Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa
File:                     90774b9d-bc67-3fb5-969b-6254017ec651.roa (raw, json)
Hash identifier:          +VWerCdAqH+WbCsKzyGgYlPRrR0YpKxPGXt10WKDot8=
Subject key identifier:   C7:3C:5D:41:37:F9:A1:06:92:8B:4B:6A:AA:25:EB:1F:BC:42:87:55
Certificate issuer:       /CN=1380a44d-7851-4eb6-8887-413917dcdc12
Certificate serial:       010D0C9F43285845105027F77FFEEC5034D04760
Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     31972
IP address blocks:        199.101.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:27:f7:7f:fe:ec:50:34:d0:47:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=e8c16479-40e3-46d5-85c6-d548d81cbd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:6a:42:de:8e:df:e8:7e:be:f2:87:b5:f8:
                    ba:1e:57:08:c7:b6:b1:2a:a2:63:d6:e7:42:00:a9:
                    7a:c5:03:5f:e8:a2:58:af:c3:87:6f:f0:e6:eb:ca:
                    b1:20:da:fd:14:dd:1f:31:25:78:c7:3f:eb:f4:4b:
                    17:50:4e:46:b2:61:37:6a:34:4f:7f:68:21:86:1f:
                    23:8c:06:8e:96:d7:1b:cf:52:95:ef:b2:fc:fd:35:
                    d6:84:c7:64:cf:79:bc:3c:15:3b:2b:df:f1:27:ef:
                    ad:f8:4b:b9:1b:8e:e4:8f:cf:18:dc:e0:12:16:3e:
                    e6:c9:cc:f7:bc:eb:e4:d6:38:f2:bb:06:ab:44:f9:
                    64:11:7d:63:f7:c7:b7:ab:a8:ce:42:8e:9d:d7:ee:
                    4d:b1:6b:04:3b:89:5c:ff:55:6a:06:a4:b3:5a:bb:
                    86:7b:b1:95:42:2b:86:9c:3d:25:65:fe:cd:f4:57:
                    8f:1c:5c:32:7c:fb:72:65:3e:7e:ac:87:6e:5c:f8:
                    2d:29:ab:3f:8c:42:29:cb:e6:0a:4e:18:24:cd:0e:
                    35:56:0a:8e:b2:a4:a9:e3:2b:49:4c:9d:9c:e4:9a:
                    fe:46:70:21:a8:95:17:45:2f:a4:ab:7a:0a:68:a6:
                    39:18:41:4b:86:6c:a4:fe:e2:17:4f:6f:37:aa:30:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3C:5D:41:37:F9:A1:06:92:8B:4B:6A:AA:25:EB:1F:BC:42:87:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl

            X509v3 Authority Key Identifier:
                keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:9f:8d:e2:45:f2:e8:24:fd:f7:ff:2d:83:e0:b9:a7:7f:4e:
         d4:21:15:d2:b4:6d:5f:a8:83:d5:50:99:ed:d9:5e:61:25:ba:
         49:4f:7b:56:17:2f:ce:00:38:ee:19:63:c4:8e:d4:a5:21:cd:
         cc:e1:88:97:99:ec:ba:47:c5:d1:6d:50:2c:83:ac:8f:cf:e5:
         a3:40:c2:b8:d8:2c:5b:7d:c8:d0:79:b5:f2:d9:77:a4:51:1f:
         56:68:d7:bb:da:70:94:6a:d7:7a:02:db:9a:d9:65:34:0f:5c:
         fe:a5:ec:c6:b7:2a:72:22:fb:97:e7:89:d2:d3:41:bd:95:b3:
         33:23:43:ca:d7:cf:dc:67:be:5e:19:06:e8:89:78:c4:53:b0:
         17:f1:9f:97:d3:be:30:d5:db:a5:87:79:71:b1:40:06:0d:56:
         f7:75:97:94:da:88:e8:be:af:b2:fa:00:03:d3:f6:5a:54:9f:
         f6:8d:f0:50:ec:31:0e:4f:85:4f:21:a2:b2:de:70:c4:17:b2:
         f8:d4:b0:02:55:6e:6b:88:74:6f:cd:aa:12:c8:0c:0a:fb:bf:
         d8:d3:19:c0:79:dc:9d:97:d6:4d:e3:95:71:6e:33:e0:ba:e2:
         38:1c:89:80:3d:93:aa:51:70:df:66:1c:9e:c6:17:92:2d:5b:
         ca:15:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:03 2024 by rpki-client on console-ams.rpki-client.org