Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/9ea9e89d-919e-3f55-98a7-d0268134afa0.roa
File:                     9ea9e89d-919e-3f55-98a7-d0268134afa0.roa (raw, json)
Hash identifier:          NhFRq7wJGn/33ooK1bYUl2w9eO8SYd9uOyT14E7ZvqY=
Subject key identifier:   6D:71:F4:11:4E:E6:70:61:AA:41:A5:2C:EC:85:95:06:51:7C:98:15
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F4328584563F313C4BE4A165D82927CC0
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/9ea9e89d-919e-3f55-98a7-d0268134afa0.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        192.16.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:13:c4:be:4a:16:5d:82:92:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=dc5ab324-e2f4-4c48-99d6-f2bccf78165a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:77:83:e6:5c:9f:52:a3:0e:2c:9b:e7:e0:
                    0c:cd:68:70:3b:60:26:1f:9f:26:7e:36:c8:7e:a4:
                    28:d4:63:cc:a8:34:0c:db:9c:d2:3d:75:bb:6b:3e:
                    95:51:f2:f1:be:59:ed:7d:5b:23:16:6b:dc:b4:c2:
                    7f:4f:e8:76:0b:25:df:24:4b:d4:7f:4b:2a:c9:f8:
                    03:33:d5:5c:8c:4b:e3:d2:8b:65:f9:aa:17:5e:ea:
                    08:c6:f6:31:46:f4:64:ea:89:30:e6:0f:d3:e3:24:
                    22:5c:33:0b:d8:ab:9f:75:64:52:96:f9:6f:42:2a:
                    00:57:95:9e:84:6b:57:38:ec:81:ee:8a:f4:bf:38:
                    b4:67:20:60:64:6e:d4:44:58:22:e1:69:f7:42:04:
                    3d:60:2d:dc:7e:3c:3d:2c:5f:ec:a8:96:54:51:8b:
                    d5:6b:1b:21:3f:fe:f8:84:0b:ff:fc:05:39:3b:80:
                    97:74:82:65:5a:33:21:2f:67:d4:c1:96:17:2c:3a:
                    5d:12:72:07:32:60:b0:0e:ea:6d:a0:47:bd:3d:97:
                    1f:49:78:ad:b7:81:83:7b:6c:f9:47:f4:96:ae:74:
                    d2:59:18:71:13:05:a5:e5:34:00:89:6d:d2:c6:bb:
                    b5:ad:75:71:06:e9:e8:bb:fe:7a:de:8e:bc:9f:1c:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:F4:11:4E:E6:70:61:AA:41:A5:2C:EC:85:95:06:51:7C:98:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/9ea9e89d-919e-3f55-98a7-d0268134afa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:8f:c1:31:8e:14:26:f1:1b:15:b9:22:3d:df:b6:11:35:
         c0:31:c7:b7:0f:5a:1e:f1:c7:93:00:87:53:cc:55:86:5c:ea:
         88:36:1f:7d:7b:c5:39:b3:ab:88:8a:1b:83:97:b4:86:3e:dc:
         ee:25:5e:ad:d7:6b:9f:73:b7:15:b0:bc:fc:d8:ce:80:b6:ef:
         ca:19:43:b2:5c:24:f3:f6:23:4d:2f:b2:1c:61:50:ff:dc:56:
         9e:80:19:04:8b:37:20:de:bb:c7:21:a7:48:48:05:0e:2d:69:
         1a:7a:12:ac:79:4b:6e:a2:a7:10:3a:87:df:d5:47:8b:76:e8:
         06:76:a0:cf:5d:50:49:a7:bc:e2:45:03:49:6e:76:06:15:c3:
         fa:b9:6b:c0:66:7b:df:3d:fc:7f:31:23:45:d8:3a:fc:76:9e:
         9a:8f:2a:17:af:9a:9c:3f:4d:a2:94:18:b8:49:68:4f:33:c9:
         3d:f3:64:9d:df:7a:db:a2:69:fc:10:15:c3:84:a9:27:2c:9b:
         e1:05:fe:55:2e:fd:45:93:d0:38:98:d4:56:3c:7a:e8:91:64:
         7d:8c:89:e6:24:49:b4:2d:46:37:88:92:77:40:85:0e:b8:6a:
         aa:f7:12:be:d7:af:2f:0c:ef:bc:97:b2:22:1b:d2:c2:c3:63:
         84:4e:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:59:59 2024 by rpki-client on console-ams.rpki-client.org