Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/7f72dd33-eb43-3e6f-a53d-a61853418549.roa
File:                     7f72dd33-eb43-3e6f-a53d-a61853418549.roa (raw, json)
Hash identifier:          EQERcOqi4n1JG1vrxxS6SgtRexjBAbAy9OVZ2sxFh5Y=
Subject key identifier:   05:A3:8A:55:9B:D5:D0:69:BB:BE:D6:79:06:95:FF:F7:F4:B1:6D:CC
Certificate issuer:       /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial:       010D0C9F43285844EECFFADDCAED98108704B880
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/7f72dd33-eb43-3e6f-a53d-a61853418549.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     3356
IP address blocks:        216.19.84.0/24 maxlen: 24
                          216.19.86.0/24 maxlen: 24
                          216.19.95.0/24 maxlen: 24
                          216.19.92.0/24 maxlen: 24
                          162.220.191.0/24 maxlen: 24
                          2620:a:d::/48 maxlen: 48
                          2620:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fa:dd:ca:ed:98:10:87:04:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=74522c1b-f623-4a6e-84ed-9ac928d18148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:9b:ae:7a:c4:92:38:41:0c:c4:c8:04:b5:
                    0f:48:67:7b:d5:90:de:bd:7f:3b:e0:41:ec:77:80:
                    6f:8c:16:19:b2:05:db:91:a1:d7:83:c5:51:dd:5e:
                    95:a9:45:a9:53:a3:ec:81:c6:a8:ea:34:4d:72:ab:
                    b1:70:62:85:11:37:33:48:1c:1e:6f:52:c7:d3:12:
                    b7:e6:26:e2:8c:4b:a7:72:4e:7d:be:69:a8:71:e3:
                    2e:82:86:1f:b8:e8:69:8d:a6:d4:6e:1d:60:1e:2f:
                    9a:ab:64:95:b3:8f:b1:f7:0a:3d:a4:17:4d:92:36:
                    e8:99:98:b2:3c:e8:5a:ac:70:b8:e6:2e:59:68:6d:
                    f8:6f:c3:8b:2b:a6:ad:c2:2a:20:26:b0:57:57:79:
                    8c:e6:a2:64:bb:d9:b3:c1:8d:d0:2b:fc:75:82:34:
                    26:81:69:3b:41:ce:2e:51:a4:9d:fc:aa:3d:cc:57:
                    f6:b5:4b:f3:69:d0:2f:93:d4:7e:3e:57:ba:25:11:
                    ac:57:c1:13:80:6b:99:d0:1d:4b:d2:07:10:b4:b3:
                    4b:ef:fa:22:b5:12:3e:8f:ba:9a:00:70:4a:01:36:
                    9a:18:e1:a4:92:3f:17:c8:13:d1:f2:2e:fe:ed:1d:
                    f4:47:74:78:66:d1:68:e3:d2:ff:fa:e6:fd:cf:a7:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A3:8A:55:9B:D5:D0:69:BB:BE:D6:79:06:95:FF:F7:F4:B1:6D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/7f72dd33-eb43-3e6f-a53d-a61853418549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl

            X509v3 Authority Key Identifier:
                keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.191.0/24
                  216.19.84.0/24
                  216.19.86.0/24
                  216.19.92.0/24
                  216.19.95.0/24
                IPv6:
                  2620:a::/48
                  2620:a:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0d:6c:d6:de:dd:45:84:04:83:c8:6b:7f:2e:19:62:bf:15:
         5a:98:80:95:86:08:d4:0b:c9:49:8a:2b:11:f1:e4:81:28:29:
         c5:b8:6b:c3:b9:5e:94:66:d6:45:f8:f1:44:09:51:8d:14:09:
         d4:67:cf:2d:15:b6:c9:b3:2e:01:7c:c1:ea:fe:7e:6d:e6:a0:
         51:e2:27:ab:66:e1:6f:97:d7:a1:45:e3:c3:17:6d:fd:c6:f9:
         2a:c8:cc:57:63:88:94:ac:58:08:f7:f8:2b:d5:44:18:87:52:
         00:b5:20:b4:90:1b:e0:2c:64:4d:c4:be:51:03:27:01:59:10:
         27:1e:20:2b:14:5d:64:58:bd:69:a3:d8:21:49:fd:2b:46:33:
         fd:8e:e0:31:cb:5b:f7:24:19:99:17:2b:6d:04:fe:72:9b:1d:
         33:f7:e6:83:36:00:06:ee:29:6f:9f:93:59:4b:1d:18:f7:ae:
         da:fa:0b:4c:45:b4:02:38:63:07:ee:92:57:e9:59:90:bb:26:
         40:36:19:8f:52:b5:0f:c5:2d:c9:c8:9d:6c:04:0f:cf:2e:50:
         9b:40:f6:77:31:d3:86:b4:9a:6d:ab:a9:06:a8:30:a0:eb:4d:
         0c:aa:ac:8b:eb:b3:e2:05:b1:64:a5:7a:4d:94:28:3c:36:af:
         f0:da:e7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:45:56 2024 by rpki-client on console-ams.rpki-client.org