Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/879012e2-28ad-3c99-b2b5-7531023cebc8.roa
File:                     879012e2-28ad-3c99-b2b5-7531023cebc8.roa (raw, json)
Hash identifier:          86KhIXV0RyoSwUSOLvcMt9H7PPvapomfF4qL/lK01C0=
Subject key identifier:   E8:67:95:35:87:30:77:50:72:AF:6B:5E:13:CA:8D:09:0C:8A:4D:E5
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E1FDB809016D8D7BF6000
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/879012e2-28ad-3c99-b2b5-7531023cebc8.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        149.96.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1f:db:80:90:16:d8:d7:bf:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=260f2385-3cf0-4e88-b84a-dd2119fe9533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:fe:51:2b:cb:71:47:76:01:00:69:f6:ec:
                    b8:8c:ce:d5:47:a7:73:e6:77:c1:eb:a3:6a:77:6b:
                    94:ce:e6:7f:dd:94:34:c1:3b:9d:17:2c:46:14:6b:
                    22:ce:38:1a:7d:e3:68:3f:61:dd:0e:2d:1d:86:cb:
                    1d:35:ca:3a:d8:d5:05:0e:27:be:78:7a:69:53:bb:
                    ab:0b:cc:72:e8:0e:ae:28:e1:57:a9:21:52:cc:26:
                    63:68:b5:71:98:5e:d6:bd:e7:50:ba:0c:83:91:85:
                    ea:f2:f9:0e:ab:3a:b4:2c:d7:c8:d8:15:e0:3c:c0:
                    47:d0:65:18:0b:62:ce:8a:22:57:74:4f:5f:12:19:
                    a4:d9:20:f5:b4:bf:2f:4e:41:a5:e6:ac:f4:57:16:
                    12:3a:83:05:66:fc:0b:0b:d5:0e:be:33:d0:ca:5f:
                    1b:06:e5:1b:c5:1f:33:ed:50:94:74:4e:8e:f1:e5:
                    2e:8b:75:7a:35:9f:e0:00:9a:f0:63:d3:26:c7:4f:
                    ef:5d:41:1a:a2:78:80:f2:ba:0a:01:c4:1e:29:38:
                    b7:19:8d:2c:05:ab:46:ce:56:77:d9:41:d2:7e:58:
                    dc:2b:9a:c2:98:31:4e:55:8f:10:59:ca:7e:fe:31:
                    20:df:10:72:0c:68:ca:83:ac:46:5f:4f:cf:a7:cf:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:95:35:87:30:77:50:72:AF:6B:5E:13:CA:8D:09:0C:8A:4D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/879012e2-28ad-3c99-b2b5-7531023cebc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:31:df:b2:f7:86:ba:e5:0c:5f:69:67:cd:89:e9:e1:8f:34:
         66:45:70:70:32:24:e1:6e:c5:33:0a:db:1e:44:d8:ce:58:5c:
         85:36:90:99:f9:6a:df:f8:9c:79:fa:ca:6a:45:03:f8:e5:c2:
         7d:b1:34:4a:b0:cd:33:ee:9d:0d:8e:4b:00:8b:67:54:55:40:
         f9:db:07:08:62:bb:c4:00:99:c5:ed:2b:fa:87:91:fb:5e:cf:
         69:53:e5:f2:1a:f6:27:a3:b4:07:57:7b:f7:5e:4b:e8:29:06:
         63:29:65:cd:f0:bd:22:9b:bc:3d:73:55:b4:22:6b:6b:46:fc:
         e0:bf:4f:85:b3:cc:7c:9f:a8:be:64:d1:8e:ee:00:bd:1c:fc:
         6f:04:b7:a5:f0:ef:1e:a4:ae:61:a6:58:23:ad:55:a7:f1:16:
         89:62:c9:db:13:0a:83:eb:17:f4:da:ae:ee:ed:d6:08:ca:fb:
         98:cb:ec:28:a1:72:4c:fe:39:df:7c:0c:17:0a:80:b6:bb:81:
         7f:19:c6:8a:fc:f1:47:4b:bb:30:f7:3f:54:1d:47:b7:dc:7f:
         a9:1c:32:00:88:5f:20:e3:e8:b1:71:57:48:c9:cc:ab:9d:a6:
         47:c0:dc:d5:ee:24:ba:a8:5d:ac:bf:24:c7:bc:d6:24:a0:13:
         49:b6:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:29:32 2024 by rpki-client on console-fra.rpki-client.org