Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/5454a83d-f111-373a-8288-07d2c32c1bff.roa
File:                     5454a83d-f111-373a-8288-07d2c32c1bff.roa (raw, json)
Hash identifier:          t850CJSnxtplUvUauVA2AfnfN2hht8+7F+Ayn2gAC8c=
Subject key identifier:   FA:19:2D:C8:AE:AB:93:17:D0:BF:5C:CA:8C:1A:2C:3D:9D:13:C0:C3
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F432858456F1DB60AECDAAB5E0C6A4F80
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/5454a83d-f111-373a-8288-07d2c32c1bff.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     46632
IP address blocks:        199.68.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b6:0a:ec:da:ab:5e:0c:6a:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=99b7cc4a-088b-47b2-af91-63eb7aa1623d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:c3:11:53:9d:46:23:41:fd:a2:23:59:3c:
                    c7:02:ea:0d:71:dc:7f:1e:fa:1c:c3:d3:8b:7d:c1:
                    68:0e:10:1c:a2:f2:34:a6:13:5b:b0:ae:ad:37:1a:
                    b3:2a:a4:64:2d:17:d0:a4:5f:af:f5:b7:16:8b:0d:
                    11:69:24:ad:43:34:e2:fa:44:79:9f:2d:16:7e:ca:
                    f5:52:d3:82:d0:ae:79:1a:56:84:db:92:a6:ce:49:
                    77:ec:ea:95:aa:e0:b2:30:0c:63:bf:45:a2:c4:f8:
                    25:66:75:17:20:c4:73:d9:6e:4c:5f:59:75:73:15:
                    43:21:c4:7f:91:e0:36:03:19:3e:af:5b:2e:27:f8:
                    03:b9:fb:4a:a2:6c:df:18:6f:77:de:44:76:29:c8:
                    df:3c:85:9c:7e:ce:c2:6f:c9:1e:78:8e:88:d8:58:
                    9b:e7:99:3f:ba:c9:62:2b:6b:8e:18:09:d3:64:cd:
                    54:40:e7:ad:1a:35:5d:d1:ab:35:05:8f:f3:c2:42:
                    93:8f:49:30:ce:fe:06:83:14:f3:72:ed:3e:30:7d:
                    0c:64:4d:61:cb:f3:4d:52:3a:61:e4:cc:de:4b:5d:
                    d5:69:7f:02:94:e6:d1:a7:3a:a1:99:4f:e1:a4:56:
                    78:a4:a6:11:e8:48:45:cc:1a:53:6d:94:b0:f6:72:
                    e7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:2D:C8:AE:AB:93:17:D0:BF:5C:CA:8C:1A:2C:3D:9D:13:C0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/5454a83d-f111-373a-8288-07d2c32c1bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f1:39:bb:9f:8d:40:ac:de:2d:83:03:0a:72:27:85:af:c5:
         2d:08:e7:65:55:54:47:ce:00:cb:d5:a0:13:57:b0:58:6f:db:
         c7:38:d6:09:bd:93:37:4f:18:9f:ea:f5:49:07:f5:c7:fd:c6:
         a0:51:54:14:5d:3e:11:fe:38:a1:0a:f7:b0:69:8e:b7:67:bb:
         29:39:b1:f3:68:8a:f2:cf:b3:e9:23:d6:3b:bb:68:e9:e9:92:
         eb:6b:4c:fc:44:93:35:b6:8d:0a:ab:a5:2c:59:b2:cd:10:9c:
         98:53:c0:78:46:55:aa:56:f4:f2:55:ac:a4:78:56:1c:81:d8:
         08:1b:7d:aa:6f:03:e0:ef:98:c7:49:27:94:31:28:d5:1b:42:
         2d:71:05:ec:b7:33:83:55:87:fd:bc:87:ac:22:b8:d8:72:44:
         20:0c:c1:3e:d5:93:bb:d7:ff:63:90:4f:83:47:1d:93:da:85:
         ac:ee:1f:d1:95:6f:6d:7d:5f:33:06:00:7f:8c:61:6b:68:54:
         cf:b9:48:2d:b6:f7:db:e7:14:52:03:80:1b:d8:89:13:8f:78:
         59:fd:f2:56:14:5f:a1:8d:c5:c7:da:bb:28:50:72:bb:8a:50:
         e4:f5:0a:e2:4f:d5:dc:36:01:ec:09:8b:c3:26:71:17:72:23:
         b8:fd:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 16:10:35 2024 by rpki-client on console-fra.rpki-client.org