Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa
File:                     58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa (raw, json)
Hash identifier:          +NwlDNSGcbk8NLpy1FRPxbhS9ZXXqfki6Jt9OtqiCqI=
Subject key identifier:   90:5C:C2:0A:8D:9C:B1:51:B3:3F:B6:7F:09:E5:6E:37:28:1C:A3:DF
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E1DD90EFAE69CDBB0CD80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        149.96.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1d:d9:0e:fa:e6:9c:db:b0:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=13dff738-8f7c-4ab4-b6be-e693da2f9592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:3f:ff:e2:a7:5f:b6:5e:e3:48:44:1a:2c:
                    91:f4:18:54:38:17:de:ee:13:84:53:16:2b:72:ce:
                    23:19:4c:97:9c:e3:64:94:5e:72:72:27:ad:23:33:
                    1e:bd:bf:c2:86:85:42:db:37:17:f2:97:c4:5c:8f:
                    a1:49:02:ba:1a:25:d8:e2:72:56:c6:5c:40:31:7a:
                    89:43:13:a5:5e:a4:fa:d2:b4:76:6c:31:24:cf:4b:
                    25:9e:17:0d:3b:5c:83:94:31:8a:3b:92:ce:08:90:
                    78:93:44:2b:45:36:db:f2:f8:f9:3b:77:86:1a:5d:
                    6e:8e:83:8c:83:08:42:ca:13:e5:19:fe:bc:cd:d4:
                    a1:81:b9:70:54:ca:8b:6e:a0:47:6e:03:b7:3f:81:
                    da:b7:b7:66:a8:89:4a:1c:9b:39:b1:65:76:99:6a:
                    d1:f0:57:79:45:f0:20:30:e8:b6:30:48:62:83:2c:
                    d6:78:ac:48:4a:77:b0:6c:b1:24:5f:26:ac:0b:b6:
                    07:3d:29:75:08:53:75:9f:cd:b6:be:01:a9:31:55:
                    41:91:fa:6b:b5:1e:c0:dc:5e:15:2c:28:38:36:e5:
                    8d:93:12:69:53:9d:3b:69:42:ba:e9:ef:50:10:f5:
                    f7:e6:02:34:f7:53:8e:22:89:66:fc:7f:5e:52:af:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5C:C2:0A:8D:9C:B1:51:B3:3F:B6:7F:09:E5:6E:37:28:1C:A3:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/58b61c4f-d981-3cb0-9bb1-db7fe9ab93cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:5f:62:42:6e:62:5b:26:c7:e2:f6:76:16:9f:ca:a7:75:
         19:ee:c8:64:c8:f2:7a:64:27:af:0f:2f:cb:39:00:e8:c3:87:
         d7:ec:72:9b:6a:d7:23:31:a2:59:b8:9f:67:f3:45:20:06:6b:
         b3:0b:b6:ed:c6:28:6a:56:e4:28:c8:17:50:93:54:91:2e:cb:
         76:db:07:b9:7b:fb:ef:93:f0:2b:d7:84:0c:9a:2a:e3:ee:e5:
         e7:74:03:9b:2c:64:ae:57:fa:54:db:1d:d2:65:32:f6:d7:6a:
         62:b0:01:1e:31:e7:2f:f9:04:31:55:09:6f:f2:b6:e3:ca:c0:
         50:98:11:a9:57:49:4b:b8:2b:5a:b3:7f:a6:e2:6c:5e:88:21:
         5a:24:17:31:12:fb:e1:b4:31:eb:b5:43:88:f2:ec:ea:fa:75:
         06:f8:8f:36:fe:7e:1f:1c:2f:bf:09:af:e6:18:78:af:13:bd:
         63:c5:22:61:ff:bb:6e:4e:c2:c7:ed:b3:df:84:d7:67:f9:43:
         d2:54:02:d8:a0:5d:63:a0:dd:9a:d2:3e:5c:c8:33:2a:0d:92:
         63:af:cb:72:26:c3:66:ed:a2:13:f1:27:8a:d5:99:e8:3c:e4:
         4a:80:74:a1:8e:79:19:f8:64:ec:83:c3:70:3c:14:26:b0:5a:
         1d:e5:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:19:35 2024 by rpki-client on console-ams.rpki-client.org