Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/89e5a438-043a-32b3-9b88-fa0a3c16abc2.roa
File:                     89e5a438-043a-32b3-9b88-fa0a3c16abc2.roa (raw, json)
Hash identifier:          mm2BacPHl98Hq9J2AIwVqMz7jxOJMlOFmzHfYVb/kzw=
Subject key identifier:   D5:6E:E3:C3:BE:2F:58:52:8C:05:8F:FD:A4:DC:93:A3:EF:53:61:69
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845A2C346EC56EA6C4626800A00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/89e5a438-043a-32b3-9b88-fa0a3c16abc2.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     26744
IP address blocks:        199.166.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:46:ec:56:ea:6c:46:26:80:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=1eb798ad-237f-4e78-a312-e39b4f238633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:48:c9:bf:20:aa:63:4d:e2:6b:6f:44:70:
                    0c:cb:35:5e:ff:15:37:12:44:a0:24:63:ce:9f:08:
                    9f:02:e7:4c:91:f4:a5:9f:69:6d:02:1d:00:d3:41:
                    4b:d9:39:6d:e5:c4:0e:b9:21:08:fa:46:34:f0:8f:
                    e8:5c:0b:ee:d2:48:1d:76:84:2f:38:b6:27:3e:5a:
                    84:27:2a:dd:f4:45:24:69:07:4f:c6:2f:b1:b2:2f:
                    00:8b:d9:86:89:43:89:29:4d:45:67:c3:e4:57:13:
                    61:f2:77:dc:16:b7:a9:b5:20:2d:16:7f:06:20:c5:
                    d7:87:44:c8:8f:9a:06:72:c7:ca:6f:a4:de:07:77:
                    02:ae:53:de:39:71:74:57:53:9c:65:08:c4:dc:52:
                    82:dd:22:bc:b0:c8:6a:40:e6:41:fc:56:eb:9b:fa:
                    9c:9d:e5:43:b7:6c:99:01:ba:42:32:d2:34:48:4a:
                    47:54:8f:ad:61:d3:07:e6:fe:63:ee:4c:6c:1f:57:
                    20:22:31:8b:14:96:38:58:17:6d:3b:b8:4b:11:c9:
                    ef:5c:4a:52:f9:0d:97:a7:a3:9c:e2:f1:06:b6:75:
                    0d:56:bf:96:fe:64:b9:a9:ed:3c:30:db:28:f0:b9:
                    bb:e4:8a:e4:c4:fc:6f:8a:3a:85:37:69:3c:68:0e:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6E:E3:C3:BE:2F:58:52:8C:05:8F:FD:A4:DC:93:A3:EF:53:61:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/89e5a438-043a-32b3-9b88-fa0a3c16abc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:9d:ee:34:0d:6a:59:1d:b4:96:ba:c8:8f:7b:71:11:e9:
         18:d0:70:d6:40:fc:df:fc:5e:b2:d4:18:86:da:f9:20:30:fc:
         d5:b0:f6:f9:a1:58:27:1b:ea:65:62:bf:c8:bd:cf:fd:70:41:
         7e:59:77:35:23:6d:ae:3c:56:78:0c:b4:fb:c1:33:8d:38:00:
         1d:5e:b9:6d:98:6b:1e:bf:31:09:95:71:25:9d:6f:32:76:7b:
         d6:c2:02:f0:e1:54:8d:a6:77:87:c7:c4:b7:c6:49:30:4b:5c:
         ec:8c:a4:3c:e5:a1:a3:16:75:0c:59:a1:1c:04:9d:38:de:1d:
         4b:95:58:ef:7d:3c:12:7a:2a:99:df:ad:ef:b5:65:b8:7c:d6:
         f1:be:12:18:a2:61:86:64:42:45:82:5e:ef:4c:10:84:5b:4e:
         be:9b:65:d9:6c:da:92:24:8a:15:b7:2a:22:de:13:68:98:41:
         31:d3:f1:17:54:41:e0:a6:15:e7:d3:7f:c2:e3:a1:ec:13:6e:
         28:5b:6a:7c:79:35:f5:f4:d9:d8:c4:b5:d2:30:c9:b5:94:20:
         66:40:e3:aa:50:d5:ba:18:f2:cc:9f:e6:64:61:11:64:a0:b5:
         2a:bb:55:6b:ca:1d:6d:c1:be:0e:6a:89:f4:e9:dd:47:4e:f0:
         3f:fe:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:28 2024 by rpki-client on console-ams.rpki-client.org