Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa
File:                     b551df8a-9563-3e0f-856f-1ea0420a13dc.roa (raw, json)
Hash identifier:          caOLNM99E5aRdwWWNb6vEBAnAZisvi/J3ahm4xA325k=
Subject key identifier:   81:EF:96:E0:6C:2D:E3:30:8F:99:FE:9A:27:66:93:48:EE:2C:E0:23
Certificate issuer:       /CN=1f590187-fc1d-4681-a0a4-aa1d23202e80
Certificate serial:       010D0C9F4328584566BDAA73516A6F796518D380
Authority key identifier: 59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     19945
IP address blocks:        216.46.192.0/19 maxlen: 19
                          2620:101:3000::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:aa:73:51:6a:6f:79:65:18:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f590187-fc1d-4681-a0a4-aa1d23202e80
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=7b381b84-6257-4d98-9766-c114e19738c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:ea:0e:44:e0:75:14:1f:b4:d8:aa:e4:ac:
                    3b:88:95:20:8c:e5:7b:ec:78:7e:38:9c:41:86:4f:
                    25:94:9e:03:88:42:94:7c:d3:57:c9:87:e8:c1:1c:
                    5c:cc:dd:3d:e5:78:1e:d8:cb:03:94:8d:68:14:3e:
                    32:b6:cc:a1:c2:84:95:c7:fc:63:e1:b5:ac:b0:d2:
                    39:29:38:90:03:4d:29:76:98:65:6f:df:67:9d:f9:
                    7d:8f:1d:b4:48:e5:2a:0e:f8:a4:2d:c1:dd:77:47:
                    80:32:93:35:6b:cb:51:e6:97:ea:a4:24:ad:e7:82:
                    63:6a:ca:33:be:79:c8:d5:ae:16:c6:cb:d9:2d:31:
                    09:75:f7:b5:0d:f3:5f:32:1a:89:1d:90:25:8a:65:
                    fa:90:56:7d:3a:40:85:a7:88:b6:13:8b:5e:fb:2c:
                    50:c9:5b:45:38:02:2f:b5:34:3c:bc:22:b5:43:ca:
                    38:16:c5:bf:bf:80:f1:fb:50:b6:db:ea:7e:31:97:
                    f7:15:d8:6a:3b:5b:05:99:b3:69:e8:a5:e2:9a:e9:
                    3f:b5:69:c8:3d:f0:84:cf:6f:63:18:72:f6:bc:9c:
                    6d:27:62:c4:9d:59:be:66:d6:34:3e:2e:15:f1:90:
                    17:5b:21:fc:26:f3:c8:4a:80:39:43:1e:55:48:4e:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:96:E0:6C:2D:E3:30:8F:99:FE:9A:27:66:93:48:EE:2C:E0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/b551df8a-9563-3e0f-856f-1ea0420a13dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80/1f590187-fc1d-4681-a0a4-aa1d23202e80.crl

            X509v3 Authority Key Identifier:
                keyid:59:A1:2D:69:AC:FD:A4:05:22:9E:42:C9:4A:35:AB:B8:A1:7E:E0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1f590187-fc1d-4681-a0a4-aa1d23202e80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.46.192.0/19
                IPv6:
                  2620:101:3000::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:73:93:f6:6d:1d:fb:93:88:75:d0:1a:ea:7d:2c:e4:ac:
         32:4b:9b:95:01:a6:fd:a6:92:91:37:6c:55:25:bb:ab:80:a8:
         df:c9:8f:90:48:4f:38:0f:3a:94:11:4d:a9:62:4e:96:c5:55:
         32:58:2a:0c:96:8a:57:bd:86:45:71:a5:73:16:00:0a:d6:49:
         b3:74:4e:d2:61:08:2a:32:c2:d4:a3:8b:be:36:db:b8:26:b7:
         c5:72:85:db:63:7a:e3:57:49:b8:0d:60:92:4b:73:5f:f2:e4:
         4f:59:58:a3:3c:dc:19:6f:39:6a:7b:85:44:e1:b5:8b:2c:a0:
         46:4f:cb:1d:fb:df:79:14:df:18:a4:73:5d:a9:4d:92:ca:75:
         96:ee:fc:ef:1f:5b:f6:40:f8:19:bd:5d:8d:86:d2:e5:56:67:
         55:53:40:3b:dc:9c:f5:6d:1e:74:c1:00:c2:2c:02:2c:de:ab:
         8d:01:7b:4c:4d:17:3e:32:c4:86:d9:8e:d5:42:22:71:33:03:
         ef:bd:fb:f7:cb:53:6b:b3:e2:6a:b7:52:b8:64:80:d2:34:58:
         52:9f:7d:82:7f:ad:52:ee:6e:09:14:34:f5:57:80:19:c9:7e:
         ca:6d:2f:da:e8:08:bc:53:fa:4b:bb:c6:30:d8:60:ed:b0:c3:
         fd:3a:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:46:02 2024 by rpki-client on console-fra.rpki-client.org