Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/c4e7938d-be52-3c3f-8bec-372bd00540fc.roa
File:                     c4e7938d-be52-3c3f-8bec-372bd00540fc.roa (raw, json)
Hash identifier:          dgWGpfAGYrsWhhBDRf9b2DHIL9tau0kyvGGHDGC5KlE=
Subject key identifier:   56:AB:7A:35:66:16:39:0C:7E:FF:D6:38:A5:EE:D9:31:F3:CF:6E:49
Certificate issuer:       /CN=3548b047-adc4-4529-a369-1f7a8b9f01e6
Certificate serial:       010D0C9F432858452C2DFECDC512798B2FAA4780
Authority key identifier: 1E:D3:5D:2D:50:FD:15:1A:03:72:E5:A3:BF:30:17:3B:24:09:C8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/c4e7938d-be52-3c3f-8bec-372bd00540fc.roa
Signing time:             Mon 11 Mar 2024 13:34:19 +0000
ROA not before:           Mon 11 Mar 2024 13:34:19 +0000
ROA not after:            Sun 09 Jun 2024 13:34:19 +0000
asID:                     16509
IP address blocks:        199.91.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/3548b047-adc4-4529-a369-1f7a8b9f01e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/3548b047-adc4-4529-a369-1f7a8b9f01e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:2d:fe:cd:c5:12:79:8b:2f:aa:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3548b047-adc4-4529-a369-1f7a8b9f01e6
        Validity
            Not Before: Mar 11 13:34:19 2024 GMT
            Not After : Jun  9 13:34:19 2024 GMT
        Subject: CN=f717559b-90b5-4746-9b2d-39de57255f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:73:e3:9a:ae:04:55:ad:b2:41:a0:f3:82:
                    ca:e5:09:30:45:d3:d8:12:95:22:2e:fe:84:ca:62:
                    76:62:9f:93:87:6b:e7:50:09:59:1e:54:be:36:40:
                    ec:0e:6a:3a:7e:32:0b:33:61:a4:30:7c:8b:64:d6:
                    bf:3e:96:0e:88:8b:1c:b2:79:0e:52:2a:91:fb:d4:
                    d0:d0:e6:02:a9:d6:aa:74:78:6c:c7:d2:ee:49:6f:
                    9e:3f:69:63:eb:c7:31:0b:5c:fc:dd:02:98:37:84:
                    5d:71:8c:a6:f5:08:4b:b5:55:0d:be:ef:81:ca:18:
                    9c:95:1e:7d:28:d4:37:0f:77:f8:82:c8:98:9a:72:
                    7e:07:f9:71:35:10:94:07:2a:91:29:a1:b3:a7:ea:
                    93:5e:6a:d3:66:27:07:bc:87:80:a2:b4:91:33:9f:
                    e5:c9:7c:c6:4a:de:14:a6:6e:4d:17:03:13:df:37:
                    14:42:e1:1f:93:1c:a0:e5:b8:80:d2:7f:a8:df:07:
                    44:2c:a0:62:b2:72:fb:f2:80:30:63:eb:23:53:8d:
                    0c:f7:b7:3a:70:fc:f6:ac:38:67:45:21:9d:80:18:
                    27:00:f6:09:a9:24:8b:88:c5:3a:ee:b9:44:ad:6f:
                    b6:fe:23:f6:0b:bc:69:10:74:89:9a:a2:dc:16:c8:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AB:7A:35:66:16:39:0C:7E:FF:D6:38:A5:EE:D9:31:F3:CF:6E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/c4e7938d-be52-3c3f-8bec-372bd00540fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6/3548b047-adc4-4529-a369-1f7a8b9f01e6.crl

            X509v3 Authority Key Identifier:
                keyid:1E:D3:5D:2D:50:FD:15:1A:03:72:E5:A3:BF:30:17:3B:24:09:C8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3548b047-adc4-4529-a369-1f7a8b9f01e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:19:17:ef:4c:5f:c5:67:7b:8e:cb:86:a7:99:eb:67:4a:
         5d:ce:19:65:4c:3b:cc:ca:30:6b:fe:a0:7e:25:7b:7d:c3:81:
         2a:f0:4c:db:4c:6a:42:d4:52:4f:47:b0:1c:cd:65:3a:f1:6a:
         dc:2c:95:a2:6f:eb:58:c8:c2:cf:39:1a:3b:1c:de:08:85:34:
         49:fb:3d:be:fa:ce:fc:f3:b5:ce:d7:f3:dd:10:09:02:d2:e8:
         2a:2f:1b:1a:65:00:7d:a3:11:de:c3:83:40:dd:e4:90:e7:a3:
         1a:d5:c1:a8:a4:7b:e7:70:8e:ca:43:a9:d8:ed:5b:fe:01:62:
         6f:82:89:28:8b:5b:03:91:47:47:bc:09:0b:5e:a3:02:af:39:
         0b:7d:a6:c3:65:91:67:95:9b:17:09:47:9a:53:1d:5b:10:78:
         d8:41:61:42:51:30:4f:f4:a4:ff:7a:c5:f3:d9:3f:b3:6d:54:
         60:a8:a1:b4:05:00:a8:e5:eb:4e:2e:63:85:7f:36:61:2e:6a:
         03:46:45:85:70:5c:b6:4e:54:67:01:4a:ac:6e:4d:d7:ed:a9:
         e8:80:bc:b6:20:21:39:87:0f:8e:4a:c1:02:52:9d:a9:d8:7b:
         eb:f4:fc:14:70:75:46:cc:af:4d:7d:6a:82:66:67:a0:5a:42:
         0f:43:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:42:40 2024 by rpki-client on console-ams.rpki-client.org