Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
File:                     2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json)
Hash identifier:          PaLTy06vtKd4sSTWrS5KP6u0nAs/zouONm2VYP35RRE=
Subject key identifier:   68:8C:A3:C4:48:07:23:DC:12:4B:B2:B3:D3:CE:79:C2:7E:31:C1:34
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B21E1AC977A86731389A2000
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        216.157.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:1a:c9:77:a8:67:31:38:9a:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=d8eaeb73-c9b4-41be-9ac0-153c87fd2409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:42:74:b7:d4:11:d4:53:32:02:8b:85:1a:
                    29:98:00:a4:4c:87:2d:05:db:c0:3b:93:ff:f0:29:
                    72:e4:96:e2:96:1c:a7:d1:2d:77:bb:7c:04:fb:05:
                    e3:1f:f6:77:3f:55:21:67:12:95:c3:2a:49:c8:49:
                    f0:2d:b4:5b:52:9f:2d:70:11:c9:bd:ea:16:25:da:
                    20:d5:49:bc:87:73:58:bd:54:2a:af:eb:20:8c:15:
                    bb:43:66:da:21:1a:43:0c:cc:b6:eb:f8:64:dd:0e:
                    a2:20:b6:55:a7:1d:c5:62:3f:cd:aa:f0:e1:5f:17:
                    31:5b:4f:28:6c:6c:a8:32:0f:86:8e:de:f3:70:d7:
                    d6:84:e6:db:17:1a:a1:4b:db:76:26:c9:89:ba:96:
                    1e:52:65:3f:99:aa:2a:3f:c3:10:cb:1b:2b:ac:4d:
                    69:20:cd:67:ea:60:b2:e1:01:9a:2a:48:57:b3:46:
                    5b:93:db:be:8e:e7:d4:f8:e6:18:f0:23:89:69:35:
                    10:60:73:31:a3:6d:2b:a7:47:31:54:11:c1:48:3e:
                    78:ed:ab:2a:14:07:39:c2:fa:48:a3:84:7d:79:27:
                    8d:e9:4c:5e:65:98:a0:ca:7d:b2:c2:50:a5:71:fd:
                    c9:48:67:03:be:c5:52:27:0f:33:13:af:8a:9c:24:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8C:A3:C4:48:07:23:DC:12:4B:B2:B3:D3:CE:79:C2:7E:31:C1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:86:70:ee:60:1a:aa:c7:25:37:fa:97:59:21:e5:bd:76:27:
         08:92:e9:b7:d7:62:7e:45:e1:4a:31:c8:69:d6:0f:c5:52:08:
         33:ff:d0:ad:03:05:75:de:a5:08:ca:18:8e:a8:2e:24:2a:81:
         6a:c6:62:8a:40:5a:3b:1f:94:b9:9e:73:04:ba:9a:97:83:97:
         59:fa:d0:c5:c3:e1:ee:b5:91:be:1d:da:f6:29:41:63:33:cb:
         9f:74:cc:9e:c2:99:dd:5e:ff:14:a7:3a:a5:af:64:92:0b:4a:
         79:11:29:69:e5:2a:7f:ae:21:61:cb:01:e6:77:6b:c0:bf:f6:
         f0:92:38:e5:01:ad:9a:23:f6:33:c5:15:77:90:39:6b:42:fe:
         9f:4f:26:c5:9c:45:80:9f:e2:19:2f:0d:9b:35:ff:be:dd:74:
         74:a0:24:fc:93:73:54:bf:40:fa:63:4d:26:d3:a7:0c:7d:86:
         b8:25:48:96:17:eb:a9:11:8e:62:c3:e4:bd:a7:19:1c:ee:f7:
         d7:43:7f:94:32:53:58:c9:f8:0a:a3:7a:11:cd:47:98:62:2c:
         26:42:2f:c8:ac:c9:76:04:89:d0:49:20:8d:6c:30:5e:83:ce:
         80:79:ce:71:15:6f:db:12:ef:f2:a8:29:a3:17:29:7e:22:a7:
         be:2a:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:53:29 2024 by rpki-client on console-fra.rpki-client.org