Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bd7da6eb-563b-3f7d-b8d7-3c56b30d6256.roa
File:                     bd7da6eb-563b-3f7d-b8d7-3c56b30d6256.roa (raw, json)
Hash identifier:          7NUugiB8OHJ9ub6qbNah48EIwE5Jy1wBjGGLR1dGcbE=
Subject key identifier:   84:F4:4A:0A:6A:1D:2F:FE:CB:3E:2E:C3:ED:C9:3D:2C:8D:2B:5C:4F
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A5AD59CD7
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bd7da6eb-563b-3f7d-b8d7-3c56b30d6256.roa
Signing time:             Fri 26 Apr 2019 18:08:29 +0000
ROA not before:           Wed 27 Mar 2019 04:00:00 +0000
ROA not after:            Tue 27 Mar 2029 04:00:00 +0000
asID:                     16509
IP address blocks:        137.83.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:5a:d5:9c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 27 04:00:00 2019 GMT
            Not After : Mar 27 04:00:00 2029 GMT
        Subject: CN=de0f923c-42d6-4d4d-a24c-9c47cfc10c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:c4:c5:f3:4a:23:5e:45:05:e2:be:20:f5:
                    8e:7e:75:02:47:05:b8:8a:eb:a2:3a:2a:c5:07:df:
                    25:5c:e4:95:5a:97:90:aa:eb:0e:e4:54:b1:ea:b3:
                    f5:9f:47:99:56:25:8e:4e:17:9b:38:b8:e8:5e:c3:
                    53:3d:77:a2:39:c1:31:3a:85:0a:70:9c:f8:93:e6:
                    44:cb:ad:0b:28:fb:3e:4b:96:4d:8e:ed:bd:af:45:
                    e6:95:4a:fc:58:fa:8b:e8:55:9d:dc:da:10:20:91:
                    bc:81:d1:c5:7d:85:f6:5c:d3:66:9e:0b:51:6e:29:
                    31:ca:0c:49:ca:1c:21:55:77:5c:ec:33:4f:75:23:
                    72:02:65:e7:23:60:1d:cb:77:95:90:62:77:7c:bd:
                    57:e1:5f:be:7f:03:ff:9f:14:6f:e3:f8:f2:81:d1:
                    de:8d:59:85:ab:52:07:9b:e8:00:c0:1d:b7:7d:be:
                    80:0f:1a:f5:4e:02:43:86:8e:10:b3:c7:d7:0b:14:
                    e0:c7:dd:30:62:ce:72:82:f4:d5:f7:96:cd:66:69:
                    da:27:52:d7:86:b2:69:33:6e:ab:67:f2:de:d6:3b:
                    df:91:65:91:69:50:7c:3a:61:5c:28:51:dd:28:a7:
                    e2:9b:f0:b2:ce:00:3f:b7:21:9e:51:de:88:76:2a:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                84:F4:4A:0A:6A:1D:2F:FE:CB:3E:2E:C3:ED:C9:3D:2C:8D:2B:5C:4F
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bd7da6eb-563b-3f7d-b8d7-3c56b30d6256.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier: 
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:59:a6:88:c5:df:de:0e:9d:7b:9d:aa:ad:b7:db:e2:53:3e:
         35:16:14:f7:6e:8c:6f:d7:78:ef:81:df:d2:fe:15:1d:cb:ed:
         2a:12:9b:c2:ea:df:08:b5:bd:17:0f:c4:ac:9e:5f:93:82:85:
         b8:bd:f8:d6:59:b8:30:db:49:0b:66:19:86:1d:32:f8:0d:90:
         81:a0:0f:d1:9a:32:b5:4a:6e:6f:3d:a9:6d:28:f2:b7:be:11:
         ce:0a:1a:a7:ef:a5:ab:69:1b:44:1c:31:89:58:63:9b:b0:54:
         a2:45:5a:a1:bf:eb:b8:87:b4:b1:81:e7:9c:6c:75:3d:97:eb:
         e4:0e:44:91:63:f3:93:fb:8c:f4:d6:3c:31:4c:3c:4e:ac:0e:
         1a:51:a7:6f:99:df:0e:be:26:a3:4b:a9:fb:03:75:56:2e:d1:
         87:8f:4e:cc:b5:16:e2:1c:89:55:c8:95:ad:ba:f2:aa:b8:8c:
         5f:40:43:5c:0a:8e:ff:5b:ba:18:c1:39:f1:ac:24:82:8d:89:
         f4:5b:dc:7d:a3:be:5f:64:0e:2c:3d:65:24:d5:62:9f:d3:6b:
         39:39:4b:e4:80:d9:88:e9:97:0f:f5:39:ef:99:30:f0:4c:77:
         ad:8a:77:6b:1c:8a:1e:b7:c1:ac:c8:51:07:03:34:f0:7f:e7:
         cf:e9:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:46:44 2023 by rpki-client on console-ams.rpki-client.org