Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa
File:                     6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa (raw, json)
Hash identifier:          eFAhYaz23mFOPq67zhVNul86konMT8NylpQoTwn3Qic=
Subject key identifier:   8B:F3:A4:68:F2:65:42:84:F6:4C:5B:F7:99:79:89:4E:20:A3:67:86
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584566BDAFE591377FE24C371A40
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        162.247.216.0/22 maxlen: 24
                          139.60.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:af:e5:91:37:7f:e2:4c:37:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=544e3ca4-5e97-466b-a4b6-1a21b353d3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:23:01:52:2d:84:4d:4e:d0:87:0c:62:ab:
                    07:26:22:5b:05:5f:d2:4a:e7:c3:32:e5:f2:e1:bf:
                    cf:85:01:b0:6b:d0:d3:45:64:6d:67:6b:5b:49:72:
                    6d:54:47:1c:87:60:a4:2b:b4:5d:a8:60:92:fd:b0:
                    89:35:5d:04:a1:eb:2b:02:1c:23:f9:df:00:80:a9:
                    6d:7e:46:c1:35:1b:2b:b0:5b:20:61:19:66:95:01:
                    dc:c5:85:56:fe:fb:96:a7:21:ee:1e:38:dc:f6:d1:
                    b1:bf:14:07:47:4b:94:e3:2e:bc:cc:23:fb:05:a0:
                    26:d5:a1:54:e8:e2:73:1e:d7:b9:8f:6f:54:77:9b:
                    fb:ce:42:8a:4f:f8:e8:39:e0:dc:8e:3f:a1:40:54:
                    5a:44:2a:8d:2c:89:c6:3b:db:c1:5f:88:bf:0a:9f:
                    b4:5f:79:fe:4e:15:38:f3:c4:20:e2:f1:b3:eb:db:
                    db:dd:5b:0d:d3:74:ba:bd:56:31:4d:a3:b2:72:86:
                    c5:25:2f:83:97:5b:4c:21:d8:09:d0:bb:e4:54:c3:
                    4d:b3:fd:dc:4f:17:92:55:ae:b0:e3:b7:40:a9:a8:
                    b0:ce:1c:30:e0:d1:c4:17:35:90:8a:aa:50:63:65:
                    c4:1a:f6:d1:a6:33:79:23:3b:cc:ee:7b:b8:97:82:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:A4:68:F2:65:42:84:F6:4C:5B:F7:99:79:89:4E:20:A3:67:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:97:ef:f9:99:8f:03:38:63:f1:0e:5e:d2:2d:ac:7e:86:a2:
         d0:5f:bc:27:09:5f:d0:b2:37:69:4a:12:c2:56:fd:0f:03:36:
         52:14:42:76:38:9a:e5:bb:70:6f:dc:43:21:37:a8:c0:aa:82:
         8f:b3:5e:c8:0c:96:22:03:fa:27:29:f3:5f:4f:b3:57:9b:50:
         31:c3:5f:c1:0d:0c:e3:13:e8:ae:b0:fb:06:1f:09:14:79:b4:
         35:b1:63:5c:74:d6:7d:d7:df:b8:95:f3:c1:3c:72:3a:44:b9:
         86:f9:c9:22:4b:1d:70:3f:e5:b5:51:45:9a:47:b6:0d:f1:c1:
         20:74:e0:99:95:98:2a:79:47:65:0a:c0:56:26:de:7a:a8:41:
         b6:9f:60:0f:63:81:09:0f:91:2b:66:03:74:60:89:21:67:fa:
         f8:41:a1:13:82:90:b7:ff:d8:a0:ff:c9:c2:29:a9:5a:fd:c8:
         b7:fe:32:09:17:a0:ed:32:8e:12:40:2f:e1:58:97:03:fe:3e:
         d8:d2:a3:1f:3f:06:19:53:08:0b:ea:e1:4a:50:7b:32:78:cd:
         ee:f0:99:8c:12:b3:3f:80:19:4b:d6:35:a4:8d:6e:1b:1b:5b:
         b5:e4:2a:47:5d:56:9a:3f:85:5e:b2:ab:4b:85:7f:e5:1e:84:
         bf:7d:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:16 2024 by rpki-client on console-ams.rpki-client.org