Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa
File:                     60e73e07-f4ae-3c71-9e25-99a3e612e843.roa (raw, json)
Hash identifier:          CBGg0jvaprS2pYwlODAT+tMsgCO4DIkeVOAt1m/hbqo=
Subject key identifier:   35:D5:3A:5A:2F:E0:CF:2B:37:E0:EF:C4:A7:BE:02:4C:0F:57:EB:E9
Certificate issuer:       /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Certificate serial:       010D0C9F43285844E7D534835F30DA5F6B2E7360
Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa
Signing time:             Fri 16 Feb 2024 02:00:26 +0000
ROA not before:           Fri 16 Feb 2024 02:00:26 +0000
ROA not after:            Thu 16 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        199.233.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:d5:34:83:5f:30:da:5f:6b:2e:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
        Validity
            Not Before: Feb 16 02:00:26 2024 GMT
            Not After : May 16 01:00:26 2024 GMT
        Subject: CN=522e47e8-0ee2-4dac-8c10-dc1117dff4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:e4:0e:7b:14:5d:4e:ef:95:00:83:7e:55:
                    c3:46:b3:a4:f6:5b:e6:7c:93:71:54:6d:ee:5e:b2:
                    27:08:2c:28:74:70:eb:ce:98:b9:d5:75:63:b8:f4:
                    89:80:61:ac:88:90:0d:f6:9d:90:cd:a1:a8:13:d9:
                    8c:8e:3f:ab:a8:1f:be:67:4d:e3:f8:35:3a:67:57:
                    3a:b7:16:74:65:32:af:7b:22:1b:b1:10:6b:a4:d4:
                    af:c7:ab:c4:d7:16:8b:96:77:11:b3:6c:e4:30:68:
                    a9:4d:14:d4:39:b0:02:eb:a1:d5:73:e3:26:1b:27:
                    17:d0:d3:e3:81:75:f2:e5:9e:41:25:c6:3c:e1:e5:
                    a4:2b:a9:80:5e:5d:95:6d:4b:d5:83:cf:10:ee:e2:
                    9c:8b:4f:cb:76:31:40:4c:75:a1:2d:7a:c5:f9:6b:
                    79:74:91:c2:2d:f3:4a:36:1a:98:49:5d:a7:bb:c7:
                    d6:f5:aa:ff:90:b0:20:4c:f9:32:07:5e:ec:24:c0:
                    f8:5b:d3:99:50:8a:ee:e7:1e:dc:9f:64:fd:02:61:
                    69:69:49:34:8b:f7:bf:8d:13:05:0d:28:60:2e:fb:
                    7b:8f:0e:f1:7f:ea:b9:09:df:ce:0d:36:6a:cb:a1:
                    82:10:a7:13:85:db:97:ff:a8:4f:76:7d:f9:9c:a5:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D5:3A:5A:2F:E0:CF:2B:37:E0:EF:C4:A7:BE:02:4C:0F:57:EB:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl

            X509v3 Authority Key Identifier:
                keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:fd:e8:8d:73:04:dc:7f:c5:75:ca:b4:d6:0f:3d:bf:41:
         a5:00:ed:fe:73:75:c6:ae:b3:1c:37:f8:6f:66:9f:01:43:06:
         07:80:6b:35:dc:2e:af:39:90:63:db:e4:dc:de:16:ac:99:0a:
         97:fa:d9:81:3a:67:a9:9f:fe:fa:48:3f:58:8a:f5:6b:9d:47:
         ec:d7:d0:f4:71:2f:7d:21:ad:17:54:6e:d2:4a:63:1d:a1:77:
         af:56:87:79:2c:46:cf:2f:a7:18:27:00:69:08:95:bd:fc:80:
         44:5d:dc:06:b0:9e:ce:df:20:54:76:7e:f8:c6:22:8c:a6:8b:
         6d:36:71:8b:e2:5d:5e:f6:a2:12:6d:e4:e1:6f:cf:7f:38:0a:
         ef:4f:d3:ac:44:ec:32:63:20:cd:10:00:1f:21:3b:f3:4c:e6:
         94:23:d6:77:85:82:50:a4:c9:08:64:69:94:8f:60:74:5e:09:
         31:32:ea:cb:6c:e3:0c:e5:e9:2e:0d:9f:e3:02:5b:98:34:b9:
         98:1e:95:b5:cc:25:96:a3:18:14:92:58:7d:6d:53:61:3b:74:
         74:e1:c4:3a:f5:5e:a8:ad:22:79:a2:0f:2b:05:28:7c:9a:71:
         ab:f8:db:03:07:44:cb:28:2e:26:2c:d9:b5:ac:fa:69:33:dd:
         e9:a9:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:04:56 2024 by rpki-client on console-ams.rpki-client.org