Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa
File:                     1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa (raw, json)
Hash identifier:          yjBsSpVhaMqEx/mvjW/lII/vyroaPqPmvAOhiQ+vhHI=
Subject key identifier:   59:97:01:7B:99:24:70:34:39:EB:09:91:28:E1:86:08:CF:8C:07:13
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584574B31B1ADF456CBB3932D980
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        209.166.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1b:1a:df:45:6c:bb:39:32:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=c713c6ff-872b-45be-ac06-f4d57750228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:1e:34:2e:18:03:38:43:f2:d0:d8:74:d9:
                    df:3c:93:4a:25:66:7b:4e:cd:d2:39:fe:e5:d7:78:
                    7c:16:aa:c8:6f:a0:b1:9b:2f:ce:a9:2d:9c:25:e1:
                    ea:44:09:8d:22:b4:c1:a3:d5:78:58:e8:85:3d:45:
                    cd:e1:b2:2c:28:f1:95:c1:db:82:bf:d0:eb:1f:fe:
                    a2:bc:e1:3e:58:a2:2f:78:33:8c:48:06:05:17:b5:
                    ad:a6:4e:14:fb:2e:eb:c0:77:3f:e6:af:76:aa:a4:
                    ac:9a:81:37:a3:dd:fe:92:5d:57:97:29:9f:6b:4f:
                    99:26:b8:67:2b:7e:18:9d:d8:2b:07:18:b7:9e:b2:
                    7d:5d:f8:3c:d3:b6:20:5b:ec:a6:42:08:ff:e5:ae:
                    5a:6a:27:97:b8:ed:ea:05:29:50:e1:4b:55:7c:f4:
                    1d:35:70:0e:1d:d6:35:f7:aa:ca:5e:1f:6f:19:e1:
                    ea:09:ad:69:ad:39:e3:f2:f0:1f:b0:12:d0:0b:92:
                    4c:32:a6:06:a9:84:55:7d:23:be:17:c7:2f:be:e6:
                    c8:f1:65:62:9b:32:39:07:61:2b:bb:5a:da:df:05:
                    a8:e0:0b:ff:80:38:1b:c2:f5:95:de:32:ff:b0:7b:
                    f9:ad:18:b5:fb:48:5b:1c:9a:28:e6:79:ea:df:c9:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:01:7B:99:24:70:34:39:EB:09:91:28:E1:86:08:CF:8C:07:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/1b6b8cdc-f4a2-37cc-9980-2d8976fa1a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:a4:4e:f7:d8:a7:44:76:65:42:13:21:93:82:39:a7:cd:
         3d:3b:b6:6d:5f:c8:4d:98:11:2b:f6:5f:41:80:70:0b:a1:99:
         22:e6:53:3e:50:90:ad:d7:9e:ee:90:c7:ad:65:ca:f9:b8:a4:
         eb:dc:55:72:bb:5a:a1:af:b5:4e:ca:de:9b:44:a3:a1:8f:7c:
         59:16:db:d6:86:a4:77:7a:64:16:06:f0:56:87:4a:40:2f:c0:
         26:92:b5:fb:6d:d6:a2:43:67:de:3a:2d:ad:85:9e:a9:22:ad:
         14:43:62:f1:9e:d8:4c:12:9e:a3:21:e8:65:97:49:17:51:97:
         bb:3a:44:f0:de:b8:4b:66:a5:84:f0:2f:a7:ed:18:90:d7:89:
         a1:fa:10:41:86:19:38:05:c0:f2:7d:ce:7a:5e:34:73:99:40:
         26:40:4c:ba:71:04:f5:79:05:e4:cb:02:76:9b:e1:be:d9:8a:
         d6:98:6b:14:96:21:ed:31:1b:69:ae:cf:a2:f1:09:b2:fe:b8:
         8a:3f:c4:2b:b0:61:be:7d:15:19:43:f3:e4:96:10:39:9e:a0:
         4e:5c:5c:5a:00:f9:8e:eb:30:6f:a4:01:26:ec:24:6d:e4:1d:
         af:cd:8e:49:f3:f0:9f:26:5d:7c:e4:1c:6b:53:38:e6:3b:d3:
         49:6b:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:58:31 2024 by rpki-client on console-fra.rpki-client.org