Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/13e9011d-41e0-3e72-96d8-064dda151da3.roa
File:                     13e9011d-41e0-3e72-96d8-064dda151da3.roa (raw, json)
Hash identifier:          6GgHy31E/g105Ykzs1zFojqKI1RUEHHj6YUbl+pPn18=
Subject key identifier:   84:8B:21:CB:61:6A:E0:92:C9:76:C6:FB:E0:6E:E8:A1:1F:2D:DD:8E
Certificate issuer:       /CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Certificate serial:       010D0C9F43285840B6D55211EF4FBE2221B68EE0
Authority key identifier: 50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/13e9011d-41e0-3e72-96d8-064dda151da3.roa
Signing time:             Fri 28 May 2021 15:06:54 +0000
ROA not before:           Fri 28 May 2021 15:06:54 +0000
ROA not after:            Mon 01 May 2028 04:00:00 +0000
asID:                     20473
IP address blocks:        173.249.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:d5:52:11:ef:4f:be:22:21:b6:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d7c699-190f-4fad-a37d-bd259bb116b5
        Validity
            Not Before: May 28 15:06:54 2021 GMT
            Not After : May  1 04:00:00 2028 GMT
        Subject: CN=f86eff90-6dbf-4c9c-b860-2f6429702875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:38:53:f5:4f:b5:2b:41:08:cc:e2:3a:58:
                    4a:bf:5e:0c:9d:89:a5:f7:e5:d9:bb:38:69:c3:0c:
                    fd:8a:25:ab:6c:f7:c9:40:b0:41:7d:b3:b9:2d:58:
                    21:19:9b:6c:b6:53:32:09:b8:0c:50:b6:1b:22:8a:
                    63:41:7c:47:2e:89:dc:12:60:be:11:c9:19:42:68:
                    f3:7c:4c:cc:97:9a:d0:43:5a:23:3c:eb:97:ee:e5:
                    d4:56:48:14:a2:09:3b:09:67:32:39:f4:97:f9:cf:
                    a0:82:d4:c8:1b:49:ca:bf:4a:30:f6:86:7e:c6:2c:
                    40:e3:a5:e1:6f:0a:34:48:62:ab:73:e4:07:ac:72:
                    d5:db:2c:df:4a:09:9f:f4:9e:50:10:d2:9a:de:df:
                    ff:67:0e:22:44:f2:50:10:13:22:c2:36:5b:aa:07:
                    c0:e2:0d:9a:32:ac:5d:e0:9c:d4:cb:10:e0:bc:9d:
                    f9:c7:0a:07:3d:89:f6:ee:40:25:2e:c2:8b:60:cb:
                    eb:a6:73:1a:95:6a:f7:c1:8b:6d:c3:34:b7:4e:eb:
                    c9:de:23:de:18:e5:81:65:69:31:10:f7:30:e5:d0:
                    96:44:2b:dd:2e:e0:19:46:3c:ac:fe:f7:67:f8:10:
                    b9:c7:a4:8d:f3:ec:0f:ac:85:86:13:c2:fb:c1:3a:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                84:8B:21:CB:61:6A:E0:92:C9:76:C6:FB:E0:6E:E8:A1:1F:2D:DD:8E
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/13e9011d-41e0-3e72-96d8-064dda151da3.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.crl

            X509v3 Authority Key Identifier: 
                keyid:50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:43:41:b4:71:20:77:3c:c7:48:f8:e2:53:89:bf:69:87:
         51:aa:57:9e:6e:82:5c:8d:55:71:42:cd:7d:76:f9:1c:2a:44:
         9b:7b:dc:f4:ca:84:09:f0:9d:7b:5b:d2:db:5e:d8:29:97:b1:
         3c:d1:c7:d5:c2:c5:3c:15:02:5e:33:69:90:cc:01:1e:69:02:
         b4:c3:aa:50:e4:dc:55:ca:09:6e:b4:c1:bb:49:2e:63:26:cb:
         de:a4:0b:4f:7c:49:e6:95:20:73:03:05:9a:aa:19:8d:39:53:
         9a:55:eb:79:e0:5b:bc:62:2a:a0:cf:4b:ba:f0:f3:ff:03:3a:
         b8:ce:82:c4:34:3b:e0:98:17:7d:43:ba:fe:19:00:fc:f1:0e:
         df:96:9f:ad:e1:8f:c8:c2:e7:5d:f2:27:c3:ea:e6:c2:75:c9:
         ee:ec:ee:1a:d3:88:5a:67:c3:81:fb:6e:56:70:89:a9:6f:81:
         92:eb:18:95:4b:35:97:87:f2:92:0c:f2:6d:87:a1:4f:cd:91:
         26:86:ec:8f:0e:dd:2d:63:96:6c:a5:ef:b2:17:de:08:08:5f:
         f0:ff:76:72:c8:0e:98:28:0d:8e:79:ef:30:d8:02:71:46:75:
         97:a8:f5:e6:d5:90:38:70:59:da:aa:8f:75:92:9e:ae:09:23:
         60:bb:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:51:49 2023 by rpki-client on console-ams.rpki-client.org