Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/6bada036-d341-3347-a9fe-981cd6ea35c3.roa
File:                     6bada036-d341-3347-a9fe-981cd6ea35c3.roa (raw, json)
Hash identifier:          ZGkeACHrCjvGIzcyoVlG235SySLXF4eGAMEeobxTt9I=
Subject key identifier:   1E:47:6A:85:05:22:03:3D:81:47:68:2B:20:54:77:FC:D3:AC:28:1B
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285845777DCA8C3E201BEAAD881E80
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/6bada036-d341-3347-a9fe-981cd6ea35c3.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        143.244.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:ca:8c:3e:20:1b:ea:ad:88:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=d26111c5-c3fe-47be-b7d0-87fd81a03a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:a1:70:6d:ce:21:06:31:9a:ab:78:b9:f2:
                    3f:fe:eb:34:7a:38:22:2a:35:81:3e:cd:26:a1:b0:
                    2d:9d:94:5e:dc:eb:93:e9:97:f7:9f:50:aa:1b:f4:
                    55:62:a8:a5:e5:7c:a7:a4:ee:bd:54:86:ab:7e:8c:
                    7b:00:75:ec:df:a0:5d:05:5c:62:da:97:bf:0a:3b:
                    9b:2a:49:56:6a:21:2e:50:60:f9:79:2b:0b:96:c0:
                    93:a0:80:ef:38:79:7d:0b:ec:eb:d2:0b:fc:b8:8c:
                    62:59:84:6e:50:12:40:80:32:9f:24:07:99:c1:bc:
                    cf:d4:10:32:20:06:2d:49:21:17:8c:1e:6d:0f:b9:
                    62:3b:8b:0c:dd:6b:0f:4f:55:0d:fa:ae:1d:8a:bd:
                    7a:37:dd:65:8b:d0:1f:86:b3:22:7b:65:52:63:7c:
                    d0:c8:d8:32:0b:9f:10:34:9e:d3:11:7d:29:a2:7f:
                    5a:8e:4b:bd:53:6e:f5:01:c4:ad:b2:a7:3d:6e:ea:
                    e5:28:96:16:d0:9f:95:1f:09:d2:f8:3b:32:47:ef:
                    fc:e0:90:5e:15:32:5d:54:b0:c5:96:ed:3e:e0:e5:
                    44:c0:47:08:51:8d:52:00:1e:0c:a5:fe:a9:f4:42:
                    1e:82:22:ba:37:bc:53:0f:b8:38:cf:aa:81:81:34:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:6A:85:05:22:03:3D:81:47:68:2B:20:54:77:FC:D3:AC:28:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/6bada036-d341-3347-a9fe-981cd6ea35c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:d4:9c:ce:08:74:d4:3a:0e:0c:6c:c4:22:e5:9c:5f:92:
         c2:a4:d8:36:e0:a9:a8:a1:9d:1f:57:0e:5d:f5:9f:c3:69:a6:
         91:9f:ed:6b:f6:ae:62:3e:d6:58:0b:e2:a6:48:e4:32:0a:3e:
         55:f8:b9:32:e8:55:33:3c:34:a7:ec:75:20:c0:38:cd:0e:44:
         1c:93:42:70:04:41:23:71:dd:e6:7d:f1:c6:3f:76:02:6f:cb:
         27:de:35:1e:fa:d5:61:80:78:09:71:93:b3:5f:25:c4:56:bc:
         0e:d9:fe:8e:a7:55:3e:c6:5f:94:aa:73:b6:34:d1:43:c8:99:
         a6:d6:9a:6c:f4:52:ed:a5:8c:c5:85:09:d3:b7:b4:e4:93:d8:
         68:8e:9e:ab:bc:90:18:26:d4:60:44:93:14:4b:3b:5b:e8:8c:
         93:62:3a:80:8d:d1:6c:59:cd:68:0d:a0:53:5c:c0:e8:83:db:
         a6:a0:a3:69:27:20:90:25:0d:9d:c2:c4:4b:34:2e:65:58:d0:
         0a:9f:cd:75:7e:67:50:70:c9:cc:c7:89:de:75:63:36:39:f7:
         99:58:74:2b:08:c1:8c:6c:be:80:fa:9c:e8:00:2e:09:bd:f5:
         e6:3d:84:5d:92:57:51:0c:fc:4d:76:5d:55:37:13:4b:46:f8:
         ed:7c:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:29 2024 by rpki-client on console-fra.rpki-client.org