Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
File:                     86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa (raw, json)
Hash identifier:          SBZRnUUGAYdGUQtLsjJPEN0ZMGgwKGm3rxxVahxeung=
Subject key identifier:   E2:F3:18:AE:DD:B3:C3:F3:1F:21:C2:5B:00:8C:75:ED:A4:FD:20:22
Certificate issuer:       /CN=d5a6b267-6096-4872-9afb-b9517766833a
Certificate serial:       010D0C9F432858453E42AB5AAEEA80ACEC536DB0
Authority key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     10886
IP address blocks:        199.7.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:ab:5a:ae:ea:80:ac:ec:53:6d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a6b267-6096-4872-9afb-b9517766833a
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=81150c3b-7dfd-4194-961d-76076be83906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:e1:2d:14:2b:f1:3b:ca:5e:31:af:b9:68:
                    12:56:b3:ba:56:e3:e7:c4:6e:1e:e8:14:5f:73:b2:
                    c8:46:96:9b:ee:66:d3:14:3b:97:11:21:c0:e2:a7:
                    61:7d:d9:6c:75:03:42:ac:99:e0:78:19:21:86:90:
                    e2:a4:3e:2a:f7:55:aa:2d:dd:48:bb:a6:b1:d3:ea:
                    c2:62:0e:c1:7b:5c:23:7a:2c:51:e7:cf:d0:e1:7b:
                    f8:96:65:63:f5:ca:ce:3b:6c:9c:6a:8d:02:70:6c:
                    e2:98:d7:ce:fe:73:11:da:69:f3:aa:38:c7:0d:59:
                    b6:f4:03:3f:29:b4:80:93:47:79:f4:d5:c1:38:a8:
                    99:24:70:bb:54:0b:cf:30:88:47:74:eb:70:f6:a7:
                    d4:ab:18:50:e0:92:6c:28:6a:ad:b2:fa:3a:89:5a:
                    32:4b:34:33:8c:66:85:7f:eb:37:fc:df:b1:5d:1e:
                    9c:1f:67:7a:db:e1:6a:2a:8c:5f:fb:43:dd:09:47:
                    d7:ff:80:16:3a:b9:64:7f:d7:d1:d5:a3:b7:5e:0b:
                    46:b9:73:b5:63:36:6e:a3:1b:f6:64:eb:2a:11:28:
                    a6:cf:72:f1:59:0d:29:7a:ee:83:8f:8c:20:d0:6d:
                    ab:11:b1:ad:5e:cd:57:ee:a5:14:90:74:bf:a7:d9:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F3:18:AE:DD:B3:C3:F3:1F:21:C2:5B:00:8C:75:ED:A4:FD:20:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e9:f3:38:04:4e:3d:3a:08:97:0a:e5:d2:a7:d3:ce:91:4b:
         3d:06:0e:cd:ad:5d:47:b7:cc:66:cc:de:15:71:7e:93:cb:9e:
         8b:5d:94:3f:41:67:23:2d:66:10:3d:06:f5:f3:85:a1:8e:ea:
         85:d8:45:6c:75:76:04:1b:97:f2:85:08:d4:50:0f:c4:e1:59:
         cb:e4:be:ec:28:3a:57:5d:2b:b9:27:4e:21:23:ba:cb:84:6a:
         31:21:73:5b:3b:9c:e4:ab:1f:5c:2c:79:41:31:92:a1:5d:7b:
         92:7b:d0:2a:3b:c4:10:ac:62:58:3e:5b:4b:dd:91:00:9b:08:
         f0:a7:1c:4e:24:cc:ed:ea:3b:ec:2b:2b:4b:d3:14:a0:b3:20:
         8a:b0:93:ba:2a:81:41:6b:3f:7a:e9:7f:a3:8e:a6:e6:32:22:
         3a:e2:04:08:2f:a4:5e:ac:36:8b:48:6c:af:0c:b3:bf:b3:5d:
         21:c7:cf:73:1c:60:52:0a:68:3d:7b:9f:2f:6c:5d:16:d7:c2:
         9a:e5:bc:f1:af:73:34:bf:be:c1:de:c3:95:f6:4a:47:1b:42:
         78:42:33:c6:39:de:98:f7:34:aa:85:0e:58:84:56:5a:14:66:
         f6:f7:34:17:44:b0:87:84:c7:96:0d:6e:06:5e:73:7e:9d:b9:
         61:a8:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:35:45 2024 by rpki-client on console-ams.rpki-client.org