Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa
File:                     02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa (raw, json)
Hash identifier:          Y3Svtwg6J4vWoHhdxXhqdCRblZSUOm/v42F228owAPg=
Subject key identifier:   C0:AB:DF:77:B1:87:37:56:FF:A3:15:16:D5:C5:CA:F8:95:28:F1:00
Certificate issuer:       /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial:       010D0C9F4328584812D53B29DAF66290CF7F32C0
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        199.91.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:3b:29:da:f6:62:90:cf:7f:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=7137a8ed-f295-4761-a60f-bca16838d1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:52:9a:3a:72:20:15:b4:ca:1f:c0:fc:6f:
                    38:1e:d2:02:9e:75:94:50:ae:e7:56:be:2c:62:b4:
                    19:7b:82:0e:c3:0e:69:05:95:f0:03:0a:56:57:2a:
                    1a:8d:a0:50:1e:ab:90:03:9a:90:30:16:f3:60:73:
                    82:70:b4:cd:c1:b3:3c:cc:5e:2b:21:8c:98:79:97:
                    bb:52:40:b9:a4:93:20:05:8b:fc:8a:22:b6:a0:f0:
                    f7:ba:7e:c5:63:7e:db:f6:55:15:52:7d:28:4e:84:
                    9b:d7:5f:b6:c6:1a:f9:8b:4d:de:2b:7c:5e:9b:66:
                    d2:1e:c7:90:e7:61:05:d9:fd:24:74:2f:bd:04:f7:
                    90:18:1f:e2:90:41:ef:89:5f:dd:b3:b9:b1:be:ff:
                    a1:69:c9:54:05:47:bb:19:48:5f:29:93:05:4f:b2:
                    ac:da:3e:e1:4e:35:0c:03:ef:41:91:23:9c:4e:f3:
                    63:3a:cc:7a:45:e4:7f:3d:bd:8a:bd:a4:c6:51:38:
                    f0:ea:94:bc:f1:25:8e:65:40:7c:c2:cf:d8:ba:d6:
                    a1:ad:46:90:8a:2f:87:5c:95:fe:9a:41:b1:f7:9d:
                    57:80:e5:e8:13:42:23:20:bd:05:5f:7c:56:81:69:
                    a7:74:8a:88:b9:d2:69:8a:27:2c:8c:0b:45:67:e1:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AB:DF:77:B1:87:37:56:FF:A3:15:16:D5:C5:CA:F8:95:28:F1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl

            X509v3 Authority Key Identifier:
                keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:1e:b3:9d:5a:29:1c:4a:ed:6c:b4:cb:01:15:33:3d:a0:
         da:f0:b1:cb:b2:2a:c7:2e:62:e1:5b:4d:05:3c:d0:27:9f:9c:
         94:8c:48:0e:53:a1:c5:c0:51:66:f5:fd:e5:92:e8:a1:35:dc:
         5c:50:ec:5e:ba:c5:7b:53:33:bc:20:49:6c:3a:19:21:3b:73:
         ff:f9:f4:d9:87:5d:bc:bb:38:ef:9b:6a:36:86:f7:73:26:ca:
         24:11:d3:cd:6c:ad:00:31:6f:c5:e3:d3:c6:f5:9f:39:9f:bb:
         5a:9c:61:fc:33:80:d8:39:ab:dd:80:94:0a:f5:9c:9f:ff:4f:
         8b:2f:7e:4b:2d:c5:c8:03:e6:66:9f:63:bd:74:f8:70:0f:6e:
         b7:8b:d4:40:35:58:df:85:d2:1e:4d:ec:10:2f:48:18:b8:f1:
         67:f2:e2:e8:17:f6:24:22:37:c2:c7:de:63:0a:ca:c9:19:ec:
         e9:46:f6:97:4a:a4:5d:76:c3:d0:d8:12:ff:56:e5:b1:ba:d5:
         aa:d6:da:94:17:c2:f6:0e:3e:3d:0a:19:08:5c:1c:05:da:06:
         29:3f:97:ce:2f:eb:ec:4d:c6:42:ac:61:fb:07:45:3b:8d:3c:
         94:9f:ff:fc:01:d9:15:04:d1:d2:7a:04:69:02:48:0f:73:5f:
         38:9e:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:01 2025 by rpki-client