Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa
File:                     b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa (raw, json)
Hash identifier:          59K1tplkTeysfsRwEyTw/5gDpcn86ntMN2sB3vpYQFQ=
Subject key identifier:   D9:8D:D3:8B:41:F7:58:8B:C8:E5:AB:75:91:B1:13:D3:A1:1E:83:2E
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F43285845C873A39B2361761C4BE7D980
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     16717
IP address blocks:        199.116.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:a3:9b:23:61:76:1c:4b:e7:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=27001c0d-75b9-44b6-8c29-a23a282d7552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:35:82:a2:30:d4:1c:bc:5b:be:80:e1:5b:
                    8d:94:b0:cc:30:98:4f:2a:2c:17:40:bc:50:da:90:
                    46:e7:70:54:70:5c:25:fd:66:f9:60:f4:11:9d:8b:
                    c1:28:f7:be:2e:a8:ff:bb:0b:0a:48:5b:cc:d0:10:
                    44:75:0c:81:a4:51:ca:11:1c:99:52:c5:88:cb:6b:
                    ec:63:06:60:31:53:6e:a6:88:bc:2a:23:e3:f1:fe:
                    6a:9c:19:54:20:69:77:d4:0b:79:fb:bc:f0:d6:08:
                    62:07:18:91:52:f7:f3:26:22:3f:3b:01:3d:6a:db:
                    27:47:36:a2:5b:9b:cd:d0:1c:20:42:f2:ff:19:a5:
                    23:11:06:ff:c2:08:53:d0:e2:ee:cb:c8:0a:74:ec:
                    b1:f1:7d:11:04:9e:1c:81:b0:d3:8c:51:ad:fd:0e:
                    9d:83:5f:63:de:65:5e:bb:de:7b:fb:89:b5:92:4c:
                    d9:27:53:9c:e4:52:74:0d:87:fc:26:5f:d2:37:f3:
                    3a:c9:3a:98:18:32:45:c7:53:b5:4f:57:d8:cf:09:
                    8d:83:f9:72:2a:95:c9:26:7b:88:e1:2a:20:88:b9:
                    3a:f5:d7:9d:d9:2a:a5:53:30:43:63:12:82:a0:5c:
                    a9:f2:a3:b8:da:b5:52:32:c4:4e:ab:3e:4a:3e:85:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8D:D3:8B:41:F7:58:8B:C8:E5:AB:75:91:B1:13:D3:A1:1E:83:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:5f:b7:94:cc:2f:db:fe:fb:db:d4:3d:ed:be:ea:0d:73:
         de:10:a7:ee:67:12:e4:43:29:8f:c6:5e:d8:07:a8:a9:d7:8a:
         22:57:52:25:a0:e8:b6:ac:a5:e8:ad:5f:49:33:bf:ca:cc:4a:
         32:c4:da:cd:bc:55:9a:5f:ed:bf:73:0c:0e:81:19:d9:c5:d5:
         70:9c:43:73:20:7d:c5:68:c6:c5:73:be:df:91:a1:d1:1a:94:
         be:7f:3b:79:f0:9a:ff:e1:39:8f:3e:78:37:03:b4:be:7a:c8:
         f8:ab:e4:a0:88:ce:23:6e:60:0c:10:7f:e5:ed:a8:d6:44:5b:
         6b:e2:0f:8a:d7:68:f2:2d:6d:d0:56:c1:8b:21:40:83:7e:a9:
         8e:5f:bb:75:c7:ff:f3:d6:b8:5a:75:1f:a4:c1:ec:ae:64:4a:
         60:3c:0f:3d:9f:18:4d:03:68:e3:b3:2e:de:e3:59:64:47:16:
         a4:a1:22:8b:b8:f9:51:de:d4:0a:99:40:da:f7:07:00:7a:1f:
         27:26:5b:cd:63:7f:d6:68:f6:1a:b8:d4:c4:28:d5:ae:9a:9c:
         0d:c9:0a:29:c0:ff:02:83:1d:80:4c:87:cd:bd:d4:bb:e0:49:
         41:be:3d:22:7c:4d:f5:f0:ea:87:ee:48:3e:f7:37:d8:34:27:
         a3:25:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 10:57:35 2024 by rpki-client on console-fra.rpki-client.org