Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa
File:                     83a858c1-7f35-3305-b7cf-259902de0fdb.roa (raw, json)
Hash identifier:          9JkLMW4bhhvm2zap//ePPL0qBItEuRY6as8La0c8Ifs=
Subject key identifier:   1C:0D:43:1C:BB:13:2D:C8:06:E7:63:91:DE:15:EB:C8:69:96:A6:53
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845DA98EF219B8C9DCC9A054C80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa
Signing time:             Mon 13 May 2024 01:00:25 +0000
ROA not before:           Mon 13 May 2024 01:00:25 +0000
ROA not after:            Sun 11 Aug 2024 01:00:25 +0000
asID:                     11232
IP address blocks:        209.169.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:98:ef:21:9b:8c:9d:cc:9a:05:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 13 01:00:25 2024 GMT
            Not After : Aug 11 01:00:25 2024 GMT
        Subject: CN=fe2bac30-bd3f-4695-95d1-ad019ba12938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:dd:4b:42:63:27:fb:6d:51:49:71:21:11:
                    64:0e:d9:e0:e5:fb:46:99:42:6b:f4:9b:62:13:0a:
                    5b:da:1d:06:b3:01:b9:e7:73:a3:d8:aa:9d:74:70:
                    5a:21:02:9e:05:55:0b:54:18:f2:d0:55:d1:70:e0:
                    eb:7e:37:43:c5:02:4c:64:36:61:04:9d:bf:b8:0e:
                    00:61:13:62:b1:fe:ec:c1:6a:33:b4:10:2e:7e:6e:
                    8b:3a:de:64:8b:ed:9e:60:3a:7b:6a:2c:ff:e2:2e:
                    db:7a:36:48:e7:ce:e2:bb:ce:2a:9c:cd:71:99:44:
                    2f:66:89:73:5e:fc:3b:48:a6:3d:54:83:b7:4d:20:
                    94:06:7e:d3:05:12:b0:bc:db:67:ef:56:3c:ec:76:
                    1b:be:36:e9:2b:d0:a1:30:05:0a:43:90:43:ae:9a:
                    59:c0:bb:53:c6:94:a7:b9:fd:2f:93:39:b7:e2:71:
                    6d:f5:22:82:87:76:c5:58:01:78:87:53:4b:f4:b5:
                    f7:89:37:68:72:c2:d4:b0:6e:3b:cc:2f:0a:1f:01:
                    a4:bf:5e:b7:e3:91:52:21:df:3a:17:9b:d5:a6:68:
                    d6:8c:29:53:a2:dc:2e:6c:98:d3:af:a1:0b:12:61:
                    50:86:ae:f2:e3:74:f5:cd:26:88:14:01:86:c2:f3:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0D:43:1C:BB:13:2D:C8:06:E7:63:91:DE:15:EB:C8:69:96:A6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:24:10:23:1e:5f:55:dd:d4:f5:88:5d:a6:c8:6b:23:5a:
         43:df:40:98:fb:75:0b:fc:4e:ec:d8:24:c3:a3:22:6c:98:2f:
         22:3e:97:7f:e7:c0:38:be:e6:e4:98:33:fe:70:b1:60:1b:66:
         27:f1:9d:08:73:21:d8:41:ec:52:4b:68:fc:88:09:7f:0c:51:
         ae:1c:9f:b3:20:82:41:ea:ce:4b:22:71:06:25:38:d9:d5:21:
         50:f9:b7:76:54:c0:3b:1a:3b:94:8a:88:53:61:bb:1f:78:88:
         8a:4f:ae:36:dd:ee:92:2d:05:27:b2:f8:96:1c:d3:25:76:e9:
         26:6f:77:84:fa:46:a6:88:d0:0d:32:7f:82:41:85:ef:d1:b9:
         e8:04:6f:8e:67:8f:5e:7f:71:46:05:6e:3d:5c:5c:55:1e:bf:
         9d:c1:f7:23:94:39:c5:a2:80:5f:19:39:02:76:31:19:00:b4:
         c8:87:79:78:8f:e6:b5:7a:95:59:93:76:ca:c5:e3:2a:ce:0f:
         93:0f:a0:f4:2b:f3:a4:66:16:26:76:94:93:c2:26:d4:4e:c5:
         84:b1:14:0e:8c:25:68:dd:56:b5:b1:69:5e:6a:96:7f:0a:e5:
         dc:54:55:c0:2d:8a:b1:62:ca:4a:bd:fd:e1:c1:0c:ac:f8:de:
         10:37:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:56 2024 by rpki-client on console-ams.rpki-client.org