Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa
File:                     b1db16d0-d799-3d3f-bd91-72670a42a56f.roa (raw, json)
Hash identifier:          vaElhIoYIXivIG1SQVhHHdYCQeq5hGzsHtHetwgy/ZY=
Subject key identifier:   17:F8:64:0A:08:0D:13:67:91:E0:51:85:79:92:B5:7A:7F:CD:3D:C0
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584589A31E1E19CFC936008BEE3C
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     6643
IP address blocks:        173.199.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1e:1e:19:cf:c9:36:00:8b:ee:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=ae9b2f54-de62-45ca-8bb5-a48f73d4694b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:8c:eb:5a:0d:f7:c9:8f:3d:48:94:3a:56:
                    d5:d7:e4:9e:de:18:f4:90:72:87:85:c8:f5:e9:2e:
                    e6:8f:31:e2:47:94:7a:e3:9d:d5:19:6b:c8:d1:c4:
                    d4:80:82:6a:b6:ea:f2:b2:5f:22:b7:93:f0:8a:04:
                    dd:73:76:5d:43:94:1f:59:bf:2f:56:a7:28:b9:9b:
                    05:31:91:3d:0e:34:7b:3d:7d:07:96:cd:e6:d7:52:
                    ee:c8:e1:ee:f2:44:a2:d8:65:ed:48:68:13:2d:14:
                    e6:f2:64:63:07:9c:7d:31:90:07:8b:f0:c8:c5:4e:
                    ad:b1:d8:76:3b:bf:5c:5a:04:a5:01:a2:e9:1f:f7:
                    61:8a:21:94:28:82:47:0e:cc:e6:ec:61:e5:94:92:
                    4b:b6:0a:2a:96:5d:a8:8a:b8:7d:bc:92:50:97:d2:
                    5f:5b:34:6f:cd:53:96:ff:c1:e9:ab:85:69:03:80:
                    51:54:96:b8:9f:cd:10:01:45:4e:b6:5c:ac:8c:59:
                    6e:b9:ef:54:65:ac:c8:2a:55:5a:21:49:e6:46:27:
                    a7:de:cd:9c:97:98:49:27:4b:9e:d6:09:fb:1e:cd:
                    47:c7:77:9c:1f:c4:b3:a8:8c:e5:b3:d8:e5:ad:7e:
                    37:20:3d:63:db:0c:62:46:1a:97:cd:e8:e3:54:aa:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:64:0A:08:0D:13:67:91:E0:51:85:79:92:B5:7A:7F:CD:3D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b1db16d0-d799-3d3f-bd91-72670a42a56f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:da:0c:ae:e7:b3:88:80:6d:c1:66:03:59:39:fc:79:42:
         92:12:fe:74:5f:0f:9a:a4:ba:e9:66:1f:cd:29:63:f5:5a:2c:
         9f:68:09:de:c6:9f:58:09:bf:0e:be:37:76:97:66:7a:38:03:
         e2:bd:60:9b:4c:fc:fd:56:f5:b3:ba:71:7e:e5:9a:bc:d4:4a:
         73:08:d3:83:89:4c:0e:80:e1:73:f5:7b:2f:18:b7:2a:33:81:
         ea:4f:67:53:7b:da:67:84:a9:26:de:4e:c1:83:45:fc:10:40:
         cb:55:4b:74:fe:84:f4:a8:7c:bb:7c:0a:ae:71:3c:5d:0d:51:
         81:df:a0:e9:af:ac:8b:30:1c:7d:bd:36:0d:cd:98:0b:e6:8c:
         d4:6d:bb:bd:25:06:c6:ac:0c:0c:6e:13:f5:e9:bc:d8:9f:d9:
         6e:18:f4:d2:60:6b:de:d4:ed:f6:87:65:b7:ae:7b:72:ae:54:
         ae:44:6b:ed:90:c3:cf:db:7d:09:b1:0a:90:74:e4:47:72:aa:
         69:7a:e1:b5:23:eb:8f:e1:f0:0c:6c:22:24:1f:39:f7:18:aa:
         7a:6f:ef:f1:ea:aa:07:18:b0:cd:74:44:cd:53:d8:18:06:0c:
         ce:c2:49:f1:90:5f:6a:09:16:25:65:8a:8e:4a:e7:46:9b:6f:
         6c:90:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:58:55 2024 by rpki-client on console-fra.rpki-client.org