Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
File:                     06d3bb9c-8eeb-3028-a2b3-be307d608810.roa (raw, json)
Hash identifier:          EhckMjJwEN6s+i48rtqiK29Q4fFYLQN+jsqwsTGNR9s=
Subject key identifier:   F8:60:5D:06:35:77:71:EC:6A:45:B0:2F:A6:39:EE:3A:AA:0F:9F:2A
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328584599335AF013CDD0A8A7AC8980
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
Signing time:             Fri 19 Apr 2024 14:48:14 +0000
ROA not before:           Fri 19 Apr 2024 14:48:14 +0000
ROA not after:            Thu 18 Jul 2024 14:48:14 +0000
asID:                     16276
IP address blocks:        192.99.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:99:33:5a:f0:13:cd:d0:a8:a7:ac:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Apr 19 14:48:14 2024 GMT
            Not After : Jul 18 14:48:14 2024 GMT
        Subject: CN=863926c0-38a0-4800-8931-0cd9dc2e8951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:96:bb:41:aa:07:9d:7f:f8:8e:e8:a9:c7:
                    00:25:4f:2a:e3:f8:0e:51:94:8e:8e:7e:08:d5:b2:
                    9e:15:b9:63:89:58:76:e4:63:f1:60:37:40:1e:f5:
                    6d:35:fe:34:9b:76:bc:72:fe:4c:79:e8:3f:d8:f1:
                    dd:cc:e8:c4:9d:55:6b:82:cd:b6:44:16:2f:a7:c4:
                    54:56:2b:4d:ef:56:97:b0:f6:02:d4:49:b9:d8:80:
                    e6:62:c7:cf:fa:aa:c2:42:bd:99:46:c5:8a:37:8b:
                    d2:77:f5:15:7d:50:28:7f:16:ed:27:16:1e:e7:6a:
                    30:8a:36:fb:7e:e0:42:4b:e8:9c:87:a9:65:bd:40:
                    49:85:19:35:0f:c7:65:53:06:bb:b0:ad:1a:95:ec:
                    6d:28:87:a3:b5:db:0f:9e:81:cb:74:26:a6:86:91:
                    fd:24:f0:cf:b9:71:47:bb:f4:6c:33:ea:8d:67:d0:
                    97:22:4b:93:29:82:53:ea:ee:b3:f4:40:c2:59:e1:
                    c9:28:b6:0f:f1:84:b3:4f:da:8a:5c:cb:23:98:36:
                    cc:1a:8c:ad:54:ee:d2:94:49:c3:6f:1c:72:c7:f7:
                    90:b4:4d:4b:b1:29:20:e7:74:c4:40:59:1f:5a:fa:
                    86:dc:f8:df:5b:76:99:6a:ed:a2:f1:92:20:8b:cc:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:5D:06:35:77:71:EC:6A:45:B0:2F:A6:39:EE:3A:AA:0F:9F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cb:e0:86:f7:68:58:ac:94:5b:e7:f0:f7:fc:d1:88:d5:bc:
         e1:55:97:70:81:ef:c7:39:c6:58:70:cc:12:2c:d0:9c:19:58:
         3f:07:1c:3e:6c:a6:f1:8a:9e:14:98:cd:fb:bd:a0:d4:55:15:
         55:e0:33:9b:bc:5b:58:30:0c:5d:a7:9b:3e:4c:c7:97:b2:b5:
         d5:aa:65:33:5e:9b:fd:e4:15:3c:74:f6:2a:12:5d:05:32:b5:
         74:71:2f:f1:13:47:b4:f2:fc:ce:e8:b2:51:44:38:c6:df:4c:
         c2:e8:c0:40:9c:5e:93:9a:67:12:f5:44:93:30:d9:c7:d4:0a:
         fd:c3:41:ad:0a:a7:7a:1a:e6:35:e4:f8:f1:f1:71:f8:28:79:
         91:bd:93:34:7a:3e:32:b3:52:78:17:9b:dc:c3:aa:de:08:99:
         bc:13:01:45:e4:26:52:08:f9:5e:29:dc:4b:c4:47:9f:90:6b:
         eb:df:5f:71:08:3f:1b:4b:e2:0e:c0:73:39:c2:8e:26:33:b6:
         1c:96:b2:92:e5:76:39:9e:61:83:be:ae:4d:d3:b2:f0:2a:46:
         52:59:72:29:07:47:da:85:c3:ff:31:e2:3e:ce:6a:49:dd:d5:
         aa:cb:2e:99:45:8e:0b:9d:5d:95:ff:26:a7:3b:20:51:b1:40:
         36:7f:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:26 2024 by rpki-client on console-ams.rpki-client.org