Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/fc905c83-eff4-3b64-a386-0cb286a4b007.roa
File:                     fc905c83-eff4-3b64-a386-0cb286a4b007.roa (raw, json)
Hash identifier:          my+VGkr8l0hj9fVIH+TMiO8jACbzJuOdFsR7gZTozYc=
Subject key identifier:   F9:99:9D:09:EB:1D:30:63:B5:3C:5E:3D:78:62:DC:FA:EA:04:00:EA
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845BA7E2489706771F487766860
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/fc905c83-eff4-3b64-a386-0cb286a4b007.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     13213
IP address blocks:        199.189.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:24:89:70:67:71:f4:87:76:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=4bd88c8d-6369-4e56-a878-09f3bfccc4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:5e:0e:04:c8:3e:ca:53:05:05:34:25:0e:
                    7c:3e:e7:73:ea:17:f4:9e:be:7f:52:ce:ca:68:6d:
                    30:13:f9:ca:a9:67:d8:68:b4:98:bb:53:0c:eb:80:
                    2f:b6:39:2e:92:88:be:48:fc:f7:34:68:43:41:b3:
                    d9:de:f3:2f:c5:62:55:19:75:4f:44:d6:82:9f:b2:
                    5d:28:43:49:52:1d:ee:22:dc:4d:0a:c0:cf:64:91:
                    28:0c:9b:82:69:dc:0f:2c:c0:aa:a1:f1:dc:5d:5b:
                    5e:9b:73:c5:40:a1:09:e0:f6:80:74:43:38:c4:88:
                    89:83:2b:fe:dc:f0:64:d9:40:0e:70:c1:01:d7:91:
                    6c:8a:b3:1d:77:f6:05:42:24:ca:c4:67:01:e8:f8:
                    ad:ec:ae:6b:9c:e4:28:d7:8d:52:c9:54:37:58:7c:
                    70:6c:b9:49:41:37:5f:19:38:bc:20:71:12:a8:f0:
                    1f:2a:d0:7e:a2:f0:9c:83:f8:83:10:c6:5f:f3:59:
                    d8:6f:25:40:12:7f:b6:86:4c:b7:bf:04:5f:53:97:
                    02:aa:82:6d:61:42:c7:b4:5f:04:a5:a6:32:1f:d2:
                    01:cb:5a:a2:3b:0b:87:98:96:d2:0f:6c:19:cd:b7:
                    5d:b8:54:03:44:5a:7a:66:16:a8:e8:6c:73:77:6c:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:99:9D:09:EB:1D:30:63:B5:3C:5E:3D:78:62:DC:FA:EA:04:00:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/fc905c83-eff4-3b64-a386-0cb286a4b007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:96:ca:60:73:4f:56:a1:a4:24:bf:63:99:d0:2d:62:e6:34:
         a7:72:18:25:a5:65:ec:c9:5e:03:93:dd:d2:04:64:ec:90:60:
         3e:8a:66:48:c3:b6:55:d9:1d:31:ad:d2:1c:8a:c7:8c:fa:6a:
         0a:70:8b:a3:9e:56:2b:09:ac:e6:70:c7:10:ac:0c:25:bb:36:
         6f:1f:ff:d3:d1:92:b8:22:6e:63:1f:ba:8c:10:e0:a6:4b:99:
         e2:68:9a:43:93:67:16:c9:d2:9e:56:16:90:3d:43:0f:87:db:
         5c:43:0a:21:8b:13:54:c8:b8:0a:b6:6b:a2:ed:bc:0d:14:c6:
         99:cb:54:3b:ac:60:98:fb:83:21:2a:b6:e0:12:6f:11:d1:ca:
         ba:54:d9:ab:37:7e:61:c2:32:9a:1a:42:14:4e:39:13:c8:ed:
         3a:1b:b6:a5:89:c2:0a:73:58:c3:f6:39:ae:cb:0f:66:70:af:
         09:af:82:61:5f:17:be:f6:b5:82:48:5c:1a:4a:67:65:62:c4:
         fd:a5:09:ae:92:b9:eb:a0:07:3c:22:a5:ca:17:e0:cc:7b:f5:
         d5:ed:eb:97:53:a0:26:59:7a:dd:0d:67:2c:27:7c:ad:c7:01:
         95:d6:66:f6:60:77:49:01:10:6b:c1:ff:c1:0b:af:17:1a:fe:
         0c:be:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:24 2024 by rpki-client on console-fra.rpki-client.org