Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa
File:                     361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa (raw, json)
Hash identifier:          YcnS5JuFVXL80vabNvFxVe1GtsRyrWnKeg6tk2UZd0M=
Subject key identifier:   54:CC:2A:19:D6:11:FE:B0:44:07:27:65:E6:D2:5D:D4:66:33:02:A2
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285845A6F362E1C3977CFF61BDFD00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        199.45.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:62:e1:c3:97:7c:ff:61:bd:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=1063dea8-47a2-4649-a35e-cfcdf1e510f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:93:b1:dc:77:4d:0c:a8:6a:24:66:09:8a:
                    27:44:9a:20:41:2e:37:17:d7:8e:1a:03:5a:69:c3:
                    0a:48:8b:58:f1:fb:a7:c9:0e:f6:a9:32:7a:12:37:
                    c0:07:98:57:01:d1:35:e6:9c:b3:25:50:94:06:ab:
                    b5:50:a0:2f:0d:35:32:58:ea:e9:93:d2:f1:88:66:
                    5b:e7:e8:8e:61:e9:bb:05:e5:d2:08:20:78:a7:93:
                    26:3b:03:fd:f9:f3:5c:5d:2d:17:ab:7a:38:08:59:
                    3f:f1:4f:a6:94:20:10:a5:9e:fe:85:e0:a3:24:55:
                    c5:30:25:6b:eb:39:3d:65:9d:05:23:bb:7c:15:90:
                    81:85:3b:09:63:da:e5:a5:7b:1c:13:e6:29:20:3a:
                    bc:8b:43:23:6c:2f:d3:e9:96:46:26:79:ec:08:7a:
                    5c:79:75:9a:70:80:e1:ac:90:92:39:7e:ab:81:0e:
                    3a:ca:3e:2d:1b:81:f1:dc:96:1b:ef:27:2e:98:88:
                    4c:ae:77:40:32:97:60:7c:b0:5c:a1:c5:e6:b9:e0:
                    b4:e6:1d:a1:db:fe:44:2f:12:17:02:aa:f9:46:3c:
                    8c:72:51:30:ff:f0:75:d5:ac:17:47:e6:87:78:9b:
                    b3:fe:7a:f0:95:25:d9:39:7d:f9:d4:89:84:96:fc:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:2A:19:D6:11:FE:B0:44:07:27:65:E6:D2:5D:D4:66:33:02:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:bf:02:e1:e3:4e:59:20:2d:ec:e7:47:c8:86:fe:77:6e:
         c4:4a:af:19:7f:0e:1d:24:88:f2:c9:3d:e8:53:28:95:d0:f3:
         06:08:05:f7:a9:8d:08:a6:15:38:70:80:13:ab:5a:35:c1:b5:
         8c:fa:00:7c:76:8f:e1:1d:8a:7c:52:88:b4:19:2a:b4:f9:b9:
         e2:e6:b2:a7:bf:6c:6e:bd:3e:84:fb:a9:53:7d:90:29:0b:33:
         8c:1f:3e:1d:47:7c:54:f0:6a:58:ba:33:e8:7b:e6:5b:a7:eb:
         ab:3d:8e:e3:3c:12:23:3d:71:19:fe:bb:7d:4d:e8:9d:1a:31:
         9a:5b:be:a8:79:04:ba:d9:09:d2:1c:a5:42:97:c9:50:3f:c1:
         1b:26:a5:68:d8:97:d9:78:2d:ae:c0:b2:61:f7:7c:6d:0c:0b:
         b5:76:a4:57:25:0a:b1:d5:74:0e:71:0c:f1:64:1b:dc:29:02:
         29:8d:54:4d:75:8d:39:21:5d:e2:8b:3a:31:e1:35:33:dc:06:
         65:97:81:ef:6f:a5:fd:3c:da:64:14:1d:ff:96:43:45:a2:ca:
         dc:d5:d1:2f:1d:dd:35:73:e1:a6:0e:88:04:19:cd:46:7b:6a:
         da:88:67:39:b3:d9:8f:5f:b4:b1:99:07:26:74:ba:32:04:08:
         9b:55:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:36 2024 by rpki-client on console-ams.rpki-client.org