Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa
File:                     67680324-7caa-3bc8-a0da-d5b9782851fa.roa (raw, json)
Hash identifier:          AJmt/ICQHmQ3P6bdBh4rH2RMo3VgQPNMudVzE+aDJbQ=
Subject key identifier:   F4:3A:5A:B9:0E:86:6E:0F:F7:42:00:CA:00:1B:89:2F:49:CB:58:4A
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285845A6F3702EB7FA21F47C985000
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     32133
IP address blocks:        169.197.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:70:2e:b7:fa:21:f4:7c:98:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=98263080-dcb7-4ff1-9a12-42da113ac391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b7:75:62:fa:9e:a2:d7:9e:55:e0:6f:b2:4f:
                    58:b7:bd:8e:f9:79:9e:53:d9:ff:07:27:2f:e1:61:
                    47:21:a3:a9:5b:3a:4c:c2:90:12:be:d9:32:d3:2d:
                    83:29:68:31:92:ab:44:84:0e:8a:be:ff:2a:9f:19:
                    75:94:77:20:76:b3:e2:e2:eb:e7:49:74:4b:4f:81:
                    1b:37:3c:a8:74:ef:59:93:50:6a:f0:03:38:9f:97:
                    fb:77:8a:6b:46:69:46:7e:00:a6:4a:7b:8b:4d:03:
                    ff:5f:3e:5e:6a:7b:3a:33:5a:84:98:1c:36:11:3e:
                    45:85:c5:2f:43:80:44:29:a2:54:ab:9a:eb:8c:79:
                    44:85:99:67:76:0f:d9:95:32:63:30:ec:eb:fc:f0:
                    39:c8:6a:42:0d:a3:f1:5c:5d:d1:b3:78:6b:45:2c:
                    3c:0d:95:97:f1:50:fc:4a:ff:a6:b4:2a:3a:68:17:
                    66:fb:a1:be:6f:1c:ab:7d:90:d4:f9:bd:83:e6:2c:
                    b4:b4:db:73:80:e0:bf:4e:b3:df:5a:4d:c9:6a:7a:
                    75:3a:06:1f:9f:64:22:d5:15:01:c5:4c:6f:cc:33:
                    1e:fd:e0:39:95:36:2a:84:10:b3:65:ec:ec:2f:31:
                    2c:d6:ea:f7:c2:f2:40:0f:17:6b:9e:71:5f:13:ee:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3A:5A:B9:0E:86:6E:0F:F7:42:00:CA:00:1B:89:2F:49:CB:58:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/67680324-7caa-3bc8-a0da-d5b9782851fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e5:c4:ec:0a:d1:c3:a5:db:a1:1f:5a:6d:c8:94:72:56:29:
         ce:f2:fd:ec:5b:1c:77:c5:ca:55:76:50:87:74:4a:0f:44:af:
         b7:bd:03:a9:fe:b1:96:3b:b3:0c:e8:a5:18:b7:e3:17:f5:05:
         22:dd:8f:98:38:d0:f3:69:21:6f:2f:ad:c3:54:a9:13:06:46:
         f7:9c:b7:c8:db:1e:b5:85:bd:db:ca:87:c0:1f:4c:dc:a7:16:
         f7:2a:23:db:65:92:34:22:55:75:02:28:74:c1:d1:63:e5:ff:
         38:ef:b3:16:3f:48:85:13:32:b9:8c:8b:04:57:8a:04:45:96:
         3f:16:57:bd:e8:98:14:f9:32:e2:0d:e0:b0:09:e7:d4:03:75:
         31:2e:c4:fb:b8:b8:c5:75:94:14:12:04:46:eb:e3:a7:de:f6:
         cd:1c:f1:a7:68:03:d9:d8:a2:d8:24:84:7a:a2:45:94:d6:71:
         59:22:fc:ce:d6:fd:b7:21:2f:de:26:26:52:2b:e9:97:93:e2:
         76:08:87:8d:86:71:29:0c:20:33:85:47:1d:f1:4a:eb:04:b6:
         1a:6e:fb:65:4a:4e:b2:e5:43:8e:f5:8c:92:cc:48:e6:d9:b8:
         b7:fb:88:0b:1e:83:77:79:a6:07:a7:76:91:58:d9:80:3f:3a:
         2b:1e:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 00:35:17 2024 by rpki-client on console-ams.rpki-client.org