Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca2e396a-eada-353c-b8fe-71ec5c59fb63.roa
File:                     ca2e396a-eada-353c-b8fe-71ec5c59fb63.roa (raw, json)
Hash identifier:          hGY1AnfcWQM2s9+4546PAWYsuIjmx/Cvaolfl8TJA3Q=
Subject key identifier:   D2:21:62:3D:E7:BB:00:81:5B:EC:47:15:1D:E6:27:B4:98:14:75:7D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA148B736B5E8E93E3C01280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca2e396a-eada-353c-b8fe-71ec5c59fb63.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        216.208.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:8b:73:6b:5e:8e:93:e3:c0:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=ced85398-d507-448d-bcd6-c63a03bd2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e8:75:8d:64:7b:4b:97:1a:59:4e:64:3d:66:
                    ba:0c:79:e9:4f:a0:e0:cb:b1:a4:c7:d5:e4:64:de:
                    32:be:1e:79:8d:1b:41:9e:99:4c:b6:ff:d2:c0:4b:
                    1e:fa:10:54:3f:59:7d:aa:cf:06:be:e5:05:a5:c6:
                    a2:e0:2f:07:4a:c7:f5:03:5c:63:5a:22:5f:1d:b0:
                    73:b1:7c:5a:29:e9:a2:3f:92:c1:e1:99:4b:e6:94:
                    d4:fe:00:b8:ad:0f:f4:8e:62:0b:4b:9c:3a:d0:dd:
                    8d:c5:18:44:57:e7:3a:fb:84:44:c3:30:b6:2b:c7:
                    98:dc:32:37:d2:f2:f6:33:f3:97:fe:91:7e:0a:24:
                    32:3e:be:ac:b1:be:45:07:f9:9d:70:5f:08:3f:6a:
                    02:93:e8:a2:7a:6b:06:69:ec:d2:85:66:90:be:68:
                    84:9e:22:5e:85:eb:95:e3:61:63:c3:b1:c5:41:7e:
                    73:11:62:7c:d6:eb:07:b3:dc:c4:4a:cc:55:de:33:
                    06:bf:38:41:d4:01:dd:b1:13:b6:9e:a6:61:9e:a4:
                    74:02:19:2e:cc:31:5b:6d:30:5b:cf:63:dd:c3:8b:
                    50:8c:f0:67:17:4b:98:be:29:74:4e:41:5f:00:b7:
                    af:b5:fe:6b:2c:f7:43:6b:5b:82:78:48:fe:d9:42:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:21:62:3D:E7:BB:00:81:5B:EC:47:15:1D:E6:27:B4:98:14:75:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca2e396a-eada-353c-b8fe-71ec5c59fb63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:6c:55:71:aa:0a:11:6d:84:5b:5b:df:8a:95:f4:b1:0d:
         e4:be:28:f8:a0:4f:20:1b:c8:49:de:6c:e9:76:1a:99:e9:d6:
         5b:f6:99:91:f1:36:83:e2:d1:7f:7a:8c:e5:11:a0:a1:09:27:
         73:54:09:b8:41:4b:c2:58:2b:ca:ef:79:25:c8:2f:aa:28:75:
         23:d2:56:f0:6f:13:ea:64:76:62:d5:fb:48:84:40:e7:67:d8:
         94:14:70:3d:8d:84:9d:64:0f:de:b4:29:30:53:50:cb:20:79:
         da:62:a1:e7:d7:70:71:7c:c6:07:c9:a2:c1:b6:95:3f:38:93:
         6a:56:06:53:17:cb:ec:43:7d:26:c0:f5:1e:ad:7e:24:b2:f6:
         77:d3:58:23:a1:04:5d:31:3f:f8:27:a9:0f:b6:af:c9:38:2e:
         cb:5d:a8:ba:3d:35:4c:d1:55:16:f3:9d:d5:07:90:da:d3:d6:
         d3:b3:74:5f:ae:6a:de:b9:71:7b:e8:3f:5c:7d:10:6a:da:b4:
         f9:9a:b7:e3:32:7a:fb:4b:0d:f0:d8:e4:5b:b0:04:38:46:75:
         0b:6e:d8:39:f6:59:cd:87:b3:99:df:1c:58:e1:27:5e:23:3b:
         64:a4:41:09:82:65:b3:e6:ce:a0:cc:fd:79:6f:a9:fa:f0:2a:
         fe:5e:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org