Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa
File:                     e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa (raw, json)
Hash identifier:          LJmT5WMKQWGpV9xzqHJsZECV1xDGk85L/IsI1sWPJWI=
Subject key identifier:   B0:5C:4F:6B:AA:1C:68:60:60:6A:A4:78:6F:AA:D5:54:C2:A1:A2:17
Certificate issuer:       /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial:       010D0C9F4328584659D116D42A6BA3F199240C30
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa
Signing time:             Thu 27 Jun 2024 14:41:15 +0000
ROA not before:           Thu 27 Jun 2024 14:41:15 +0000
ROA not after:            Wed 25 Sep 2024 14:41:15 +0000
asID:                     16509
IP address blocks:        199.65.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:59:d1:16:d4:2a:6b:a3:f1:99:24:0c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
        Validity
            Not Before: Jun 27 14:41:15 2024 GMT
            Not After : Sep 25 14:41:15 2024 GMT
        Subject: CN=88ce46ec-82e6-47ee-b26f-91f680069d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:93:60:a3:ce:d9:d8:bc:d2:58:90:cf:c0:
                    bb:fe:70:09:55:b3:c3:3a:fb:54:d5:aa:0f:ac:f5:
                    e2:0e:54:2b:c8:30:ad:eb:ff:b9:90:03:fb:3b:36:
                    33:9f:5f:5a:7b:40:14:61:c2:24:9a:fa:5f:01:e4:
                    61:0d:0c:17:87:fc:9e:10:33:44:a5:90:78:0d:95:
                    fb:48:54:42:b0:be:c5:df:26:9c:f3:18:e8:81:6d:
                    15:e9:bf:38:cf:8a:8f:a2:9a:64:06:52:3e:74:5a:
                    ad:68:5a:aa:d9:4a:77:62:85:57:56:e6:aa:02:85:
                    d0:f4:a8:82:23:ed:aa:e7:97:63:0a:f4:90:24:5a:
                    14:f0:4b:2f:59:de:a4:37:28:10:f4:09:82:60:38:
                    f0:79:dc:31:38:32:46:0a:80:15:66:b5:58:3d:f0:
                    d7:2f:21:5b:f0:e2:e4:10:d6:16:47:0a:13:1a:f4:
                    f6:8b:3b:bb:e6:b9:0a:5e:ea:5b:52:93:0b:5b:1c:
                    29:b9:f3:74:f4:2e:5b:e2:f0:b8:38:7d:66:52:1e:
                    94:e7:1d:84:94:28:6d:23:05:89:4b:0f:2c:38:5c:
                    07:cf:59:9f:ac:23:ca:47:48:91:d0:b1:e5:9d:b3:
                    e9:db:18:07:60:12:14:76:da:11:2d:f9:d0:e2:2d:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:4F:6B:AA:1C:68:60:60:6A:A4:78:6F:AA:D5:54:C2:A1:A2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:03:10:5a:33:13:4e:ed:13:82:d6:b0:e8:58:12:52:0b:bf:
         4a:4b:a4:da:4b:08:50:b5:79:ef:b3:ce:cd:67:21:13:fa:22:
         1b:46:b0:1a:df:4f:14:24:ca:cf:4f:3c:f7:c9:7a:4e:ee:c5:
         20:e5:46:9e:9d:ff:72:3b:69:99:4a:3d:8a:12:85:49:69:97:
         d2:04:d4:50:a0:34:41:9e:16:04:9a:50:ca:51:f3:39:03:05:
         fa:ae:0b:62:b2:5a:72:fe:ec:35:c5:cf:77:5f:a1:6d:eb:36:
         9d:4f:a4:39:68:e3:bd:ef:c5:31:08:ed:6d:51:73:e2:d9:b5:
         bb:cf:47:1d:a2:a6:43:e0:99:80:47:8a:23:90:ba:56:ab:fe:
         59:2c:21:29:5b:47:32:45:0c:1e:5b:82:39:19:3b:27:f0:3f:
         2c:f8:e3:81:37:03:5f:06:2c:f2:4e:51:44:4e:8a:24:7b:e7:
         61:08:e3:fb:fc:21:10:64:5d:8e:ce:5a:66:15:6f:52:49:ea:
         16:8c:a6:75:9e:e8:e0:99:b7:fc:ee:5f:dd:a0:94:b1:14:db:
         40:87:90:63:15:30:71:7e:69:d9:61:35:e7:7a:9c:cf:46:cb:
         a2:4b:47:68:24:1e:34:8e:21:c2:7f:68:3f:54:e2:4d:82:bd:
         2a:c5:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 16:37:59 2024 by rpki-client on console-ams.rpki-client.org