Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa
File:                     b923e55a-93cc-35be-bb9a-bf18235d65a9.roa (raw, json)
Hash identifier:          Ne/QL+LkmHWwbHf6sh7SWxMEHgUUR4IUIDVGzsh4I+Q=
Subject key identifier:   03:C2:FC:43:62:07:8A:9B:9F:5B:5E:7B:CA:5C:C8:05:25:97:24:C4
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584510864AD1BBC331F919D45E00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa
Signing time:             Fri 01 Mar 2024 15:49:35 +0000
ROA not before:           Fri 01 Mar 2024 15:49:35 +0000
ROA not after:            Thu 30 May 2024 14:49:35 +0000
asID:                     14618
IP address blocks:        216.87.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:86:4a:d1:bb:c3:31:f9:19:d4:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Mar  1 15:49:35 2024 GMT
            Not After : May 30 14:49:35 2024 GMT
        Subject: CN=bff31694-c838-43fd-be6e-8dbf1f1ab657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:75:6e:99:5b:ed:30:7a:df:44:52:5b:f0:0d:
                    54:4d:00:07:7c:a1:3d:ed:02:2a:56:58:d6:c4:7b:
                    8f:61:a4:18:7b:a0:10:1a:cf:52:bd:ae:cf:45:81:
                    c1:9a:6a:91:1a:53:ff:72:c5:2c:51:23:e1:ca:b5:
                    55:93:92:b6:fe:a9:70:8d:53:9e:70:7f:da:53:8a:
                    a9:39:9f:3b:3d:8d:13:da:9d:f9:85:15:7d:03:69:
                    63:1b:c4:ce:1e:1e:e7:11:4a:58:7e:f7:f3:4b:08:
                    4e:a3:64:75:cb:7a:86:48:ba:76:12:62:9e:03:c8:
                    8d:72:22:69:a0:59:4e:ec:57:67:ea:f8:1e:ff:8b:
                    f3:5d:3d:ed:27:9c:61:99:a3:49:f5:6c:c2:25:53:
                    a2:b8:a7:eb:07:dd:1b:c0:94:7b:c9:53:bd:5e:38:
                    a7:7e:33:17:19:9f:31:df:6a:de:be:9f:0b:66:69:
                    64:9f:57:3f:fb:03:5a:d9:4b:96:29:c5:ee:50:cf:
                    01:d3:e2:90:a5:1c:44:fb:6a:92:f0:32:c0:ef:f4:
                    21:f2:3a:af:10:8e:64:69:4b:5b:5b:f3:94:e8:b7:
                    1a:e4:5c:50:b4:53:e7:1a:62:3b:c4:7e:a5:5a:9b:
                    0c:1e:3c:b2:89:be:f9:66:b9:bd:43:a1:94:87:4a:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C2:FC:43:62:07:8A:9B:9F:5B:5E:7B:CA:5C:C8:05:25:97:24:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:d2:2f:08:9f:4e:90:78:bc:a3:f6:4d:29:bc:4e:90:4e:
         66:db:b3:a8:dd:f6:0a:32:60:cd:af:36:b5:e3:e7:66:d5:91:
         52:83:f5:33:2f:56:50:65:68:39:6b:37:d6:26:55:70:e5:42:
         a5:30:a1:b7:ff:9f:c8:b6:f4:b0:2a:6c:dd:7b:9d:00:4c:5a:
         ed:09:a9:dc:06:7d:2e:6d:87:e8:ac:95:3b:5a:60:58:90:5a:
         f7:60:92:8e:40:db:66:6f:2c:f2:5f:9e:87:25:5a:ae:cd:3b:
         3e:03:56:5c:fc:f0:69:5e:14:91:84:20:38:e8:03:f7:b7:05:
         ff:84:1a:ad:4a:05:c8:27:27:78:53:74:17:cb:97:ca:f8:4a:
         25:03:46:c5:c0:3b:45:49:b1:2b:24:a7:f7:32:e5:d9:2a:46:
         3a:11:64:45:0b:6a:62:fb:53:db:da:19:33:02:b3:a6:43:59:
         01:fd:ea:f6:7e:18:17:bb:14:b7:7e:17:42:99:20:64:39:fb:
         10:09:60:a1:c8:56:25:43:9d:f6:0e:07:c4:70:30:6a:5a:11:
         96:e4:74:4d:fc:77:ba:01:41:2b:d4:e5:7e:f6:cc:98:1b:87:
         86:e0:07:3a:94:36:f5:52:ec:b9:ee:91:24:99:33:e2:a9:ae:
         ed:f4:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:40 2024 by rpki-client on console-ams.rpki-client.org