Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa
File:                     badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa (raw, json)
Hash identifier:          xdjg/svd6xuYv6hC+bIcMYj+lxBn850q8g0dlYN5xJY=
Subject key identifier:   53:54:A6:7C:67:B4:9C:DC:83:B3:2F:9F:3B:67:7E:E1:D6:7E:03:9E
Certificate issuer:       /CN=6528c9ac-3735-430d-99f2-7ac01944d688
Certificate serial:       010D0C9F43285845597C71830B4682B4F9DE7AF0
Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa
Signing time:             Wed 27 Mar 2024 19:03:45 +0000
ROA not before:           Wed 27 Mar 2024 19:03:45 +0000
ROA not after:            Tue 25 Jun 2024 19:03:45 +0000
asID:                     54696
IP address blocks:        216.181.164.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:59:7c:71:83:0b:46:82:b4:f9:de:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688
        Validity
            Not Before: Mar 27 19:03:45 2024 GMT
            Not After : Jun 25 19:03:45 2024 GMT
        Subject: CN=c4550c99-b086-4b72-ab19-e59bb4a9b022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:20:87:96:5c:f5:8c:28:0e:0b:34:af:7a:
                    97:dd:e5:8a:e5:7d:d5:8d:c6:55:cf:e7:db:43:1d:
                    28:9a:3d:94:58:49:29:3d:39:ab:c2:77:1a:d1:f2:
                    86:21:01:e5:a7:cf:91:23:a6:d2:e0:a9:0f:c3:db:
                    1f:ca:68:96:1f:35:3d:09:90:c0:f6:24:57:af:04:
                    56:1b:30:b9:a6:61:0a:cb:d3:df:70:4e:8d:8f:af:
                    df:0c:a2:39:2f:4e:f7:a1:20:8f:66:16:de:60:aa:
                    b5:1a:c1:69:8b:41:36:fe:be:37:f7:df:02:05:a7:
                    34:48:da:fa:10:34:18:66:18:07:b7:fa:58:6a:6d:
                    08:a8:c1:fa:86:ca:f6:81:e8:0f:3c:ad:f2:e1:0b:
                    99:d1:5f:ab:fe:6e:08:9b:e8:a3:3d:a0:11:7b:fa:
                    55:fc:6e:ba:8f:03:d8:25:11:9e:dc:d2:b7:7f:d2:
                    06:12:dc:9e:57:98:42:df:99:46:cf:e5:95:9d:c5:
                    87:83:53:9d:46:db:ea:7f:f0:ef:d2:c7:b9:ea:b2:
                    0f:3e:11:32:97:85:c9:50:64:5d:ee:b2:f6:9c:31:
                    58:e1:dd:e8:db:69:08:f2:b6:98:44:14:d3:00:e0:
                    09:c0:09:31:b2:65:a7:ac:53:5d:f3:47:49:28:c2:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:54:A6:7C:67:B4:9C:DC:83:B3:2F:9F:3B:67:7E:E1:D6:7E:03:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl

            X509v3 Authority Key Identifier:
                keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:25:5f:15:1e:41:8d:07:c8:66:07:91:e6:d1:16:b7:32:
         dd:03:0d:9e:38:84:c8:fd:72:eb:c3:a6:a5:fb:1b:b3:8d:7c:
         59:e8:3a:d6:5d:f9:e5:70:a4:59:dc:eb:85:e9:3b:43:ef:64:
         d2:68:e3:1f:77:1f:38:e8:8e:ee:61:2c:b2:fc:39:c5:e3:e7:
         4a:24:e0:24:d6:59:0f:c9:0b:89:a4:c4:6b:b2:d8:ef:bd:08:
         6e:e1:04:ec:75:2f:04:fa:75:52:2a:eb:f2:e1:06:77:d6:02:
         68:0a:01:76:65:5e:3d:d4:6a:52:56:0d:18:36:08:75:74:f0:
         ae:66:9a:15:00:86:45:51:12:df:26:da:f1:42:a3:cb:49:18:
         0e:63:6d:cd:b6:f2:6d:ee:47:17:ac:16:ed:3d:a4:39:37:67:
         ab:91:50:5d:31:10:e4:c2:29:08:36:c7:a4:9c:d0:6d:41:7f:
         1c:5e:c4:b0:e1:04:2b:39:2e:f3:91:60:01:b1:cf:4c:b1:0c:
         10:a5:fb:0a:11:07:79:48:53:7f:46:12:cf:65:24:d5:3f:e0:
         40:96:eb:83:62:1e:d7:6a:65:0b:41:7c:0b:47:94:76:e7:60:
         60:93:97:3f:99:e8:84:94:20:23:80:74:e0:7f:96:e8:06:12:
         1b:14:af:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:00:00 2024 by rpki-client on console-ams.rpki-client.org