Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5015cae2-d54d-3b04-be39-f5fad9cd4fad.roa
File:                     5015cae2-d54d-3b04-be39-f5fad9cd4fad.roa (raw, json)
Hash identifier:          rdB9ZcsS0Z5pCx23fRRcKVRrGDqLGYlqB8IJsYWa8E4=
Subject key identifier:   82:D2:92:31:0B:BD:ED:BB:EA:E1:80:26:A7:99:FE:D6:B9:E2:3B:C7
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F432858452A00BF71A9B00E93D154CF00
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5015cae2-d54d-3b04-be39-f5fad9cd4fad.roa
Signing time:             Sun 10 Mar 2024 18:51:32 +0000
ROA not before:           Sun 10 Mar 2024 18:51:32 +0000
ROA not after:            Sat 08 Jun 2024 18:51:32 +0000
asID:                     1239
IP address blocks:        216.98.249.0/24 maxlen: 24
                          216.98.250.0/24 maxlen: 24
                          216.98.251.0/24 maxlen: 24
                          216.98.252.0/24 maxlen: 24
                          216.98.253.0/24 maxlen: 24
                          216.98.254.0/24 maxlen: 24
                          216.98.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:00:bf:71:a9:b0:0e:93:d1:54:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Mar 10 18:51:32 2024 GMT
            Not After : Jun  8 18:51:32 2024 GMT
        Subject: CN=173de278-ae85-4e67-9c66-5d9aa82a11fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:78:f1:58:45:ed:a5:dc:0c:45:ce:9d:59:
                    a1:e9:59:9b:d3:0f:60:28:68:1d:ac:b3:10:1c:6f:
                    ed:13:d5:bf:99:65:0c:a8:22:4c:16:7d:3d:c3:af:
                    d3:cd:f7:3e:d8:8a:e2:8e:cd:7a:aa:ca:70:22:2d:
                    e7:90:9b:96:42:78:b7:63:f0:04:60:70:15:f0:48:
                    bb:42:c7:76:a5:44:c3:38:82:00:a6:73:27:56:9f:
                    4b:d8:18:c4:7a:e3:a0:0b:bb:da:74:f2:83:14:a9:
                    b2:84:e3:49:b4:d8:f6:73:31:8e:ec:32:50:44:d3:
                    ea:88:c4:9f:54:a5:d4:01:7b:e5:cf:ac:4c:7c:15:
                    a5:f5:b1:06:33:20:08:62:69:81:4b:81:0d:f0:7e:
                    01:1c:ee:36:10:a2:82:42:d6:e5:c5:4b:21:66:8e:
                    58:7f:f3:47:7a:ee:d5:34:35:2f:f8:7d:23:b2:a6:
                    97:2c:9a:d4:4e:d2:f9:5b:ef:5b:97:08:97:e3:a8:
                    2e:17:47:7c:8a:6b:87:47:67:47:6a:a9:a0:f9:01:
                    3a:5c:ca:49:1a:d2:39:34:e5:d3:e5:81:ba:1d:b0:
                    07:df:ae:d5:cf:dd:67:08:10:fc:8c:1f:9f:09:6d:
                    b7:49:e6:57:ee:1a:68:81:96:4c:e5:5f:7f:5e:e2:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:92:31:0B:BD:ED:BB:EA:E1:80:26:A7:99:FE:D6:B9:E2:3B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5015cae2-d54d-3b04-be39-f5fad9cd4fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.249.0-216.98.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e2:f4:81:71:8f:90:2e:7c:80:0a:70:6b:1b:f0:c9:a8:04:
         f1:e0:7d:4b:ef:8e:e7:a8:f9:5f:a3:95:bd:d0:64:ae:44:16:
         a7:d0:54:5f:00:c9:cd:c5:b8:71:31:4c:0b:7a:c1:39:1d:c4:
         ab:57:6a:d8:2f:27:9b:cc:de:3d:4e:20:86:b5:41:26:fd:6f:
         1f:7f:07:84:7e:39:50:71:80:91:0a:4a:ed:9a:9d:0c:0a:bc:
         ca:b4:aa:63:1e:24:40:e7:8a:52:57:4d:ec:b1:73:14:7b:81:
         f4:ad:59:7b:54:5e:5e:e4:03:0a:b5:e0:ec:ac:71:a5:f8:6c:
         4a:54:ac:81:ea:f4:55:ef:00:c1:e6:96:7c:3b:de:12:d7:df:
         fe:28:b2:3e:9f:5d:93:dd:97:cf:4f:f0:76:d9:13:bb:2b:ab:
         94:be:e8:7c:1a:66:d1:3d:bd:1f:1b:af:a1:1d:25:0e:07:0f:
         b6:69:0a:c0:c5:45:e2:e2:36:9d:d3:02:92:66:eb:c0:3b:f5:
         fa:03:8f:e3:80:72:5c:9f:ea:09:83:22:52:ea:92:2e:74:2a:
         5f:5f:39:15:d5:db:dd:29:05:31:fe:d8:ca:40:78:0f:19:31:
         72:ad:f5:c9:91:75:d6:17:aa:f5:f4:52:e7:5f:af:32:48:3d:
         1f:75:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:13:36 2024 by rpki-client on console-ams.rpki-client.org