Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa
File:                     91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa (raw, json)
Hash identifier:          c9fvXvHDumU00DqAnoTC0XbsCJu5GyC82UqIdpMCzY0=
Subject key identifier:   55:4F:33:7F:F1:CA:1C:B7:4E:F7:02:21:9F:EA:88:5C:8A:68:E3:83
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F43285845917A7AF3D3CCFA59FB1FB2C0
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa
Signing time:             Tue 16 Apr 2024 20:25:04 +0000
ROA not before:           Tue 16 Apr 2024 20:25:04 +0000
ROA not after:            Mon 15 Jul 2024 20:25:04 +0000
asID:                     16509
IP address blocks:        199.15.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:7a:7a:f3:d3:cc:fa:59:fb:1f:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Apr 16 20:25:04 2024 GMT
            Not After : Jul 15 20:25:04 2024 GMT
        Subject: CN=4c8ae416-fbd7-4cbe-84c3-52e341a7735a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:60:9c:e7:94:5e:9f:1c:b0:14:56:86:ab:
                    f8:13:71:29:7a:22:7e:95:c3:c3:79:42:f3:02:d8:
                    e4:8e:33:3c:cd:26:43:ae:e5:ca:69:e3:ea:0e:d1:
                    f7:4a:cd:25:a9:d6:4d:92:50:d0:ec:1c:24:25:d2:
                    a8:e3:cb:7c:69:4c:b4:4f:dc:00:99:d6:b5:f5:33:
                    5a:d2:73:9c:d2:26:4b:de:6b:3d:47:38:d7:94:d5:
                    fd:35:5c:bb:43:f7:11:87:1d:a2:2b:69:6e:58:eb:
                    0e:a0:a9:5c:7a:cb:cf:27:ba:90:7e:c1:95:1e:42:
                    61:68:95:f2:0b:88:df:51:de:90:17:03:b7:d6:69:
                    dc:aa:2f:7b:d1:0b:c9:27:9d:37:c8:d9:c8:48:7f:
                    c9:28:51:39:1f:2d:61:3e:02:d2:d1:d6:6c:16:81:
                    b2:6f:37:17:ce:58:17:07:a7:43:c1:b4:b2:12:41:
                    0f:cc:8f:86:e7:3b:5d:c0:80:40:f6:7a:6c:38:f9:
                    d3:d7:94:f3:55:aa:08:be:40:f5:b2:20:38:00:8c:
                    32:99:34:76:dc:7f:4f:3e:79:f8:c9:d4:7f:d2:fe:
                    80:00:67:b3:5a:73:6a:2e:fb:40:2e:28:cd:d7:26:
                    20:69:d1:5e:ca:d9:f3:3a:75:a8:12:98:e6:05:5b:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4F:33:7F:F1:CA:1C:B7:4E:F7:02:21:9F:EA:88:5C:8A:68:E3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/91e8eef0-d468-36f8-b2c0-cb990eb26e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:32:50:b3:11:cb:6b:0b:48:f5:b6:1c:6e:e6:66:86:64:
         f5:5d:13:7b:0e:21:91:36:5a:77:bc:14:0b:8b:96:52:78:aa:
         c0:38:a3:90:99:1b:81:b2:1e:fa:75:11:9a:7f:3b:d7:54:30:
         6e:24:0e:bf:7e:76:ad:99:4f:1a:99:c3:01:33:d3:af:1f:01:
         e5:16:f6:1b:fc:0a:56:f7:8b:8a:d0:72:d0:2c:a8:8b:26:77:
         55:13:08:35:3d:43:5f:88:68:3b:d7:32:33:40:6d:2d:fc:72:
         0c:a0:4d:99:e4:fa:86:c5:88:8c:56:a8:da:e2:51:93:2d:64:
         13:3b:66:1c:cc:9d:0c:ed:8f:7e:3d:5b:a5:97:8b:74:49:58:
         70:50:ef:08:53:db:bc:e7:65:3f:a7:ef:42:c4:c4:32:bf:a7:
         c8:cf:ef:18:d7:01:3c:de:2f:8d:97:c2:7c:7b:ce:21:59:19:
         aa:ed:27:85:e0:02:45:bc:47:93:00:ac:71:7f:56:43:08:49:
         6d:c9:c4:c3:93:c2:c3:7a:df:c8:e3:0d:37:b2:1b:b5:d7:c7:
         ba:ba:61:c9:49:75:e7:5d:64:65:bc:b5:fe:b4:f0:09:54:0d:
         41:82:f9:7f:63:9a:1d:e5:1b:2f:57:b0:d9:a7:2c:65:4b:e0:
         1c:35:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:01 2024 by rpki-client on console-ams.rpki-client.org