Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/e4b2057a-af76-374f-ae46-35833af25c64.roa
File:                     e4b2057a-af76-374f-ae46-35833af25c64.roa (raw, json)
Hash identifier:          vd99EFg0o/Fp0HQppMGBJ8gJ2F+ntqa2nqmSDxqA4/k=
Subject key identifier:   5F:A4:6F:8E:45:9E:5D:B3:3D:0A:95:34:F3:18:86:E1:3D:46:7D:B8
Certificate issuer:       /CN=7e488bf9-7470-4c89-8aed-6849e5450eee
Certificate serial:       010D0C9F4328584561286A214B0070B70B18EE10
Authority key identifier: B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/e4b2057a-af76-374f-ae46-35833af25c64.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     19566
IP address blocks:        69.58.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:6a:21:4b:00:70:b7:0b:18:ee:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e488bf9-7470-4c89-8aed-6849e5450eee
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=2da3be19-7fb2-41f3-95d8-47769d54df3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:dc:c7:ec:e0:fd:c0:00:37:08:db:f5:ba:
                    81:c1:f1:58:0b:29:15:38:a3:e2:bf:53:c0:de:ee:
                    0c:94:9c:9c:89:48:40:a2:54:c3:08:89:39:b2:b4:
                    ae:f4:dd:19:88:8f:c7:40:9e:1b:f0:e1:07:f5:79:
                    56:cb:54:c6:a5:3c:bf:43:a8:7d:1f:af:82:47:ed:
                    68:37:76:b1:b1:5d:44:2a:96:dc:6e:e1:08:29:96:
                    c3:d9:5b:ff:d0:9c:f1:87:37:56:cf:5f:2a:71:d5:
                    8f:06:a9:d2:8e:b6:9b:9c:4d:dc:a3:68:68:b2:96:
                    e0:c6:b0:84:dc:3b:7f:67:c6:ac:f6:85:cf:93:d5:
                    9f:a8:41:a1:0c:cf:bc:a9:3a:eb:69:b3:30:30:af:
                    bd:d2:69:9f:d6:2e:e3:5d:79:11:36:8c:7f:d4:70:
                    de:f2:81:90:f2:19:3b:3b:5e:aa:7b:f0:4a:f6:24:
                    5d:4c:4c:2e:07:54:e6:08:d1:6c:7a:fa:85:b9:76:
                    a0:c4:a9:f9:9f:4d:84:73:0c:e5:69:2f:a0:c1:3a:
                    3d:6a:a0:4c:08:0f:20:65:bb:42:75:ee:2d:d5:6c:
                    01:f5:7d:b7:0e:f2:c4:f8:49:08:07:75:ed:d5:aa:
                    1e:c9:77:cb:0d:5c:09:eb:a1:d9:5f:c4:5b:ca:b7:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:6F:8E:45:9E:5D:B3:3D:0A:95:34:F3:18:86:E1:3D:46:7D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/e4b2057a-af76-374f-ae46-35833af25c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.crl

            X509v3 Authority Key Identifier:
                keyid:B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e5:e1:47:08:54:2e:f0:c4:9b:80:83:65:85:91:f0:68:3b:
         ee:d9:20:19:c0:21:b1:37:43:23:37:c5:f6:55:15:9a:e9:cb:
         09:aa:b2:f6:e9:ba:26:6e:f5:63:3d:6e:5c:13:9b:d9:df:e4:
         3d:49:df:28:bf:6c:df:81:d2:c6:2e:5b:39:24:35:6d:58:48:
         72:83:f3:a9:ae:ae:e7:ee:12:a5:db:0a:ba:05:0d:37:d8:fe:
         67:6e:60:dc:45:88:26:86:5d:8c:ef:59:33:cc:9a:94:fe:05:
         e8:08:af:26:dc:be:8a:80:bd:b2:a9:cc:08:50:ee:47:12:ec:
         71:95:74:8b:02:3a:d9:ca:bb:f6:86:db:0a:98:83:bf:06:3c:
         a3:2a:47:aa:3f:b7:a1:f2:61:fa:47:42:ef:cb:2a:1c:c3:91:
         5e:2d:ed:f7:a1:c8:e9:b7:4b:c4:f9:e2:e6:8c:28:5e:a5:73:
         c0:b2:e6:47:b6:d7:a4:80:b4:4c:32:2a:4a:7c:e0:5f:48:8f:
         a5:11:c8:bd:b2:c8:63:3a:26:80:02:18:5a:83:fd:02:9b:54:
         d3:3c:01:21:74:b8:69:b1:9e:6e:9f:7d:9b:37:83:dd:2c:99:
         da:ac:65:0e:98:34:95:56:8c:e7:52:d9:c9:b3:0b:2a:d9:e7:
         b1:8d:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 03:52:10 2024 by rpki-client on console-ams.rpki-client.org