Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/7df43666-639c-3f6a-8ba3-eb9f7d34ef7e.roa
File:                     7df43666-639c-3f6a-8ba3-eb9f7d34ef7e.roa (raw, json)
Hash identifier:          1tJUT7hpi6qIChXcpUJ3EkBZBjmx8ED2cqA2C2ddvIE=
Subject key identifier:   A6:79:C3:BF:6B:66:86:C4:09:6B:DA:F3:1C:E1:99:5E:16:26:75:DA
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285845A9BE09CDAC9C680C744FB740
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/7df43666-639c-3f6a-8ba3-eb9f7d34ef7e.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        169.150.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:09:cd:ac:9c:68:0c:74:4f:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=1ce9015a-ef25-4ee9-a7d8-604a6cfbd59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:ad:62:81:23:d3:7b:84:9e:0a:06:ad:38:
                    ed:5f:8c:b5:6a:e4:f2:f7:ca:99:42:a0:99:8d:72:
                    eb:83:af:15:85:af:b8:9d:e4:71:9e:5e:07:ef:57:
                    74:b8:ab:5d:23:50:51:6c:ab:12:2c:a2:f0:14:cc:
                    d6:29:c4:f9:77:e6:07:77:42:ca:57:36:5d:29:4d:
                    37:c5:37:f2:ab:7a:17:11:47:81:0d:77:85:70:ef:
                    73:83:b3:01:ab:93:b9:d2:34:43:92:57:e6:a5:cd:
                    f2:c0:5b:b7:a3:7c:0e:4a:69:3e:7b:5f:8b:0f:aa:
                    08:65:a9:d4:0f:d3:d8:69:8e:69:be:64:3a:75:6e:
                    af:86:fa:3f:8c:2c:8a:1c:06:cc:f8:76:ab:23:c8:
                    e9:3f:11:7b:cf:bf:cd:a4:5f:b1:48:4d:41:c1:9c:
                    25:e2:b3:bf:83:19:d4:0e:55:30:67:8f:26:44:79:
                    da:6b:55:1f:33:bb:cf:1f:f1:a7:dd:3d:ad:11:af:
                    d0:f9:7d:dd:94:41:fc:f9:8b:99:92:5f:22:7e:55:
                    21:1e:f6:d3:07:74:f8:7a:be:83:a5:47:e0:69:5c:
                    80:07:69:a2:0e:20:72:55:f6:16:70:d4:7a:df:2e:
                    ce:cf:c6:b6:da:f9:ef:60:8d:51:a0:06:b0:09:6d:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:79:C3:BF:6B:66:86:C4:09:6B:DA:F3:1C:E1:99:5E:16:26:75:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/7df43666-639c-3f6a-8ba3-eb9f7d34ef7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:65:a2:fe:38:83:66:fe:9f:62:9b:bd:3a:6c:34:ae:8c:
         01:1e:b2:bd:28:e5:4d:ab:4a:0d:40:74:61:1b:75:54:32:85:
         d7:e0:97:06:c2:0d:c9:1c:f7:18:b7:81:c9:5b:14:b7:7f:d9:
         ab:98:94:81:d7:c5:28:5c:7b:eb:6b:9b:a7:0a:2e:5c:8c:a1:
         11:87:ec:ec:68:03:06:bc:01:09:e7:0c:b7:0b:d2:ba:0c:98:
         18:2f:41:ff:5b:00:d2:9d:e0:4c:6e:7f:01:09:c4:d1:64:ae:
         d4:7c:99:bf:d1:25:15:89:2a:2a:2a:26:5b:03:23:a5:d6:7d:
         03:01:e9:64:61:0b:f0:23:9d:f8:d7:5f:c1:11:86:2b:86:14:
         05:4c:1b:6c:4a:f0:6e:94:a4:46:3f:67:1f:d9:b6:67:af:f7:
         a6:87:e6:e9:90:0e:a8:8f:3f:db:32:88:53:8b:5f:55:87:13:
         6e:79:21:dd:94:50:90:33:d7:11:27:05:4b:3f:e7:4f:ae:8b:
         fc:db:8a:1d:7c:5e:29:b6:fd:72:eb:cc:51:b0:51:c7:73:fb:
         da:b9:26:36:1e:4a:6d:54:e0:61:a9:23:27:9e:0a:73:03:75:
         3d:48:b6:59:4e:05:6c:53:25:a4:6e:4f:c4:ae:4e:2d:b2:fb:
         a8:8e:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:30 2024 by rpki-client on console-fra.rpki-client.org