Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa
File:                     7f5391ad-06b1-31d5-8a01-1923e0d28015.roa (raw, json)
Hash identifier:          mOMXtkiPneBh3SWifXH6mLXmP3MW+mJuCAZK0lJFGr4=
Subject key identifier:   7C:5E:E9:C4:45:80:22:8C:AF:47:56:AA:50:19:C4:B6:DC:66:14:F0
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584531B295DDC1C8E3E9244D4DC0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        216.52.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:95:dd:c1:c8:e3:e9:24:4d:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=91b8355d-e675-448e-9a2e-0a2afbaad769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:46:77:3e:fe:21:d7:f5:74:61:4c:c1:9d:
                    38:24:72:1b:a3:5d:97:f7:b1:bc:8f:f3:e2:f9:2f:
                    dd:b7:35:8c:6f:cb:ac:af:be:af:42:f5:81:1a:60:
                    a6:8a:97:ac:9b:80:b1:86:c9:e0:ca:ae:2e:53:17:
                    d5:d3:ba:07:41:eb:d2:5b:63:dd:4d:54:90:11:f1:
                    45:00:b8:b2:a6:73:13:01:3b:ec:6d:3a:03:db:91:
                    58:cc:77:09:ac:fb:d1:ce:b5:e0:6e:c3:a7:50:51:
                    fd:c8:27:3a:ea:7f:96:ba:2f:b4:f5:ab:a9:aa:bd:
                    59:ad:29:78:aa:f1:55:ec:5e:5d:c5:e9:7e:46:20:
                    55:50:ec:f6:d8:f4:29:d0:85:67:df:d6:bc:21:df:
                    f4:cb:4a:a2:59:f8:b6:5d:aa:19:d9:d3:19:1f:aa:
                    03:94:ab:01:76:83:fb:dd:2d:7b:2c:c8:43:86:8b:
                    98:73:09:aa:88:06:9d:bc:6a:8d:d1:5a:74:df:ba:
                    1d:1b:cc:b0:fd:51:7b:57:10:5b:02:d0:c3:08:df:
                    07:d3:14:58:cd:3b:3a:e1:c5:72:38:49:60:4a:aa:
                    2d:99:a6:35:47:f6:7d:50:e9:5f:d5:e0:7e:8a:7a:
                    b2:fd:97:62:3e:ac:d2:f3:c1:39:59:9a:b5:b7:f7:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5E:E9:C4:45:80:22:8C:AF:47:56:AA:50:19:C4:B6:DC:66:14:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f3:44:f1:d3:3c:02:51:64:48:ca:c3:fa:77:85:48:0f:81:
         10:4b:29:96:32:d4:44:cd:89:d1:f6:72:7e:45:ee:c0:82:89:
         07:a4:0b:70:1b:cd:0f:f2:85:3a:2f:df:fd:21:85:a9:3f:38:
         60:9e:23:e3:62:fc:84:62:b3:c9:b6:f4:7c:74:52:b3:d9:0e:
         5a:dd:e1:b0:3c:0a:a1:ec:bd:1f:ce:62:3a:51:78:97:34:ce:
         70:63:a2:e5:30:f9:fb:80:64:29:52:24:0e:c4:f1:64:1e:e5:
         73:7a:96:6f:b3:fd:de:65:25:0b:d8:34:ef:97:53:f1:ec:bd:
         62:fb:88:6d:df:00:c0:f5:d3:8d:93:66:05:e4:ab:67:8a:cf:
         63:97:65:9a:c1:d9:3d:01:a5:22:27:26:18:4a:d0:47:4a:0c:
         20:b7:15:77:2d:5b:b6:4d:19:93:14:dc:77:41:70:2a:60:b3:
         81:f7:01:4f:da:27:a0:9c:c0:64:a4:64:94:55:71:c3:20:cc:
         48:59:61:d1:89:38:84:9d:8f:a2:db:0f:43:8c:f5:b1:f9:75:
         8a:ab:3b:c9:16:81:1c:a2:42:70:5b:4f:b6:87:48:0c:94:a6:
         32:02:68:09:1d:d1:f8:db:1e:d7:45:12:be:6d:b5:70:36:d2:
         23:d1:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:03 2024 by rpki-client on console-ams.rpki-client.org