Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
File:                     9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (raw, json)
Hash identifier:          X61N66eroVtsIRqMicOmJLbINzgAWqJq24WEmQZcp0E=
Subject key identifier:   CF:FA:71:B6:0B:0A:42:C8:5E:91:09:8B:7A:E7:EE:AE:BD:E9:94:D3
Certificate issuer:       /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial:       010D0C9F432858454D9D7B045119BCA6FF9086C0
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     16729
IP address blocks:        159.55.213.0/24 maxlen: 24
                          159.55.214.0/23 maxlen: 24
                          159.55.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7b:04:51:19:bc:a6:ff:90:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=700fbf0e-4862-4673-808c-236b03b9a149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:8c:e8:25:8e:76:5d:09:76:d3:db:d6:9b:
                    1d:f4:f7:73:d8:76:e1:aa:5d:00:3c:25:e0:45:12:
                    5a:b1:15:c6:ea:9a:a6:84:a3:90:ee:69:d0:5b:5f:
                    22:a2:52:eb:b4:c5:35:ab:9e:7b:11:9e:d8:c9:29:
                    01:c2:8a:0e:bf:48:c7:49:c3:b2:5e:a5:40:bb:e1:
                    67:9f:a7:85:6d:41:1d:60:cf:dd:59:d0:50:cd:5a:
                    a3:0e:cf:11:2d:21:53:66:00:b5:72:a9:4b:67:2d:
                    59:d8:fe:46:ba:73:54:b3:19:17:90:25:97:62:0c:
                    f7:d1:bc:d1:db:d3:04:15:84:78:8e:85:a9:cc:66:
                    56:70:5d:de:69:ea:f9:27:d9:88:77:b2:f5:15:d2:
                    56:3a:48:5f:b7:6f:8a:45:65:fc:a5:ab:27:fc:25:
                    aa:d7:e8:b6:c8:a6:05:96:f1:15:ff:f6:3d:44:6e:
                    a3:be:38:91:74:3d:52:bd:31:ac:05:72:05:4f:62:
                    11:0d:27:17:f8:60:49:8e:13:d4:e5:e8:f5:27:c5:
                    55:6c:38:5a:8e:92:40:c0:98:7a:90:1f:69:9d:3c:
                    60:a9:e6:e9:3f:ba:8c:27:f0:43:cb:ba:81:1e:ca:
                    87:53:79:4a:6c:bd:2e:e0:70:bc:b3:dd:fe:dc:b3:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FA:71:B6:0B:0A:42:C8:5E:91:09:8B:7A:E7:EE:AE:BD:E9:94:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl

            X509v3 Authority Key Identifier:
                keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.55.213.0-159.55.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d7:41:bd:d2:e0:5f:ac:e1:44:8e:c3:a9:49:58:11:da:ab:
         00:57:32:a4:8b:7e:4c:a6:dc:7c:b2:b9:78:35:3a:86:c5:38:
         52:86:70:e2:a5:e5:88:d8:eb:8e:63:2a:c9:3c:21:3f:59:b0:
         d2:2c:f7:50:84:82:83:f8:48:0b:1c:68:44:14:2d:ac:d9:2c:
         68:c4:1b:75:1e:14:4f:87:b1:83:8f:c6:c2:ab:d7:6e:3f:b2:
         ce:1d:69:c0:75:84:c1:ae:b7:b7:58:33:71:28:70:d7:0d:fe:
         b5:37:32:62:3d:f7:e2:61:64:50:a8:b1:87:8d:02:0b:75:c8:
         1b:11:8b:eb:fd:3f:8d:0d:0c:ad:3f:7b:f7:43:88:de:24:28:
         23:41:e2:9e:69:97:df:58:ad:5c:ac:51:93:1c:5c:9d:9e:40:
         08:98:f5:1c:03:cd:b9:70:74:ae:b6:10:79:93:0a:3f:c4:4c:
         c3:a5:67:d9:e8:9f:f4:80:94:96:07:58:64:19:8e:00:d1:ad:
         02:fc:de:81:9b:df:f3:5d:ae:55:4a:25:8a:3f:5d:d1:cd:f3:
         14:82:47:fd:63:47:5e:96:13:dd:7d:23:32:e0:11:cf:82:38:
         91:4f:fc:6c:e7:e0:4c:46:f6:ce:fe:4a:b4:0f:f9:dd:3f:4a:
         59:c4:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:13:18 2024 by rpki-client on console-fra.rpki-client.org