Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49ab84d4-90d1-39a1-bc10-63544a167811.roa
File:                     49ab84d4-90d1-39a1-bc10-63544a167811.roa (raw, json)
Hash identifier:          OUsGlqQzYKjGWhE7zi25N/Bre3sI8YH/L2fhYtdThEE=
Subject key identifier:   D8:90:BE:C5:FB:99:87:01:BD:DE:B6:9D:02:C1:A2:B9:AC:4A:B8:20
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A1653845E523630D51EA9AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49ab84d4-90d1-39a1-bc10-63544a167811.roa
Signing time:             Mon 22 Apr 2024 13:15:10 +0000
ROA not before:           Mon 22 Apr 2024 13:15:10 +0000
ROA not after:            Sun 21 Jul 2024 13:15:10 +0000
asID:                     16625
IP address blocks:        184.26.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:65:38:45:e5:23:63:0d:51:ea:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 13:15:10 2024 GMT
            Not After : Jul 21 13:15:10 2024 GMT
        Subject: CN=d125b3e9-416e-4f6a-bd69-4eb0d256181f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:08:de:3c:bc:87:3f:3b:50:60:80:42:5f:
                    96:be:79:86:f0:ca:d9:27:73:f3:18:eb:14:e6:a9:
                    79:d3:79:48:b9:df:e1:74:b4:35:5e:3a:f6:2d:06:
                    2f:4b:ee:34:e4:8d:5c:a3:bd:64:43:ab:8c:d5:60:
                    a8:89:8e:74:f3:f1:b9:b2:ae:3d:2b:61:e7:b5:44:
                    c7:d2:17:62:f6:bb:0c:9a:f7:dc:53:1a:22:fc:79:
                    5c:33:63:b6:f3:67:e2:19:26:0a:b3:80:26:db:10:
                    7d:26:26:16:12:50:43:80:32:4a:a0:54:0f:58:e5:
                    a8:1a:5c:ed:85:12:9c:61:35:4e:87:c5:66:aa:a7:
                    cd:1e:bc:0e:1f:12:47:5f:39:76:90:9d:3f:be:04:
                    01:2b:3b:ff:5c:e3:5c:05:f7:18:ad:14:26:b9:f1:
                    50:2b:ca:c1:5c:39:32:cc:72:3f:90:2e:72:3c:7d:
                    52:4c:b5:1a:0f:2c:12:9c:62:2a:1b:0e:86:05:90:
                    cf:04:c7:07:1f:b8:97:a2:ee:5a:d7:05:6a:3f:04:
                    38:d2:72:e6:ba:37:cd:98:db:70:76:52:fe:8e:ad:
                    cd:0d:0d:9b:83:6d:76:4b:66:f5:39:0e:d0:c5:61:
                    f8:35:71:78:fa:38:39:5b:17:2f:4d:2a:73:19:5f:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:BE:C5:FB:99:87:01:BD:DE:B6:9D:02:C1:A2:B9:AC:4A:B8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49ab84d4-90d1-39a1-bc10-63544a167811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:87:61:66:e4:df:2b:5e:dd:7b:c9:03:e9:e3:e1:9c:93:6a:
         20:02:fe:20:d0:a5:f2:c4:53:c6:b5:d4:60:c1:e6:85:2b:2b:
         bf:05:f2:1e:b7:58:99:13:d4:1a:a6:ee:b8:fc:79:9d:88:42:
         6f:b5:32:14:7c:ea:a8:7d:f7:f0:53:5b:8a:be:3c:f8:67:bf:
         cb:93:5a:29:c2:3a:d4:97:00:08:9c:36:b3:e1:77:44:32:27:
         43:b2:c4:bb:83:ec:a7:20:4c:aa:73:8c:db:71:04:db:02:51:
         bf:a3:74:89:2e:8b:bf:6b:03:5b:a6:2c:96:7c:0c:61:64:53:
         ae:dc:1c:df:d5:19:15:7e:bf:73:bf:c0:7e:61:7a:95:fd:7e:
         4d:9e:49:27:01:fb:79:03:18:41:aa:5a:26:82:5d:db:b7:21:
         8f:63:7b:33:6f:4a:fa:4d:8b:51:27:04:6b:51:4c:29:47:a7:
         ab:c3:cd:31:2f:07:03:82:76:0c:25:03:2d:3d:04:6c:bc:91:
         f9:22:7c:f3:da:cd:68:c6:8c:bd:93:47:61:45:ab:f9:15:6a:
         31:f6:63:40:3f:62:87:c2:1f:0f:aa:fe:82:48:a4:99:e0:e5:
         f2:d7:aa:ef:95:26:4b:7d:2f:53:8c:90:48:96:11:81:b2:c2:
         da:8f:21:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:05 2024 by rpki-client on console-ams.rpki-client.org