Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/51ec918f-e1fc-301e-9429-3273266c6019.roa
File:                     51ec918f-e1fc-301e-9429-3273266c6019.roa (raw, json)
Hash identifier:          Z2qMv4CD+fhRz+TbkQujlNrVqXEu0O8pxnafv9u0ceo=
Subject key identifier:   5D:62:17:37:8B:E5:5C:29:6E:1C:1C:7E:0A:B0:D6:86:6C:6F:CA:49
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F43285845174ADB1F3B282D3CB4A73240
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/51ec918f-e1fc-301e-9429-3273266c6019.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     18519
IP address blocks:        172.81.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:db:1f:3b:28:2d:3c:b4:a7:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=8306effe-7315-4493-b287-561d1a9a748a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:88:4e:8f:f2:cf:20:51:5c:82:41:80:43:
                    43:4e:a3:50:9b:cf:c7:d7:47:e5:4b:99:92:40:ed:
                    35:72:95:25:11:41:a0:84:73:35:11:41:f4:71:1c:
                    78:de:b2:d0:c3:90:e6:b0:b8:77:ca:d0:53:3c:74:
                    6e:99:77:9b:d2:36:59:c7:ab:19:46:25:a0:48:9b:
                    f6:c1:9c:2d:ac:09:f1:99:d9:9a:79:97:cd:ec:04:
                    87:ee:79:a3:49:78:59:c5:bd:8a:bb:a4:2b:ed:7d:
                    2d:72:7c:fe:2b:49:c8:db:8b:2e:00:17:58:5b:ca:
                    1f:34:a1:ca:ad:1b:ff:95:bb:50:dd:da:be:a7:7d:
                    73:3c:47:73:95:ce:26:c2:68:df:d5:ab:18:c6:4c:
                    09:a9:fd:4c:6d:4d:78:8e:c8:78:6f:5a:43:26:57:
                    9c:75:1c:13:62:b5:b5:ce:d0:91:b5:91:33:1e:59:
                    d7:bc:99:3a:9c:e0:78:84:c7:85:23:56:79:d1:01:
                    fd:85:80:bd:53:e0:8b:a9:ec:d3:94:bd:85:4f:81:
                    2a:ad:26:f8:92:ff:34:87:5c:fd:80:3d:b4:4c:4c:
                    6f:ce:90:ff:13:e1:88:f5:1c:d6:d0:70:d5:e9:67:
                    ed:4d:d5:f5:5f:bd:4a:84:3d:83:2a:04:57:43:be:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:17:37:8B:E5:5C:29:6E:1C:1C:7E:0A:B0:D6:86:6C:6F:CA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/51ec918f-e1fc-301e-9429-3273266c6019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:35:fe:b2:07:49:b1:1d:3c:a4:01:66:20:d2:4a:33:a8:aa:
         ce:1a:b5:7c:b1:3a:88:48:21:f3:31:2e:91:98:18:11:ac:23:
         d7:72:2b:06:7e:d3:f8:cd:96:65:a4:cb:3c:32:dd:6c:e7:2e:
         9d:3d:b9:92:be:a2:a3:0a:f3:28:26:b7:f8:8c:54:e8:ed:53:
         49:cc:8d:58:66:d8:0e:00:57:84:60:fd:af:bc:7a:f2:aa:a6:
         d5:42:58:d8:48:66:9f:c7:6b:87:6b:3c:d3:08:61:42:61:af:
         01:4a:12:f8:2e:82:44:4e:a2:04:6e:c0:b6:76:96:a9:b2:7f:
         18:e0:92:9d:80:f2:67:a5:c4:fa:f1:70:28:c5:dc:88:81:05:
         25:9b:e5:e1:d7:1b:0d:f6:9f:71:04:b4:05:ae:ad:93:f7:13:
         16:27:23:dc:3b:a5:44:44:2d:51:19:d4:5c:f4:f3:07:49:0a:
         e7:d0:73:f0:7d:e4:9e:b7:96:41:ca:7b:16:1f:46:19:ff:7e:
         ad:52:e9:4f:ae:6d:0b:f0:19:0b:7f:2c:c1:5d:cb:14:d1:36:
         3d:41:86:1f:59:7d:95:25:34:8a:7f:b7:be:69:9b:88:59:c9:
         48:fd:c3:bd:6f:a6:2c:68:a5:21:8a:12:c6:1b:f7:b3:01:a3:
         9c:34:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:54 2024 by rpki-client on console-fra.rpki-client.org