Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/a057d64e-57be-388f-8059-61700e3c0d4b.roa
File:                     a057d64e-57be-388f-8059-61700e3c0d4b.roa (raw, json)
Hash identifier:          gPIeKqCehteSzu+10HNYtSBEEUQmJJ3ae/EdCD39YlI=
Subject key identifier:   C1:6D:FC:A7:CD:8A:62:CD:3F:52:5A:D5:01:24:53:FD:86:BB:24:6F
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730EB6AEF1
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/a057d64e-57be-388f-8059-61700e3c0d4b.roa
Signing time:             Thu 02 Jul 2020 08:48:40 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     16509
IP address blocks:        72.167.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0e:b6:ae:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=b5cd7a5f-4bd8-45ee-ac64-572110a65f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:52:46:88:aa:f2:40:53:0e:41:01:13:a2:
                    f8:e9:aa:2f:45:bf:e5:eb:50:1d:2b:a3:13:30:71:
                    93:47:f5:c1:c0:37:d8:b3:13:7f:74:31:b0:b0:b7:
                    2a:ae:4d:8d:ba:69:2c:be:95:9c:6f:f2:8a:e0:dc:
                    29:13:13:75:dc:fe:5d:29:9d:e4:8c:5f:49:d8:9e:
                    25:c5:0d:67:4c:6e:92:7e:ae:dc:8a:de:b6:07:08:
                    0c:6c:c6:4c:f4:35:03:65:80:b7:38:43:59:eb:d7:
                    80:a6:8b:c0:00:01:54:d2:2a:c1:d4:96:3d:86:f4:
                    d9:66:8b:e7:83:75:93:f3:62:b9:eb:a5:02:b2:53:
                    2e:a0:a9:54:9d:fa:d8:6e:3d:7a:56:94:15:31:a7:
                    23:72:f6:18:f1:ab:c3:2d:72:b2:63:80:b7:8e:40:
                    56:86:c4:6c:13:6d:39:58:15:8c:6d:63:9f:2d:79:
                    57:5e:2f:a1:c4:3f:99:85:42:de:ab:c9:d2:b4:89:
                    5d:fb:74:52:28:32:5d:26:d9:a7:f1:cf:fa:d3:9f:
                    00:95:4b:6a:bd:71:8a:fb:68:4d:96:dd:6f:7a:7c:
                    96:de:ef:57:4d:f6:8d:94:98:89:e5:f0:88:31:dd:
                    70:5b:b4:d4:fe:b2:36:5e:e0:b4:64:68:65:1a:9d:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:FC:A7:CD:8A:62:CD:3F:52:5A:D5:01:24:53:FD:86:BB:24:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/a057d64e-57be-388f-8059-61700e3c0d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.167.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:11:f8:88:9a:19:f1:e8:65:78:e1:5b:21:b6:83:7e:db:fc:
         7e:15:68:34:4e:43:29:1b:2b:1e:3f:ef:79:21:23:eb:a1:d7:
         6f:dd:1e:a9:2c:e2:0f:2d:7e:4a:d8:4c:ef:2b:39:71:e8:50:
         d0:8a:ce:ad:2b:47:98:0a:bc:01:3c:9b:9c:eb:76:e5:bd:3c:
         42:9b:ac:22:b5:4c:ec:90:a8:1b:7e:f3:c7:66:e0:dc:0d:8f:
         32:b4:fe:e5:9b:01:af:21:07:23:18:0c:81:59:0e:85:42:67:
         ea:29:31:98:1b:19:3d:15:03:ec:d8:f7:6f:6d:c7:2b:02:19:
         48:19:05:62:a5:6e:46:2c:7f:a0:6e:37:cd:fb:d7:0a:9b:5d:
         b5:4f:9d:be:7b:0d:3d:a6:85:f4:68:59:87:6f:fd:cb:c9:2b:
         2a:a2:55:04:ca:93:0d:d2:81:61:34:d8:f7:fc:a4:eb:a5:23:
         e8:fb:fa:f6:4d:9c:cf:87:71:eb:e4:fb:83:ae:94:f0:46:a4:
         3f:97:42:9d:88:46:33:85:30:f8:22:91:5b:f8:49:65:90:13:
         85:b1:5e:83:89:f4:c0:21:c4:d5:d4:8e:2f:e7:52:cc:57:92:
         a1:c8:6c:ce:be:f6:e6:20:1d:ea:17:8f:2c:4c:ec:57:cf:b1:
         d6:5c:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:04 2024 by rpki-client on console-ams.rpki-client.org