Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
File:                     204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (raw, json)
Hash identifier:          3WLiuFL48PrhG6h1BGVSMrSUGpnJi8Y8XAFki9T7i4c=
Subject key identifier:   99:EB:85:9D:DA:51:BB:8E:6C:C9:1D:0D:C8:DC:85:FF:D2:36:A5:2E
Certificate issuer:       /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial:       010D0C9F4328584757AB70CE637989BB49EE511E
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     53589
IP address blocks:        199.16.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:70:ce:63:79:89:bb:49:ee:51:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=0c52b9c8-a5dd-4ab7-a3ed-517971f33f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:65:81:2a:86:16:49:16:c4:61:8a:91:d4:
                    e4:89:0a:91:20:a5:cb:63:e3:2a:ef:78:37:fd:fd:
                    a6:bb:9b:e6:11:87:42:fc:d1:90:66:5b:b5:bf:56:
                    f7:01:eb:61:d1:1a:20:f8:56:f7:08:c4:7d:db:60:
                    7c:97:08:d1:a6:52:fb:d7:0b:63:7c:63:d0:47:4d:
                    dd:b0:7d:d6:5c:bf:cf:49:44:8c:42:b9:df:b6:44:
                    1a:7b:65:ed:b2:5d:c3:64:87:f6:ad:22:e5:15:c1:
                    83:62:e9:f2:5c:ed:d7:70:31:f0:08:08:7b:d4:9d:
                    16:f3:12:92:6f:91:be:92:a5:14:9f:7c:34:75:97:
                    41:fb:a7:44:bd:f7:2a:d4:17:00:91:8d:a2:cb:07:
                    eb:a0:4f:b5:87:dd:37:81:6d:2f:7b:04:4d:35:6c:
                    0b:e6:16:80:c5:a6:8a:cc:75:2a:4c:59:58:4a:4d:
                    7e:c4:91:61:65:f3:91:35:0f:0c:70:c6:2c:d2:d9:
                    af:a9:db:88:ef:e1:d9:6f:20:7a:a1:42:71:6a:82:
                    23:de:4a:b5:d8:2d:70:61:2f:6c:7a:1f:c1:31:69:
                    5d:5e:6d:7e:22:51:5f:6b:42:c1:ce:c4:b6:b6:68:
                    f4:8f:84:86:ec:2e:c9:b0:37:82:42:be:3a:f1:91:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EB:85:9D:DA:51:BB:8E:6C:C9:1D:0D:C8:DC:85:FF:D2:36:A5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:12:c0:b7:5d:80:17:8c:db:29:f5:62:7c:bd:c6:71:d7:
         6f:ba:10:e4:de:8b:8b:1c:73:ed:ff:3c:30:9d:73:f4:b7:e3:
         15:a2:1a:d0:4b:b1:2a:7b:12:88:c1:ea:7e:e6:cc:62:fe:94:
         1e:5c:ea:37:f1:2d:92:db:b3:69:90:62:99:9a:d2:a9:00:3f:
         07:33:5c:f8:fa:e0:53:07:70:70:c9:33:bb:69:16:52:5c:68:
         75:34:1f:14:8a:34:66:66:30:8c:bc:1f:d0:04:f3:58:13:18:
         7e:13:2f:67:46:ed:18:c2:ac:8a:31:9e:2d:91:39:e8:2b:64:
         90:a9:77:4d:b2:6b:f5:15:2e:c9:a8:2b:b8:bc:bf:d9:7a:f6:
         03:06:2d:5f:fc:1d:46:e9:02:b8:9a:13:27:88:71:20:cd:4d:
         d1:fa:30:03:94:9d:42:ba:f4:99:2e:60:49:d8:01:f1:f4:26:
         df:7c:c7:17:b0:c1:86:02:61:bb:78:ca:3e:af:ed:7d:76:71:
         bd:fd:ff:85:98:32:6a:58:c3:9c:df:d4:f4:5a:24:06:c9:3c:
         5d:45:84:f9:b6:da:c0:e9:3c:45:10:95:7b:ce:8e:f6:54:61:
         ca:f9:da:cf:8a:24:40:68:1f:70:ad:23:a5:81:c8:36:d3:3a:
         47:6b:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:10:01 2024 by rpki-client on console-ams.rpki-client.org