Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa
File:                     ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa (raw, json)
Hash identifier:          lHCWVImHf+J7yzq3ZBGBMm78d01zYGp8mGA05eYm7lM=
Subject key identifier:   B7:31:B9:59:C1:3D:D0:86:CD:B6:62:E1:3C:2A:9F:57:BD:27:55:4B
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584563F2FE4924060D2679935D00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     1403
IP address blocks:        198.16.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f2:fe:49:24:06:0d:26:79:93:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=68c66a39-ffdb-4a9a-900f-3802d0c6b276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:f1:a4:71:94:2d:a8:8f:1e:cc:fa:54:a8:
                    9c:82:59:a4:00:0b:f8:25:7b:6d:49:ed:8e:2c:e5:
                    1e:e6:d5:8f:20:8f:93:6e:fb:22:62:c3:34:7a:f3:
                    80:35:e3:17:b9:21:0d:eb:5c:bf:6d:96:6f:1a:3a:
                    41:3d:e2:7e:72:e9:e7:6b:68:25:58:0d:fe:e2:4e:
                    23:c4:f6:43:f2:1e:2a:be:27:68:d3:d0:ce:b5:53:
                    91:69:77:9d:f3:03:04:ce:dd:5d:72:91:c2:68:60:
                    10:e0:f3:6c:61:ba:45:a0:a3:68:fb:2f:36:88:9f:
                    f0:ba:15:6a:53:1a:ae:4c:1a:69:01:df:9a:4b:26:
                    19:0e:03:f4:c7:22:df:a9:a7:55:96:3f:4c:5e:be:
                    1a:5d:c1:5e:ab:68:2e:15:eb:42:18:27:8c:d4:d1:
                    5b:55:77:8a:d0:8a:c3:f3:c0:04:60:cc:d2:dc:d5:
                    c6:36:f4:7f:b2:60:17:b7:73:c6:d0:97:b2:94:2c:
                    12:7a:8b:92:0b:54:00:4c:52:3a:f2:29:3c:77:ca:
                    2c:50:83:90:ae:ee:41:3c:e4:7a:34:f9:87:5e:91:
                    db:76:8f:78:f9:2f:4f:f5:8c:b9:b9:3b:e5:8c:45:
                    29:59:b0:e6:fa:02:51:af:ea:19:da:3e:f8:86:3d:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:31:B9:59:C1:3D:D0:86:CD:B6:62:E1:3C:2A:9F:57:BD:27:55:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:a4:fe:0f:eb:02:c6:14:c7:15:cf:c1:fa:93:c0:b5:d2:
         91:0a:e4:ce:5a:82:cc:68:b5:38:e1:70:67:f9:be:12:c2:cc:
         a4:a2:c0:c6:70:63:96:3e:ee:96:47:84:2d:c8:be:19:ec:67:
         f0:2b:0f:c5:3d:c3:14:52:e4:be:82:46:79:67:b2:5b:a9:1c:
         d8:64:5b:85:8c:ad:26:5a:bb:cf:77:81:0e:fe:ad:4e:8b:0a:
         af:17:65:25:69:2f:05:c0:01:ab:bc:44:a6:35:2b:29:9e:22:
         e5:df:01:fb:b8:3c:92:8a:0a:7e:20:8c:53:0e:3c:a4:66:76:
         5e:dd:f0:6d:d7:09:9e:0e:b5:1a:4e:3c:69:6f:a8:a4:cb:5f:
         b6:f6:15:9e:1c:04:a2:d5:a9:74:e9:bd:6b:25:b0:aa:74:f4:
         4b:26:ce:29:3e:8e:33:8e:a0:ab:61:ef:68:1a:14:e4:bb:ca:
         e1:32:de:a8:3c:d3:11:c9:21:19:aa:bd:ac:77:a7:9d:c0:01:
         dd:be:a1:00:4b:18:1a:58:da:b6:23:d1:26:95:aa:0b:2a:05:
         85:34:15:4d:5f:c2:c6:d6:80:0b:c9:5a:f2:a2:0f:07:49:07:
         ed:96:f6:76:bc:2c:c2:54:5b:b2:48:80:14:f5:64:b3:16:42:
         f8:7e:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:02:36 2024 by rpki-client on console-ams.rpki-client.org