Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa
File:                     60a1544b-8598-310f-8888-5a763d4944f7.roa (raw, json)
Hash identifier:          kG3/+bPagDr7oPWRc4zHGdJsr4sHOUhNDh66OrP6qzQ=
Subject key identifier:   66:B2:99:B3:E9:DA:77:F7:56:39:74:30:AF:09:BD:A9:C3:F2:72:48
Certificate issuer:       /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
Certificate serial:       010D0C9F432858457D131D2403E731D50AF11180
Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     15019
IP address blocks:        208.91.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1d:24:03:e7:31:d5:0a:f1:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=4a7d8143-159e-4177-8a12-888e6c40259e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:68:d3:0a:c2:dd:6c:ca:78:c6:b7:b2:4d:
                    3b:c3:a6:3f:64:e6:0c:0e:16:12:0b:45:ba:9f:76:
                    ee:98:e9:20:c8:bc:b3:d9:94:06:14:ce:4d:13:bc:
                    3c:27:6e:91:3f:9f:b6:2b:d7:87:f9:23:82:29:7e:
                    ad:90:b9:1c:34:9b:36:6a:61:1e:0e:ec:6e:ff:e1:
                    f9:b8:fb:ca:ba:c8:2b:f3:39:1a:22:54:4f:5b:f5:
                    d9:1c:6a:ae:e6:3d:fd:22:53:70:a0:87:a1:22:16:
                    75:0f:0c:36:d7:82:79:15:3a:71:34:51:fe:4f:c7:
                    7b:70:80:a4:bb:81:12:35:70:fb:f1:6b:c6:05:a6:
                    26:02:a0:1b:b4:d1:da:13:d0:e6:7e:fb:06:d4:74:
                    23:d3:66:b2:b6:9d:c0:b0:7d:15:c2:6e:88:2d:2e:
                    65:6b:9d:8d:f8:fc:3e:6e:26:5e:7d:f3:a8:63:ec:
                    ee:64:23:93:30:ee:74:4a:79:cf:bc:2a:2a:8b:16:
                    97:cd:14:f5:32:ef:a6:b9:52:a7:7d:5a:73:b0:0f:
                    38:04:0a:8b:e1:1a:f6:de:65:62:56:b9:a1:3d:ce:
                    97:47:63:fa:c5:e1:56:69:d6:e4:d3:eb:e1:b1:a5:
                    b3:ba:8b:2d:ec:d9:a5:c4:d0:36:61:0e:57:b5:df:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B2:99:B3:E9:DA:77:F7:56:39:74:30:AF:09:BD:A9:C3:F2:72:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl

            X509v3 Authority Key Identifier:
                keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:aa:a5:f1:50:5c:98:fd:ae:f5:9d:de:30:ac:fb:0c:2f:4b:
         c8:8e:a3:fc:1f:c3:b4:b1:3b:4e:50:38:83:07:9a:a2:37:a6:
         f4:73:3d:a6:4b:64:fe:26:50:b7:09:28:24:44:55:2c:ad:45:
         64:3f:5f:f8:65:77:1a:67:7e:b1:d9:76:4c:79:49:e1:f5:0a:
         6e:07:ef:a2:a2:8d:49:f3:e6:94:93:2c:5d:fd:a2:d1:8d:90:
         9b:7c:ef:69:0e:8d:e2:8d:2a:8a:60:ae:f3:dc:04:7d:43:bb:
         8c:ca:8f:3a:f4:70:9a:eb:31:05:36:f7:e1:bb:cc:81:86:92:
         95:3b:ff:8d:2b:a9:ab:23:d8:b4:22:0a:60:7f:a2:b9:a5:32:
         95:3f:d0:fe:98:fe:9a:6a:7b:4f:6e:84:4e:e3:2e:8b:e7:5e:
         98:5a:3f:6f:31:b9:3e:90:61:7d:af:fa:c9:d9:e7:0e:bc:4b:
         76:c0:34:59:ca:ae:88:5d:e4:2b:6a:d1:ff:f5:4c:7a:35:8a:
         6f:37:79:43:a2:35:89:7c:18:d7:47:6d:c3:34:34:25:c1:1a:
         6d:58:8a:59:01:fd:60:fd:02:4b:13:16:f1:73:88:dd:b1:9f:
         fe:c2:d2:ec:6c:cd:5a:3b:e5:7f:9e:58:9b:58:8c:25:21:74:
         26:0b:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:40 2024 by rpki-client on console-ams.rpki-client.org