Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa
File:                     5ed91c2f-e660-358f-8205-7d3850ec790b.roa (raw, json)
Hash identifier:          WPObwPrgVLABExWN1OthlFlAdlvFBStM3Do8q4x36JI=
Subject key identifier:   AA:B9:E4:C5:C5:0F:6D:10:5A:AD:71:36:67:4A:98:18:32:52:DF:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B97CF4DC54A28A1383F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        100.16.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:97:cf:4d:c5:4a:28:a1:38:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=fe11d311-6744-4756-b29e-ed2a4bfc6edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:24:c5:43:35:79:f6:83:33:1c:ef:0a:f6:
                    bd:a8:c2:ca:40:b5:c1:ca:be:7b:11:2c:15:7e:ca:
                    ea:ca:12:0c:9f:cc:6e:8b:0f:76:52:c2:56:4b:a1:
                    0b:07:d2:f9:d1:bf:87:7b:44:34:e6:c7:b1:a4:59:
                    2d:f8:f3:63:d1:b6:c4:5d:e9:4b:7a:63:f5:1e:da:
                    10:45:c1:d0:fe:00:13:3d:fe:f0:71:50:9f:40:2a:
                    5c:81:bc:c9:9c:65:83:52:44:05:f6:fa:c0:42:07:
                    23:1e:5e:c9:bb:43:44:dd:22:c5:a5:58:18:18:87:
                    30:42:11:2e:01:d9:20:79:1a:5e:aa:aa:48:5f:d3:
                    90:0a:2d:98:a7:68:c6:51:b1:81:d1:03:c1:3a:b9:
                    25:82:2c:c7:e2:ba:0f:48:86:56:a9:98:2c:b8:e3:
                    d9:04:67:05:72:83:08:c8:9a:0c:a3:2a:40:00:07:
                    eb:61:5c:cb:e9:63:39:1b:ac:b1:88:14:ba:7b:a9:
                    5c:30:66:f1:7a:0d:c8:6d:34:d6:6f:9c:26:bb:4b:
                    30:55:4c:aa:b0:21:5f:e3:4f:04:50:b6:df:ca:84:
                    e8:e2:28:36:69:02:8e:e0:0b:aa:6d:95:45:bb:3c:
                    0f:95:db:25:59:cf:5b:6c:99:4d:4f:2f:c6:2d:50:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B9:E4:C5:C5:0F:6D:10:5A:AD:71:36:67:4A:98:18:32:52:DF:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:af:a8:d0:75:2e:b4:b9:cc:73:ad:d4:9a:63:91:a6:98:
         a3:96:53:05:84:22:c8:bf:c9:76:2b:06:64:30:67:75:6e:c2:
         0a:01:7e:80:db:b2:4e:dd:ac:ee:dc:b9:f9:41:9a:1c:88:aa:
         9a:d4:c0:63:af:59:43:2c:e7:54:79:be:c7:f6:ad:77:30:10:
         75:5c:7e:c4:0e:14:60:a8:11:6c:d3:54:b1:1a:6f:6f:b3:71:
         c8:1a:34:91:69:d9:4c:8a:b3:8c:3f:7a:6f:f6:e3:41:f7:bc:
         15:5c:e3:83:f6:d3:7a:08:04:c1:54:56:ad:e2:83:2d:73:3b:
         4e:b9:52:d1:23:d5:ef:81:67:bb:71:ed:df:e3:06:cf:cd:91:
         e6:1e:9d:e7:45:cd:90:90:62:ca:e5:c0:d5:25:d1:07:09:c7:
         9a:34:f7:20:00:e0:a2:14:70:e6:8b:f1:a7:22:08:33:29:dd:
         cc:62:59:a5:22:ea:83:d2:aa:0f:d9:d8:d8:c3:f9:03:47:7d:
         21:5b:2a:a1:d5:b2:e1:43:26:a1:0a:2c:82:a1:62:75:e6:92:
         84:1f:46:0c:a0:2d:13:ef:6d:98:41:e8:ec:c8:65:18:f0:64:
         fb:2e:43:21:ba:e7:a7:84:c7:41:56:ae:77:0d:5b:7d:65:8b:
         08:3b:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:28 2024 by rpki-client on console-ams.rpki-client.org