Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa
File:                     7f2bb030-6124-30be-b08b-a5654c3506c4.roa (raw, json)
Hash identifier:          1pSPscd4njNS05cBaqKmZK65k3b7LF3v3Z83igMOyf4=
Subject key identifier:   35:E8:DC:A9:12:12:06:3D:BD:F4:B8:20:EB:39:E4:3F:8C:E5:99:59
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F43285845B4E8D49F6C05ED4DC75A60F0
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        216.9.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d4:9f:6c:05:ed:4d:c7:5a:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=27ed9e4f-faee-4706-9dd9-9c897a09bd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:75:1f:3c:da:65:fa:ad:13:e4:d3:e2:39:
                    51:2f:16:71:f1:47:8d:98:3b:8b:00:5d:86:9b:73:
                    cd:c6:49:d3:4e:5a:ce:44:20:d3:11:6f:82:b4:50:
                    89:1a:ee:5b:77:8d:3c:13:3c:98:72:90:20:a8:80:
                    ef:c8:e3:fd:0e:86:d8:a6:0a:03:78:8c:c3:55:3a:
                    45:12:54:30:a7:ae:a6:0d:a0:5e:79:9a:10:66:82:
                    88:ee:6a:11:cd:33:d9:ca:1d:6a:d8:da:46:9c:16:
                    c1:66:68:92:fe:2e:03:a7:b1:3a:3a:70:22:a3:51:
                    0f:7a:ac:36:7a:96:f0:86:12:db:db:49:93:b7:fd:
                    e3:4d:b5:f8:80:bc:e2:e9:62:3b:89:8c:c2:d3:7c:
                    dc:f9:4a:3c:c7:5e:86:47:30:3c:10:09:eb:dc:41:
                    8a:2c:87:0c:11:bc:af:88:aa:a8:1f:de:4a:b5:de:
                    9c:bb:76:36:c1:3b:e8:ec:13:aa:ac:1d:f8:21:bf:
                    40:f4:27:34:9f:31:73:64:5d:2a:d2:7c:5c:71:e5:
                    77:e4:a4:9c:30:da:2e:2a:29:9b:cc:e1:57:e2:94:
                    5c:4b:80:8d:e8:a7:0d:f1:53:07:05:95:88:bc:cf:
                    3c:b3:6d:e8:c3:db:ea:ec:65:d0:c4:b3:1d:af:21:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E8:DC:A9:12:12:06:3D:BD:F4:B8:20:EB:39:E4:3F:8C:E5:99:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f7:04:90:b9:bf:98:cc:81:9e:23:fc:32:90:1b:ec:7f:43:
         c9:08:fc:d8:19:18:43:ee:49:01:c5:ab:4b:7d:8c:26:35:78:
         b0:31:d9:b9:f1:a8:20:d8:2b:e3:43:01:b2:6d:bb:eb:c5:f2:
         5a:f0:ee:a6:12:bb:04:e4:3c:50:74:78:cc:e5:f2:ac:c5:0b:
         16:2a:aa:df:6c:c1:2a:ea:90:1e:1f:f9:9f:4e:15:73:05:2a:
         b1:64:b5:cb:a0:9b:1e:e9:ec:1a:b1:4e:5f:fd:fb:a6:a5:52:
         0f:fc:61:3f:50:b8:2b:10:d9:14:eb:53:03:7a:26:69:b4:7f:
         e7:b8:2b:c5:ca:2c:f6:2c:bc:d5:77:07:69:76:52:fc:a3:fe:
         8b:da:99:6b:4c:30:56:07:7d:b2:c7:86:9a:a1:1e:b3:f4:3b:
         89:96:d3:40:f6:ff:10:82:ef:2b:bc:d9:2e:0e:65:36:97:eb:
         bf:3d:22:03:d0:76:68:c3:35:6a:c9:00:e6:dc:ab:68:2a:15:
         e8:f6:17:60:ca:6f:09:68:e0:38:70:ee:21:d0:86:dd:7e:b2:
         c2:d1:e1:7b:e9:33:29:5b:ce:7d:17:95:ba:34:7c:5b:84:53:
         af:37:12:0f:d9:57:3c:f2:62:24:cf:17:47:d2:f7:7b:22:64:
         59:19:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:22:01 2024 by rpki-client on console-ams.rpki-client.org