Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
File:                     536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json)
Hash identifier:          e9V1Jte7XFKubDlkZfSndEGTbsyU8Oe6tViAKraDMKc=
Subject key identifier:   13:FB:CE:91:71:11:6E:C4:69:0B:61:B9:8C:33:34:78:14:36:77:15
Certificate issuer:       /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial:       010D0C9F432858457FDDC95280EC85B91919A680
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        161.199.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:c9:52:80:ec:85:b9:19:19:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=cefe830c-db5b-4ba7-b423-59fa79d9b528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:de:db:39:7d:05:0e:63:ca:a4:ed:15:19:
                    7d:12:e0:67:dd:62:b1:c0:97:7e:14:83:a1:c9:6f:
                    65:06:ea:fe:ee:9d:9b:68:c7:f6:8e:16:3d:b3:9f:
                    7c:85:15:71:5c:4e:b1:df:38:cf:e3:b8:60:47:16:
                    13:30:8c:c8:76:d3:d2:bd:2c:05:d5:6e:22:cd:0b:
                    40:0c:c4:ff:e1:14:e6:da:1b:64:a5:24:40:be:27:
                    56:c3:00:3f:ef:9a:fa:a0:6c:cf:a4:9f:9b:b2:af:
                    18:c1:5e:84:2f:cc:d1:ed:a2:12:d8:ff:b7:23:52:
                    5a:f7:df:b0:10:9e:52:e0:61:9c:8a:f4:03:7f:b9:
                    c0:71:48:6d:80:c6:f7:c3:1a:6e:2c:1a:83:2c:d7:
                    a3:e9:23:25:49:66:e7:08:8e:7e:4c:83:31:77:a6:
                    9f:5a:28:ce:4c:72:03:50:6f:fc:ab:fe:29:7e:07:
                    25:dd:05:d6:df:f9:b5:49:70:37:eb:ed:d4:d5:c9:
                    d5:18:2d:94:1b:48:b0:04:2e:f6:07:08:b3:b4:53:
                    76:9b:6f:77:17:fa:7c:7b:ff:11:63:41:2b:8f:7c:
                    cf:44:50:8c:a9:17:33:c9:49:d0:97:89:71:36:b2:
                    5a:02:a2:03:5c:3a:87:c8:d7:a4:07:d8:ad:1e:f4:
                    ca:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FB:CE:91:71:11:6E:C4:69:0B:61:B9:8C:33:34:78:14:36:77:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl

            X509v3 Authority Key Identifier:
                keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:7c:de:c5:37:e7:b7:26:c1:e6:53:22:ee:c1:a3:01:11:
         04:0a:69:7e:97:1b:0c:27:a3:34:dc:d7:92:d2:d6:60:f3:d2:
         64:a8:13:a9:60:2d:7e:62:45:e0:90:ea:81:76:98:20:bc:6a:
         45:3b:3a:05:9e:6a:62:52:76:99:36:3a:b5:ed:83:82:93:7b:
         be:8e:5d:11:18:40:a8:d2:af:bf:05:97:ab:d9:f1:3f:6b:fb:
         4e:32:f9:80:07:00:7d:89:1d:22:5d:94:88:8b:5e:a1:a7:af:
         22:28:3f:3b:f3:5d:87:06:04:80:86:ef:7d:19:77:36:12:fa:
         c2:5f:6b:ee:e9:a9:3b:25:ff:23:92:00:ee:f2:c7:3d:f9:de:
         f2:62:3d:ca:95:33:af:d7:92:45:36:71:67:3d:0b:56:12:fd:
         91:c0:ce:c1:6b:36:71:c1:6a:4c:e9:b9:c0:9b:53:42:70:56:
         84:fc:5e:7b:8b:85:0d:18:0e:cc:e6:37:07:3d:eb:47:be:10:
         09:42:6f:91:4d:98:c3:99:bb:b2:89:07:39:fd:80:fc:8b:1d:
         10:fa:ab:11:e3:c7:6c:b1:34:a9:e0:0e:98:0b:e7:6a:99:8a:
         0d:2b:87:1f:db:94:a9:d8:d1:5c:04:35:aa:1e:bb:e1:ed:69:
         21:66:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:39 2024 by rpki-client on console-ams.rpki-client.org