Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa
File:                     7c86a747-0c09-3aea-b1e5-eabbe5686568.roa (raw, json)
Hash identifier:          JUMigKivyD2TJQt/SpPxSsPrhTdZKjMT3RJbAJw85Ow=
Subject key identifier:   52:D1:CD:C4:D4:99:56:6E:38:AC:46:9E:48:14:B3:40:B5:93:F2:14
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285845068AC1741AA1F5DD6F39B0B0
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     3756
IP address blocks:        199.109.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c1:74:1a:a1:f5:dd:6f:39:b0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=8cc57d03-524d-4449-9d34-02686cd3a9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:7d:90:fb:9b:9a:78:b4:09:b8:89:46:e1:
                    33:ea:f7:7c:01:b1:88:7e:d2:95:0f:91:fb:a3:be:
                    da:4e:4e:1a:00:b3:02:29:6b:4b:6c:7a:bd:62:f5:
                    a6:73:ff:d7:25:8e:65:05:68:6c:f5:3a:68:8a:ca:
                    5a:91:71:2a:bd:01:2a:23:c9:e2:75:35:20:29:c0:
                    ac:c6:08:f1:03:be:45:db:21:5f:f0:68:67:d3:fd:
                    51:bc:94:a7:d9:f8:da:0f:1e:c5:fd:9b:69:d5:2a:
                    c0:05:50:a4:eb:2f:29:e0:c4:9c:4b:0d:bf:e0:71:
                    bc:24:f7:46:17:5a:7a:26:8d:d5:95:2d:fd:53:31:
                    5a:48:70:ac:e5:3d:69:c5:59:0b:de:a9:51:59:28:
                    07:a4:69:53:87:3a:a4:70:4c:52:fa:46:67:11:94:
                    c3:52:70:6b:fd:c9:a3:05:ff:1d:6d:1e:e4:d1:83:
                    9c:c0:6d:b0:4a:fd:98:01:f6:49:1a:93:da:6f:c8:
                    9c:f6:13:db:c2:67:d0:04:e0:42:20:43:02:41:89:
                    c5:f3:63:97:bf:ee:56:22:19:14:fc:4a:16:01:ad:
                    b3:27:ab:11:4b:c4:97:62:61:d7:84:91:c7:23:63:
                    3c:95:86:6a:71:1e:7b:65:6b:a4:fd:d2:3d:60:37:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D1:CD:C4:D4:99:56:6E:38:AC:46:9E:48:14:B3:40:B5:93:F2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:05:d7:3a:75:5c:c2:84:1d:ca:07:ea:2f:31:fe:de:90:
         18:1b:14:82:b9:c4:73:3e:35:de:a5:dc:3e:e6:76:1d:39:37:
         fe:45:70:16:aa:9e:3a:24:51:5c:f2:5a:ba:52:4c:22:28:0d:
         d0:79:16:1c:00:5e:95:0b:df:83:51:83:50:35:c3:1e:25:0b:
         8a:9c:58:d6:b4:6e:58:76:fd:e1:2e:d2:8f:d0:8b:ed:29:80:
         8f:e8:13:5f:c3:86:2c:bf:b4:72:31:08:41:7d:8e:29:bc:d2:
         cd:cd:22:5d:55:e5:b8:b8:f1:7c:4e:fe:a1:a2:bc:4f:9c:e4:
         76:34:af:b5:5a:7d:79:2c:85:91:c9:22:f3:b4:df:88:dc:0a:
         bb:38:85:28:13:ea:35:1e:c5:a8:78:4a:97:95:94:88:be:d8:
         83:e3:3b:2f:6d:42:a9:e0:8f:db:13:ad:04:b6:1b:69:ce:41:
         09:36:db:67:85:42:b5:17:17:15:47:24:84:7f:62:f2:81:47:
         1c:e6:7c:3a:ae:05:4a:5d:70:8c:0e:7b:80:a2:d0:22:95:4e:
         e7:04:42:eb:d9:29:41:20:97:96:3c:aa:fc:fd:2d:a6:82:23:
         6a:8d:4a:f2:9b:d4:46:dc:52:2a:82:03:b4:41:9c:54:bc:56:
         41:95:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:30:40 2024 by rpki-client on console-fra.rpki-client.org