Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/bb89574b-ec13-394d-9880-11eea009297a.roa
File:                     bb89574b-ec13-394d-9880-11eea009297a.roa (raw, json)
Hash identifier:          5Ye/yExC35/PDwnqVa1kUQGFOefL839SMtpX/WMA8yc=
Subject key identifier:   27:F5:CC:BF:0A:EB:0A:AC:BC:A1:81:FF:52:1D:6A:85:B5:C6:6C:A5
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845ADEE1039667ABF6B8C5CE5C0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/bb89574b-ec13-394d-9880-11eea009297a.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     13213
IP address blocks:        216.119.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:10:39:66:7a:bf:6b:8c:5c:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=42db3eed-d37c-4d0c-b25a-a37225715290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:c0:cd:b2:45:54:b6:58:be:14:72:ac:ef:
                    da:43:04:0f:ab:43:f3:2f:3d:1c:4e:01:bc:37:9d:
                    05:e8:c0:b1:c5:5a:ef:e7:18:f1:65:f4:3e:aa:e1:
                    76:aa:c8:d6:6d:61:22:99:b6:fb:a1:c2:aa:1f:e8:
                    b4:58:06:97:26:8d:51:0e:ed:40:57:49:e0:07:7b:
                    ef:fa:2e:b0:2a:e6:8d:a2:43:f3:73:20:39:c2:0e:
                    da:7c:d0:92:75:29:50:30:be:de:bc:36:86:9e:d6:
                    59:44:42:f7:f1:8e:d5:f5:cc:f0:45:b8:3f:61:1b:
                    aa:57:f3:59:9b:6b:7a:16:54:e9:ce:d0:b4:95:e9:
                    80:f1:fc:ed:9a:9b:4b:a3:52:f6:de:ac:c5:55:e0:
                    23:40:0d:3a:40:a3:32:8c:99:9e:86:48:94:37:49:
                    a0:50:e2:0e:72:7b:c2:76:43:74:e8:df:9c:05:ad:
                    53:66:d1:a3:83:57:fc:9f:64:2c:8a:f5:88:e9:1a:
                    0d:22:98:f9:61:30:88:c6:14:4f:24:a1:b2:95:7a:
                    83:ea:6a:81:76:b0:d9:66:08:cc:d5:42:95:91:56:
                    0e:68:9f:11:50:f9:80:cd:62:ed:cf:38:51:80:18:
                    43:83:2e:6a:09:3b:bf:47:c8:b8:23:bc:8c:9b:1f:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:CC:BF:0A:EB:0A:AC:BC:A1:81:FF:52:1D:6A:85:B5:C6:6C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/bb89574b-ec13-394d-9880-11eea009297a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:e7:53:80:cf:1a:6b:c0:d7:10:f5:e3:ea:e9:20:35:99:
         ae:36:ff:92:c8:22:4e:2e:cd:c9:1f:a6:66:e6:0a:7a:77:73:
         e4:ad:5c:21:bb:80:c9:ef:1e:a8:c9:c4:90:3f:34:13:0c:3b:
         d7:f0:76:08:da:7f:5c:fc:19:b9:05:6a:39:dd:2e:9f:a4:72:
         b0:5e:f5:e4:c6:8d:cf:b0:51:97:79:22:e7:3e:ed:f2:7f:5b:
         9f:53:f1:f3:80:f1:35:cc:e5:27:e6:b0:79:40:63:2f:bb:0b:
         53:90:74:15:36:6c:a4:9e:54:82:7c:98:32:4c:e4:63:76:55:
         44:6d:48:ad:39:a3:7a:ba:49:9a:c1:94:ab:4b:c8:09:18:7b:
         34:e4:63:c1:a2:cd:8b:04:98:02:c8:65:2f:41:94:4d:66:f8:
         c5:ff:e3:e5:6b:77:c7:fb:c1:c1:72:5e:76:2e:91:cc:a2:72:
         ae:dd:c8:8d:f0:df:2f:88:0e:dd:3a:97:49:e8:7f:7a:ff:87:
         96:ce:ce:68:01:47:a0:73:35:04:92:c2:58:5a:ec:d2:39:56:
         c7:04:fd:e9:51:bb:79:f2:b6:a1:0d:bf:7a:ca:7f:2b:0c:17:
         b5:70:12:01:82:44:ca:ae:de:bb:8e:40:5e:63:71:ef:dd:41:
         9d:76:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:42 2024 by rpki-client on console-ams.rpki-client.org