Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
File:                     0be8b0af-8061-36c3-8885-a1d714a9af7a.roa (raw, json)
Hash identifier:          AJyXp1mCjzzXZinS4wTQwX1U/XGL2CML08Y3MU+9OP8=
Subject key identifier:   BC:A1:83:4E:F1:3A:07:D2:C5:EF:65:FB:4A:76:A9:14:1A:7D:1C:3D
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F43285845DEC945B689617B943536ACA0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     10430
IP address blocks:        164.116.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:45:b6:89:61:7b:94:35:36:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=351ed107-de45-4a06-a3e3-ef65ec5626ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:93:30:90:c3:42:36:4e:a4:40:df:e4:32:
                    6f:33:6f:98:0d:2f:2d:3c:53:19:53:92:7b:3c:15:
                    46:aa:c5:a0:a1:71:50:8b:02:47:63:d4:e2:63:61:
                    91:96:6b:0d:33:a6:fe:b2:1b:40:b3:08:d1:aa:e4:
                    39:e3:2e:81:0d:5d:f3:6b:e6:1f:2f:b4:e0:99:62:
                    cd:d4:f3:37:ca:0a:08:3c:8d:82:99:c7:36:81:97:
                    7b:93:f6:f6:32:60:02:ec:48:f1:4b:22:60:8c:b3:
                    3e:a4:fc:8a:50:1a:37:60:f4:a2:67:77:48:7c:3c:
                    c3:4a:e5:55:6d:1c:ac:d4:ef:42:a7:2e:3f:00:c1:
                    3b:bc:fe:5b:29:73:77:a6:ac:fa:5c:42:b0:f3:7d:
                    b2:8c:e0:30:40:56:60:a0:df:3b:39:34:ca:c3:ef:
                    6f:ac:5a:42:dc:23:6e:cd:df:58:bd:11:77:47:94:
                    fb:ab:51:01:13:41:06:54:54:cb:6c:58:27:af:e8:
                    c6:40:aa:a6:bf:46:da:90:de:d8:fd:06:e6:fb:f8:
                    92:b5:f4:89:d2:b7:ed:d9:0c:0c:2d:01:84:e3:9e:
                    e7:56:c3:1b:2f:31:67:bc:a8:34:87:20:68:8b:2c:
                    d2:6b:a9:0b:ec:81:af:07:dc:35:87:0c:50:0e:57:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A1:83:4E:F1:3A:07:D2:C5:EF:65:FB:4A:76:A9:14:1A:7D:1C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:63:d5:cb:2f:ba:cc:75:40:6f:dd:d0:f6:e6:2d:31:a5:
         a7:1d:e5:fc:0f:01:23:c0:54:45:72:6c:1d:b2:d8:a6:86:16:
         d6:d9:ab:e6:ed:2f:95:4c:b0:e1:ec:16:4c:18:59:7a:ab:9f:
         cf:c5:27:27:e7:0b:4a:68:57:b3:fe:9e:04:27:c0:ab:5a:c8:
         74:55:a4:7e:5b:a3:7d:23:56:f0:54:bf:2d:ee:e8:12:bb:12:
         3d:bf:ec:a0:2a:5d:89:6a:fd:9f:b3:1a:bd:69:fc:fd:93:dd:
         95:4c:3e:1d:ae:bf:e1:0c:48:b2:1a:04:e3:e8:fb:a2:fc:13:
         46:02:4e:8f:6b:11:26:e1:47:72:02:c4:87:16:c8:2b:96:39:
         e2:35:79:f2:a2:a3:54:5a:e5:ac:5f:80:c8:47:53:fb:0a:23:
         9a:1c:fa:10:61:e7:77:fb:20:74:9d:ad:99:92:42:e0:6c:e0:
         0b:a3:33:aa:99:06:10:69:45:8c:e0:9a:78:93:12:fb:15:39:
         a1:22:f3:c3:76:8e:a4:a0:ef:f0:d1:1c:bd:3d:ed:ee:04:5a:
         1f:d0:22:92:19:5b:69:44:2b:2a:0c:16:eb:a5:2d:78:05:31:
         14:db:ca:9f:63:37:d5:d8:86:a2:ca:7d:4e:7c:fb:25:f0:45:
         e9:56:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:28 2024 by rpki-client on console-ams.rpki-client.org