Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa
File:                     3cc8c09c-1655-353c-9029-9838f4886d8f.roa (raw, json)
Hash identifier:          dq7zMb6ezopTuXh9mIfxIRw/dFnzfbOX1OSRlawU/XM=
Subject key identifier:   F6:EE:53:84:A7:67:6F:16:5E:13:C0:06:57:AA:3B:82:4E:1A:18:DE
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F432858450C20265FC2F187FCC73FA080
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     3756
IP address blocks:        199.110.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:26:5f:c2:f1:87:fc:c7:3f:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=3dad89f1-a099-4e56-a919-fd3aaaf80002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:4b:45:a3:b9:db:7c:07:e3:43:ff:af:16:
                    96:7f:c8:26:7d:41:17:66:cb:b5:07:0f:46:4f:b0:
                    74:54:78:d8:2c:48:09:42:6d:eb:fd:06:8e:bb:3e:
                    cb:8b:9f:4d:1a:ac:e4:84:79:c1:a9:09:b2:82:35:
                    d5:19:82:1e:7a:a1:1f:1c:97:4f:4b:73:d0:d2:36:
                    7c:3d:3a:22:ab:0a:53:1f:0e:f9:8f:09:36:fa:e6:
                    84:06:97:da:be:2b:8a:b5:6d:70:fc:34:dd:bb:61:
                    dd:2c:1b:ff:11:92:1a:43:ac:fc:de:d6:a4:61:46:
                    1b:55:3f:ce:ac:66:92:e4:ba:7c:24:7a:93:b2:cb:
                    89:8a:45:2f:96:52:33:bf:f4:13:29:95:f1:e8:ef:
                    12:ea:8f:a9:22:1a:17:37:ab:b3:d7:7f:94:16:dd:
                    30:61:88:8a:9c:3c:e9:a6:30:7b:20:be:a9:f0:a2:
                    7d:94:8c:99:82:17:a0:99:c4:cd:be:23:d3:78:56:
                    d9:63:ba:89:3b:ea:cd:0d:f1:1a:e0:5f:32:ec:90:
                    cf:a1:a0:f5:31:38:f0:18:7c:b0:c3:f5:7c:a6:b0:
                    8d:6c:63:cc:f4:8b:fb:fe:e0:f6:47:b8:d2:fe:e3:
                    07:88:55:bf:01:22:5a:9e:5c:b5:67:13:b9:98:86:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EE:53:84:A7:67:6F:16:5E:13:C0:06:57:AA:3B:82:4E:1A:18:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:e6:fd:d4:d9:5b:23:7d:11:6f:c9:11:f9:be:31:0d:e6:
         80:d4:97:4b:8d:3a:76:2f:3d:87:59:f7:f0:8a:10:09:31:d9:
         6f:0a:c3:9e:49:d9:02:3a:ae:9b:03:65:dd:57:d2:88:27:45:
         ab:71:d2:ce:f2:66:7e:56:e5:20:12:45:36:bb:c2:d6:b5:43:
         ce:4b:fe:52:4f:7a:6f:dc:34:6b:e5:b2:ce:04:04:93:cd:23:
         c6:98:3b:c0:15:50:8f:42:49:f7:46:92:c4:46:ba:83:72:87:
         04:01:7a:8b:01:aa:e0:12:e6:80:bc:9c:d6:60:28:18:85:bd:
         52:23:51:b4:74:cc:b2:ff:b1:19:55:44:6b:93:a6:b4:54:8f:
         ef:98:e9:39:0d:46:b9:00:e5:c2:02:86:8f:f1:56:1f:01:07:
         63:36:72:27:61:d6:2e:e1:cb:5c:63:84:b7:30:57:a9:9a:c6:
         a7:f3:0f:2a:dd:2c:5a:83:fa:24:11:15:2c:80:4b:b4:af:4c:
         3a:58:d5:da:36:97:2d:09:d0:51:84:ff:82:72:7e:1a:e3:b5:
         9a:4d:16:b2:71:74:ba:02:1a:e9:17:e3:aa:ef:fb:df:fd:81:
         a1:23:a6:8c:af:56:d9:77:9d:e0:d9:52:19:c4:f0:8b:90:9b:
         ae:fa:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:30:40 2024 by rpki-client on console-fra.rpki-client.org