Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/b9e22ba1-b4d8-3377-a7fd-7c7c77060c7f.roa
File:                     b9e22ba1-b4d8-3377-a7fd-7c7c77060c7f.roa (raw, json)
Hash identifier:          Oj4hbCo9u5OW6DKwycSK9u9GTAEta00JdtN15NMvR1k=
Subject key identifier:   87:3B:58:5B:48:DC:77:2B:4C:3F:C3:1D:CD:36:3E:76:4D:90:46:CF
Certificate issuer:       /CN=01430e13-506f-444b-8727-f36154b32c07
Certificate serial:       010D0C9F432858455E5DA7012047495F129B6078
Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/b9e22ba1-b4d8-3377-a7fd-7c7c77060c7f.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     46648
IP address blocks:        198.217.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a7:01:20:47:49:5f:12:9b:60:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01430e13-506f-444b-8727-f36154b32c07
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=c2590817-6268-4fa4-a807-aac2c6ac194b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:01:3d:17:52:ea:fa:ce:38:a6:d0:3b:c4:
                    41:70:6d:37:8e:75:20:fb:2f:2f:50:da:f7:78:4e:
                    d7:5d:6d:59:75:6a:6e:0a:4b:22:77:18:85:d2:6c:
                    97:95:81:43:17:07:c8:59:f4:56:c2:3a:be:61:1d:
                    62:b0:05:bb:70:87:2c:a5:e8:b2:57:67:93:b5:3a:
                    6d:99:7b:d8:83:52:a8:6c:c6:5e:8c:e2:0d:48:3c:
                    fe:ff:93:2b:f5:b9:2b:9e:6a:91:03:7c:02:39:ce:
                    55:45:ef:8d:cd:bc:b0:91:d6:31:3a:5c:98:00:58:
                    49:12:a3:5e:34:c3:99:32:9a:61:35:84:f2:2c:28:
                    91:6f:5d:8b:4f:e7:c6:3c:3a:fe:8a:74:b9:d3:b4:
                    14:ee:d4:98:b0:07:21:e2:c2:2b:cb:5d:8a:b1:ae:
                    04:98:88:40:03:3c:f0:f1:04:70:4c:60:06:3d:db:
                    44:a5:13:7e:76:64:4f:9c:ac:43:4c:6b:1f:36:be:
                    2d:d5:7e:ac:34:e4:af:da:a8:d7:7c:a0:9a:cf:4d:
                    99:55:bc:59:e1:3f:df:17:c1:2e:84:cd:17:33:40:
                    9a:f7:2f:2c:6b:76:c3:a5:3a:c1:ce:cd:ab:ef:64:
                    1f:ad:cd:c1:aa:67:86:57:b3:1e:0f:0b:d1:25:e1:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3B:58:5B:48:DC:77:2B:4C:3F:C3:1D:CD:36:3E:76:4D:90:46:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/b9e22ba1-b4d8-3377-a7fd-7c7c77060c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:3c:b1:e2:8b:58:58:7c:3c:d3:6c:d9:f1:0d:78:42:7a:
         43:37:d8:8f:d1:01:29:d1:6a:0f:30:3d:34:d5:fc:aa:c3:86:
         f9:10:a6:86:97:f4:e6:ed:d1:53:75:70:26:1f:fe:19:f7:07:
         b2:80:3f:2c:06:39:ab:01:15:f4:1d:92:6b:95:f9:cb:4f:58:
         4a:a1:27:b7:17:20:51:5f:ac:3e:a4:f9:73:c6:a6:c5:21:e1:
         25:ed:a1:94:28:f0:53:b8:f5:da:b4:ed:d0:8f:99:45:26:7b:
         7a:d5:5f:9f:c9:24:a2:85:18:9c:69:2d:f7:6c:9c:99:78:86:
         db:27:26:f8:d8:5c:1d:25:32:83:3f:d8:f8:6f:a0:28:04:45:
         ff:8b:95:55:cc:99:ba:65:7f:d1:08:02:4a:37:77:c8:d6:8f:
         a9:bc:e3:c9:cd:cb:42:8c:dc:b8:45:d5:9d:34:69:56:18:39:
         a4:24:85:cf:ee:f4:34:5b:7e:26:1e:d0:49:63:d3:53:1a:51:
         71:13:dc:aa:6a:08:a2:7c:c9:85:f6:4b:ed:9d:1a:e2:45:31:
         85:4d:c1:f6:f5:e4:48:cc:68:ff:d6:ed:44:eb:e7:bc:61:50:
         b9:86:64:cb:7e:9e:a6:77:1a:93:35:fb:12:58:ef:8f:83:ad:
         28:00:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:38:01 2024 by rpki-client on console-fra.rpki-client.org