Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa
File:                     ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa (raw, json)
Hash identifier:          eZAWtUu3Ibvdcj++mD4Y2OZ7vzTvnGYx5id2+4UbUIU=
Subject key identifier:   DE:C3:9B:00:C8:F3:C3:33:4F:96:F1:20:B4:50:AE:C3:56:8C:EC:92
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E223F89BA0976B7A43A40
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        149.96.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:22:3f:89:ba:09:76:b7:a4:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=e49ff480-1144-4d19-939f-52932a3466f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:25:5f:1b:3a:ef:bb:3f:8f:8b:19:d5:70:
                    7e:56:9d:f5:d8:88:48:22:fa:f1:38:04:75:9e:51:
                    21:78:d0:67:11:ec:2d:f5:67:d0:75:be:76:5b:db:
                    7e:ad:65:f7:22:a5:8c:bd:95:f8:28:8b:92:9e:df:
                    d7:a5:d4:04:5a:c2:d4:c4:77:5b:8d:e1:28:a1:44:
                    4e:a6:81:7b:94:6c:02:9a:73:1e:b1:14:0b:de:33:
                    5e:64:41:50:e3:e7:08:b9:01:76:42:34:3a:ed:25:
                    29:68:a7:f3:50:86:f9:19:15:88:24:49:2a:65:ff:
                    5f:99:d9:6e:50:f6:19:41:4d:9c:4e:1e:70:6c:89:
                    90:2a:18:29:51:bf:38:f0:9d:61:d5:05:84:54:1c:
                    af:e4:d5:e8:e0:42:2f:44:5e:e8:51:be:f7:28:9b:
                    24:c7:d7:2d:41:e0:9e:4f:22:17:69:72:d8:b8:50:
                    79:a9:9d:48:16:82:8d:5f:11:a8:d8:b9:f3:20:cc:
                    4d:1d:ac:f6:47:46:bd:77:3d:87:ea:85:ed:14:3f:
                    bd:04:f7:b3:c3:7a:6a:45:14:0f:fb:e6:1e:98:51:
                    87:79:c8:76:68:41:78:4c:9c:91:87:9a:5c:7f:0d:
                    ac:98:e1:f7:af:7d:1c:f7:52:ed:7e:bb:83:d3:3f:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C3:9B:00:C8:F3:C3:33:4F:96:F1:20:B4:50:AE:C3:56:8C:EC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ec8c4e40-cbe0-321f-9077-9fb95f124cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:63:c7:88:12:7f:d4:aa:5a:71:28:71:bd:93:f8:0d:ab:fc:
         a7:27:f5:d1:0b:85:7c:68:cb:34:e1:42:0f:e4:22:03:5f:54:
         0d:28:77:1d:49:1f:e1:19:a1:76:f5:4c:cc:95:a0:c1:1f:20:
         da:70:f3:c1:bf:a8:f7:e3:0b:af:59:e9:98:ce:90:ad:2d:e9:
         1b:61:49:eb:54:17:82:45:3b:de:b1:1d:9e:4b:68:52:3d:42:
         74:63:f8:6e:05:1f:94:04:f7:9e:0b:22:9e:3f:01:55:4b:d7:
         da:59:ad:c3:32:81:a9:fa:fe:68:40:cd:70:4c:a6:ee:97:ce:
         57:60:a0:e9:f3:fa:f2:29:2a:5f:1e:00:4a:a7:4b:d8:a7:82:
         32:81:9f:85:64:32:08:ba:9e:6e:3a:28:da:2a:f2:6b:cd:a6:
         6e:0c:87:15:bb:10:58:e0:e6:a6:fa:f7:cc:42:31:49:4b:b0:
         d5:45:b1:e6:d7:90:f4:7d:e3:64:e3:df:85:5a:49:a9:ce:0f:
         0f:c0:e8:14:85:fb:81:fc:27:a0:e1:cc:8c:29:11:94:3b:57:
         4f:3a:3a:23:0e:1d:63:c3:6a:2e:4a:35:8b:c9:0a:fb:45:8e:
         32:03:76:c9:54:64:38:e1:4a:8b:71:37:cc:45:6a:33:1c:b4:
         c5:73:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:29:32 2024 by rpki-client on console-fra.rpki-client.org