Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa
File:                     98cc5773-8af9-384a-950d-b09e46d6ef16.roa (raw, json)
Hash identifier:          8CAbM5VUyZyxuzE/RmhVFTk+Uc+pOACSHwglx0IAX5g=
Subject key identifier:   9D:0A:88:E6:8C:13:BA:84:07:B4:9C:72:AD:65:D2:D0:66:7E:00:F1
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F43285845C013828A14444ABC9E1BC780
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     19326
IP address blocks:        216.144.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:82:8a:14:44:4a:bc:9e:1b:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=ac10f7b5-9230-4d6f-98b5-33e4874e5a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:01:ac:89:7a:f2:35:3f:11:f4:7e:9d:4c:
                    42:53:4a:c7:92:c9:eb:b5:63:2d:d8:00:b3:12:cf:
                    b1:55:7d:13:b7:32:21:ff:dd:42:18:1b:1d:6f:09:
                    25:0d:6a:ec:c9:35:94:e5:87:48:6e:c1:04:50:21:
                    e1:20:37:c4:ea:32:ca:92:3e:36:96:9e:0d:10:9c:
                    7a:13:ae:24:32:19:9f:e8:06:af:84:59:8e:5f:a8:
                    9f:10:22:e8:98:b7:6d:69:1f:ec:fc:e1:b5:2f:9a:
                    cc:f7:9b:94:64:27:1e:29:6b:ed:26:80:04:b2:8f:
                    49:87:d9:cd:33:5d:c1:d9:73:70:bf:9a:b6:69:26:
                    c7:b1:6d:78:54:db:f0:60:95:80:c8:65:bd:34:a7:
                    30:b8:68:a4:ce:eb:12:9d:f7:01:b7:32:77:cd:26:
                    70:17:98:b0:5d:64:cf:3b:4f:24:43:2e:a5:af:0f:
                    85:e0:6f:87:0f:89:90:43:5d:68:96:ae:a1:61:47:
                    9b:7a:97:23:32:a4:14:be:56:a7:81:e8:b0:ba:dc:
                    33:d0:79:d3:aa:a8:96:61:36:23:d0:ea:48:9e:81:
                    d0:b1:27:e4:fb:41:1a:c6:e4:1a:e4:8a:a5:59:0f:
                    61:0f:ab:a0:97:05:db:19:3b:d6:6e:af:81:7b:46:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0A:88:E6:8C:13:BA:84:07:B4:9C:72:AD:65:D2:D0:66:7E:00:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:10:8b:93:15:a6:42:2d:2d:98:d7:d7:62:c9:e6:96:df:d7:
         f0:ff:9e:c8:8d:ce:98:3c:64:a9:7a:db:c8:fb:33:fe:df:31:
         92:5b:bd:38:5e:c0:19:29:bd:33:e6:fb:0d:35:39:c3:1a:ca:
         8d:5f:6a:ca:42:bf:05:95:ad:24:75:8f:55:25:7e:64:45:7e:
         cb:53:98:08:25:26:8a:1b:a8:7f:22:9d:25:31:ac:bd:a4:91:
         f4:29:5e:74:20:97:c5:59:b7:da:2e:11:c3:18:29:5a:64:24:
         dd:42:e5:55:c1:e2:8b:c9:90:88:b7:f1:76:68:f4:c6:15:f0:
         2d:59:c9:71:8a:f9:ea:c7:ec:31:99:7e:f4:db:44:cd:30:cc:
         93:62:fe:53:92:71:69:3b:99:78:57:06:cf:29:f2:6e:cd:a5:
         9a:61:16:c2:bd:85:75:60:63:93:69:66:34:f2:92:30:78:71:
         57:d6:76:01:2e:6a:f1:51:b4:1f:23:f2:9f:8e:aa:e6:f7:f1:
         05:56:e7:40:48:52:8e:d1:05:29:6c:06:99:b8:c3:78:58:29:
         ea:dc:d0:f0:88:9d:ec:84:db:54:99:d0:b6:40:97:53:e1:c9:
         bc:3d:d1:8a:fd:5b:26:4e:8d:7c:e2:9a:e6:ee:9a:8c:da:06:
         4e:68:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:31:56 2024 by rpki-client on console-ams.rpki-client.org