Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa
File:                     0639ea96-660c-316a-8237-bab7ef39f7ec.roa (raw, json)
Hash identifier:          4sNmR63YAup+b/++Hi71DCan/8tDCv9qtxZo+2gbZek=
Subject key identifier:   61:D6:94:DF:AA:6A:E3:0C:B3:6D:92:9E:CA:D4:E6:18:6F:90:CC:D9
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F43285845347D4BD6F94F3DAE36177F80
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        199.73.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4b:d6:f9:4f:3d:ae:36:17:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=9028989e-0be4-47f7-8250-6e3aebb0c6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:13:17:20:52:59:7f:46:02:6c:13:4c:1d:
                    cb:a5:82:0e:7a:2e:aa:e8:88:f4:f5:4d:56:68:71:
                    2e:0c:9f:f2:ca:b5:e5:d7:6a:d8:78:ec:b2:55:37:
                    44:bd:92:44:b9:39:cf:55:ef:86:51:6b:93:43:5d:
                    b0:e2:3b:2f:93:cf:7c:f1:95:2f:b6:2c:97:9e:a0:
                    06:4c:e4:e1:b0:2a:4f:1a:d8:16:64:4c:52:a9:26:
                    c0:f8:66:58:b9:71:ee:d5:58:79:db:23:29:4a:40:
                    29:6e:31:3b:65:7b:47:4c:7d:fd:15:6a:5c:e3:fc:
                    77:a4:7d:2f:bd:29:46:6d:e4:63:36:e3:7b:8a:cd:
                    f8:f0:ce:3f:42:f3:74:37:24:df:9f:7a:1f:73:3a:
                    78:ae:5e:de:6e:b7:28:59:46:6e:9e:6d:5c:71:af:
                    eb:53:0a:4a:65:ea:86:81:0f:cf:f4:95:de:39:bc:
                    85:d8:b8:23:92:fd:57:01:3e:b0:ce:71:40:bf:e5:
                    49:7c:24:45:26:4d:e5:dc:6f:96:59:84:51:35:49:
                    77:bf:b0:23:31:e2:f8:17:71:1a:cc:a8:9d:3f:45:
                    0b:f5:db:35:a6:d6:eb:4b:a5:44:f0:f3:14:49:b0:
                    40:e2:20:7a:19:a0:65:17:b8:d5:b2:49:d5:79:9c:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D6:94:DF:AA:6A:E3:0C:B3:6D:92:9E:CA:D4:E6:18:6F:90:CC:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:2b:f8:9b:20:d7:d0:fb:85:ed:03:4a:ca:26:d1:75:88:
         8b:8d:f3:34:ff:61:2a:60:b4:4f:f4:51:31:fb:de:f9:41:1a:
         4f:7f:bb:71:3b:0e:8b:11:b1:cb:ce:e8:fc:e0:af:b4:4d:55:
         7b:5e:b5:9b:80:fe:5c:a3:fb:86:8f:78:64:fb:35:e5:47:04:
         a0:90:7f:6e:c5:c5:db:3a:c5:dc:1c:27:03:33:74:0e:b4:b3:
         31:2d:36:96:84:79:d7:4f:c7:31:01:ee:18:bc:27:d8:43:7f:
         2d:3d:c6:be:01:bd:ff:80:99:32:42:c4:e6:e0:5d:7e:b6:ef:
         50:a5:07:92:a1:3e:87:84:b0:27:9c:54:14:bc:51:1a:2c:54:
         16:41:57:8c:ec:16:15:d1:99:3c:49:f2:11:f0:95:4c:a2:89:
         97:2d:72:ef:80:39:f4:cd:62:43:ca:c6:f4:d9:31:0e:a7:67:
         8b:0d:29:c8:89:d3:02:1c:e9:01:60:b1:fd:36:30:e4:e2:4e:
         42:fd:88:b1:48:78:12:41:ea:e5:dd:34:b6:23:ca:40:ba:38:
         1d:67:a9:3b:67:5d:d1:39:1e:b8:8b:62:62:09:86:aa:18:c5:
         84:d3:44:28:ba:51:c2:23:8c:98:61:b2:55:a9:dd:cb:22:d6:
         b8:d0:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:58:14 2024 by rpki-client on console-fra.rpki-client.org