Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa
File:                     b672c24e-ac3a-3a73-9369-af3fde4793e9.roa (raw, json)
Hash identifier:          e8KqBz5xU4e1MyVW2TDr8CfdCzCJm0R8rQY+yxfOPXg=
Subject key identifier:   15:2F:CF:75:D2:B5:04:B9:55:E5:42:75:E8:E1:EF:31:84:CB:A2:0E
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E1E201605639E9AEE4700
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        149.96.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1e:20:16:05:63:9e:9a:ee:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=f2e1efd0-c297-46c8-8399-4a2805a2c20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:14:aa:f3:28:cd:33:fb:a4:37:6f:76:10:
                    cf:79:15:2a:71:31:f1:a9:cd:f4:6a:04:e2:b8:aa:
                    e3:a7:b2:5c:ea:98:78:4c:0a:32:fb:29:4a:ac:c8:
                    6c:65:9c:d5:89:26:64:3c:e0:1f:4f:9d:85:25:f0:
                    d7:5c:f9:6f:dd:0a:ba:38:73:63:3a:81:61:5a:9a:
                    14:5c:de:87:db:75:a0:1e:16:15:10:2b:82:08:4a:
                    ab:e7:cc:fa:82:6f:1e:b9:9c:2d:2d:7a:08:ef:80:
                    76:0f:98:63:51:13:ea:44:7f:df:94:8f:3f:7c:b7:
                    3b:f4:87:a9:e8:f6:df:44:a7:92:b1:ca:19:3c:d2:
                    72:e2:19:a0:8c:f7:06:b3:48:92:fa:9a:c9:18:52:
                    cc:79:39:5f:0d:1b:8c:d9:99:9c:82:ba:d3:b0:b3:
                    a8:ab:5d:98:52:03:7f:c4:0d:69:ff:ef:4c:35:a7:
                    98:d1:79:78:c6:fa:ce:9b:74:ef:3a:7c:79:24:5e:
                    92:97:7d:6a:05:51:9d:59:4a:90:8e:1d:b0:31:ae:
                    53:32:e3:c3:89:f5:42:9d:17:05:6a:dd:a6:52:cc:
                    7e:30:d0:62:97:e8:1e:4f:f0:d6:92:65:54:bd:63:
                    55:46:60:8e:69:95:1b:ea:3b:8a:fe:bb:54:46:45:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2F:CF:75:D2:B5:04:B9:55:E5:42:75:E8:E1:EF:31:84:CB:A2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:36:d9:f4:38:84:5e:c9:85:d3:a6:6b:03:c4:99:fd:bb:4e:
         ed:f6:0f:36:b4:8c:06:fa:32:6a:49:c2:4f:04:21:cc:31:33:
         f8:30:fd:b2:a1:cb:fa:c3:9f:67:08:85:96:61:3d:e7:d6:3e:
         24:25:43:5e:62:8d:24:3a:73:d0:01:c4:9a:c8:c9:99:d6:0a:
         dd:7c:3f:ec:15:6e:f0:e7:32:77:94:d2:2e:57:15:2a:62:dd:
         f6:48:5f:35:bf:26:a2:83:0e:f7:be:23:e8:4f:5b:6e:c0:99:
         fe:25:2c:e6:5e:a3:cc:1a:46:dc:33:55:d4:b1:1e:88:72:1e:
         27:f2:4b:c0:d2:ae:ba:8a:82:c2:f2:28:9c:84:0b:01:e5:1e:
         52:22:13:3c:eb:a3:92:c5:d5:b6:67:2e:f6:d0:98:d2:36:e3:
         7d:c5:86:30:19:4c:5f:76:62:27:f6:79:31:86:19:5b:75:fb:
         c3:9e:69:95:a7:fc:25:27:b2:fd:ff:8f:5d:f4:6b:2e:9d:6e:
         f3:c5:ad:d3:17:38:89:55:4d:a9:fb:f9:5f:d3:6e:fe:01:5b:
         c5:ee:ed:b3:67:76:35:c3:d6:35:c7:63:b0:eb:b2:58:54:26:
         4a:58:4b:d9:34:be:0c:09:1a:f5:28:b5:2d:e5:1f:4e:a0:de:
         93:5a:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:06:09 2024 by rpki-client on console-fra.rpki-client.org