Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa
File:                     02650ceb-0044-3d70-b562-731c5b82412a.roa (raw, json)
Hash identifier:          RNUIx4qhtH2kKNCvkYYjQ6HdPaVhu+8oGLVG7vuq6JI=
Subject key identifier:   2E:7C:9A:BD:6D:F0:A0:AC:C4:91:A6:BD:84:22:C5:F7:78:56:C0:50
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F432858473298A3530016BEAEC936B700
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa
Signing time:             Fri 13 Sep 2024 06:17:55 +0000
ROA not before:           Fri 13 Sep 2024 06:17:55 +0000
ROA not after:            Thu 12 Dec 2024 07:17:55 +0000
asID:                     16839
IP address blocks:        149.96.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:32:98:a3:53:00:16:be:ae:c9:36:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 13 06:17:55 2024 GMT
            Not After : Dec 12 07:17:55 2024 GMT
        Subject: CN=f4682316-6244-420d-88a1-005a3ba963ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:8b:12:ee:3d:c0:80:e9:9b:8e:78:16:35:
                    fc:c1:e2:cd:d0:47:7e:0e:55:51:ac:2d:76:90:1e:
                    7e:52:f5:a1:48:25:8b:e9:4a:47:b8:02:8d:47:a5:
                    71:d5:b2:5b:71:d7:de:36:a2:6b:bc:d2:dd:2e:82:
                    5e:8c:1a:c1:6a:5b:ea:c2:8c:6c:e7:d8:28:d6:54:
                    ef:9e:67:b4:b3:1a:8b:49:2c:26:b6:5c:7c:2b:a5:
                    48:08:04:0b:2a:2a:56:1e:8d:76:ab:13:30:67:35:
                    91:4b:51:a0:39:f6:08:ef:cd:ea:19:59:fe:ac:91:
                    93:cd:70:45:f5:15:cf:0a:ef:fc:d9:94:5a:5b:75:
                    05:92:5a:33:ea:82:c3:ab:f0:3a:79:3c:71:18:14:
                    10:90:b3:76:33:de:ee:da:d3:3d:03:4f:26:4c:37:
                    85:3f:3d:06:fe:fb:02:e4:17:24:5f:b6:52:e5:ce:
                    dd:d0:51:75:00:46:5b:15:33:28:91:72:04:73:96:
                    20:1c:f4:3f:b5:a8:93:41:82:2a:ff:c9:c3:2a:a2:
                    ad:85:9b:0c:6c:5d:55:e2:ac:83:e4:b6:1b:5b:95:
                    d5:ac:0c:a3:d5:89:35:a0:cb:c5:ed:16:54:e7:c2:
                    a5:84:91:b2:0b:23:16:15:97:4a:05:17:1c:ef:02:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7C:9A:BD:6D:F0:A0:AC:C4:91:A6:BD:84:22:C5:F7:78:56:C0:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:70:96:eb:69:a3:c1:74:42:b4:98:62:87:04:b2:61:00:27:
         70:7a:0a:52:87:b7:2b:f9:f6:82:f8:44:9b:22:b6:4d:9b:48:
         d4:ac:dd:eb:3f:8d:04:87:bf:b0:7f:1c:ad:52:51:d4:bd:0f:
         f1:f4:2d:55:d8:41:a4:15:09:5c:51:18:b2:96:d1:4e:77:d7:
         fe:0b:f2:5a:d6:97:db:3a:a8:66:71:09:a3:d0:8b:f9:51:d2:
         f5:8b:55:c9:e2:c4:ab:20:61:05:a0:fd:74:7b:d0:fc:e6:1b:
         61:03:8a:9f:00:5f:85:3a:0f:fb:a3:8c:01:3f:67:ce:e1:34:
         f0:45:51:ed:87:57:15:a2:ff:80:79:83:b7:2e:43:71:b9:90:
         40:d4:6b:2f:44:60:56:c4:83:aa:ef:be:88:ca:bf:82:08:f4:
         10:d6:a8:51:0e:04:7a:a4:d0:c9:ae:2d:46:c5:8a:12:18:02:
         f6:ca:46:01:3d:45:18:1c:b4:d1:51:cc:8c:13:8a:a1:22:14:
         aa:69:4f:5d:3e:8d:95:d2:b0:99:e7:75:7d:67:29:19:f1:5f:
         24:02:1d:af:10:38:33:f0:63:ef:9f:c7:31:00:7b:49:53:10:
         2e:c7:09:c6:f2:92:08:bf:43:d6:77:ba:cb:ef:a2:1c:0b:0e:
         fa:80:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org