Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa
File:                     fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa (raw, json)
Hash identifier:          Ad1v/SWUVIwvxTES6PtohzCmcLfIMnkVV6KCKN5p6ro=
Subject key identifier:   C5:91:CC:F0:8C:65:4A:11:99:B4:F5:85:E8:DD:32:8D:B2:12:FF:DF
Certificate issuer:       /CN=91c894d6-b991-4966-bec4-7c58dac779b5
Certificate serial:       010D0C9F43285845A428AEA9F7CE6CBBDCA0D8C0
Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     27537
IP address blocks:        199.87.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:ae:a9:f7:ce:6c:bb:dc:a0:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=fed29f47-e9bc-4292-a2c2-817cb272757a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:bd:7e:d5:b2:ba:9f:df:e0:ac:eb:0a:f4:
                    ee:24:4c:7f:8f:a1:e3:ec:82:b3:d9:40:bc:8f:50:
                    ff:29:1c:4c:41:2f:bb:61:d5:9b:75:62:72:78:4a:
                    6a:1d:6d:aa:0d:12:2e:47:4f:04:9a:45:bd:31:52:
                    8b:5a:ad:54:ed:9b:52:01:05:58:26:50:b7:e5:76:
                    d6:3b:a8:44:0b:ab:46:ac:22:3b:3e:29:42:cb:01:
                    70:e9:88:10:95:b1:f0:99:ad:6f:47:c9:64:f1:16:
                    7a:70:44:0a:7b:90:c9:99:03:b2:1f:10:b9:e0:c9:
                    12:25:78:db:a7:8f:ee:22:a0:c4:46:4d:ce:26:f7:
                    f1:aa:65:b7:09:3a:c2:90:f5:da:6d:d6:ec:cd:e4:
                    e5:db:50:be:2f:5a:fd:b9:e6:73:10:59:b0:c5:21:
                    f0:31:da:34:e1:f0:e9:e0:4a:8b:bd:a9:91:1d:6f:
                    23:97:7b:8e:b4:fa:0e:3e:a1:53:56:c6:8e:8c:cd:
                    be:e4:7b:8e:a2:af:21:0d:13:16:93:c7:73:c8:da:
                    6e:e2:1b:a8:af:f5:42:a4:ac:91:66:6a:79:2f:4e:
                    bf:db:dc:06:9f:49:90:3f:01:64:0a:0e:6a:84:a6:
                    6c:d3:eb:32:b2:2d:2d:d1:d7:37:5d:62:ad:33:a4:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:91:CC:F0:8C:65:4A:11:99:B4:F5:85:E8:DD:32:8D:B2:12:FF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl

            X509v3 Authority Key Identifier:
                keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:ca:76:de:28:8d:ab:2b:67:49:cd:af:d4:bb:9a:17:8b:
         b1:eb:5a:3f:8a:fd:77:95:5a:c4:7c:d8:fb:eb:71:3c:fb:7a:
         7f:1a:39:e2:5d:d6:6e:90:fe:b4:6c:9f:e4:3d:dd:99:73:bf:
         3a:73:5b:de:7d:17:5f:ae:bf:af:de:43:03:8b:aa:9d:83:4c:
         e0:c3:ca:2e:de:bd:25:98:ff:a4:44:95:89:86:13:9c:b8:f5:
         51:ac:07:b8:94:21:58:81:f1:3d:46:0e:e7:40:fb:0b:11:4a:
         54:0f:26:c7:4e:71:83:87:4c:f9:57:08:38:6a:31:97:6f:4c:
         e7:69:12:1c:78:3f:32:8f:dd:97:a6:a2:fa:5d:a2:9c:2d:98:
         15:55:97:3f:d5:ff:b8:62:84:b5:73:d9:95:9a:6f:4a:c4:8a:
         8d:be:ca:ee:fb:5d:9d:ce:be:83:43:6b:72:1d:f5:38:97:00:
         58:09:bd:8e:65:cf:3e:6e:da:45:fc:f5:7a:2e:c8:92:9f:ef:
         13:7c:c0:55:62:f1:3f:47:b4:d6:4e:6c:b5:da:78:97:3b:38:
         a0:ab:16:c5:a5:c3:cb:58:1c:ca:58:bf:41:2f:b5:0c:47:7c:
         88:40:40:92:72:9c:44:19:42:32:d7:c2:3e:65:b5:a6:44:a6:
         aa:5f:64:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:39:59 2024 by rpki-client on console-fra.rpki-client.org