c3:e7:7f:a0:b3:41:26:e0:48:e3:e5:89:fd:
                    cd:d8:1f:67:8a:1e:33:ca:3b:45:df:28:75:b6:eb:
                    70:a3:c6:bb:75:b3:e9:62:2b:db:df:68:48:c3:6e:
                    eb:7d:fc:a6:57:86:73:a3:0f:37:c1:c3:c8:47:45:
                    e8:16:75:23:ed:41:7c:55:2e:41:36:3f:5d:b5:25:
                    02:ff:d3:59:7e:e4:6e:fb:36:18:80:05:69:e0:00:
                    67:7f:d8:48:31:d4:51:97:2a:0b:4d:05:1a:4d:9e:
                    5c:d0:54:1e:0b:b6:15:b3:01:a6:f8:21:5b:38:2f:
                    5b:0a:99:42:6f:4a:57:6b:55:31:13:3d:40:aa:1a:
                    0b:aa:2d:8b:0b:bb:6a:27:c6:c1:ed:67:b9:64:dc:
                    68:1e:56:8d:db:10:af:30:f2:c1:71:b5:6c:a8:cd:
                    c0:ed:de:c1:04:f7:84:e4:11:aa:fe:ef:dc:65:08:
                    38:97:15:03:17:c6:ef:8c:aa:ba:99:d9:b1:69:fa:
                    00:fa:d4:66:06:f8:95:b5:e1:19:e6:72:56:06:3f:
                    a5:65:4d:27:7f:e7:87:8e:bf:db:95:b9:e8:9e:8b:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:18:F2:5F:4F:29:FE:28:08:26:02:03:A8:80:53:27:35:F5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dab6c398-b647-3567-a92a-f6b0b0613e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:aa:ba:38:ec:1e:de:89:8a:a5:34:dd:21:3a:be:94:0f:d6:
         6a:28:90:cd:e9:52:d2:16:85:7c:d4:b2:9c:19:d8:15:e2:23:
         77:74:d2:d2:7d:ce:af:38:7d:75:11:09:38:96:b1:9a:9e:ee:
         d3:f5:92:b7:45:7b:1c:41:e9:80:b2:a1:a7:e6:fb:c8:3d:04:
         91:11:04:9d:b4:99:54:e1:bc:69:fc:7a:06:b5:ee:ef:ae:d7:
         65:83:46:58:e5:f6:32:d8:18:da:2e:b7:66:d5:0c:c8:ba:dc:
         da:1b:90:9e:43:d2:f1:f7:9c:59:12:41:44:fc:71:a8:5c:f1:
         2b:99:69:59:d2:65:a7:28:2b:a2:5d:f7:22:4f:01:7c:11:3a:
         c5:81:93:6a:ac:87:fb:f8:c7:60:fe:6d:15:59:05:27:9c:19:
         25:e4:93:5f:f4:68:dc:a9:18:e2:a7:e6:8e:dc:8b:e7:af:b0:
         46:13:23:65:74:c6:34:1a:25:d6:10:f1:e4:82:1f:b9:dc:46:
         e6:3a:3f:b7:ce:0a:d9:76:bb:e4:18:e8:e8:6d:a4:15:31:10:
         c3:b0:64:9b:d7:e2:39:42:8b:7a:73:02:8d:0f:2b:5a:fb:4b:
         cd:e9:5c:7a:8b:af:2c:c0:2d:54:71:46:f6:84:ed:fc:ef:b7:
         90:b1:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:23 2024 by rpki-client on console-fra.rpki-client.org