Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b36b153d-587e-347a-bac9-f214ccecd1c3.roa
File:                     b36b153d-587e-347a-bac9-f214ccecd1c3.roa (raw, json)
Hash identifier:          cN7QcsNvpEgXTeYoYvrfJabO0ZEX5f9r1anOz799h98=
Subject key identifier:   DB:67:96:54:89:07:57:14:16:A5:BE:64:26:E9:A3:45:4F:53:4A:82
Certificate issuer:       /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial:       010D0C9F43285845BA7E35249A7BE9E6BC336200
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b36b153d-587e-347a-bac9-f214ccecd1c3.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     26253
IP address blocks:        199.167.88.0/22 maxlen: 22
                          208.93.176.0/21 maxlen: 21
                          198.71.119.0/24 maxlen: 24
                          72.12.240.0/20 maxlen: 20
                          216.241.192.0/20 maxlen: 20
                          208.92.184.0/22 maxlen: 22
                          206.188.218.0/24 maxlen: 24
                          216.169.64.0/19 maxlen: 19
                          23.180.192.0/24 maxlen: 24
                          198.71.120.0/21 maxlen: 21
                          205.201.32.0/21 maxlen: 21
                          2605:5480::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:35:24:9a:7b:e9:e6:bc:33:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=8a4c492b-0cfb-4977-8ffa-2f0ffe6747ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:65:b2:d3:f6:e2:ca:a5:14:b2:99:20:18:
                    9c:51:85:b0:fd:89:df:43:a7:dc:f5:7a:3f:1c:37:
                    26:36:f1:05:bd:60:72:4e:1d:00:fe:f1:6c:e9:ba:
                    61:ac:a9:b3:e0:87:9c:bc:d8:94:e2:aa:ae:a8:6a:
                    28:18:c9:e0:2e:35:30:76:63:40:65:90:eb:a1:3e:
                    d5:3d:0a:a3:7b:d9:a5:c4:40:3f:58:f4:0f:ab:f9:
                    42:4a:6c:96:0c:13:4a:33:e4:36:b3:64:63:bd:92:
                    50:ab:97:42:27:e9:41:69:3f:a9:09:53:2a:6c:0d:
                    73:29:df:46:39:73:73:3a:93:b2:00:74:98:fb:b1:
                    7b:31:10:3e:1b:5f:78:85:28:18:06:22:9e:db:31:
                    50:54:d0:ce:04:03:5a:5e:98:3f:03:33:be:55:48:
                    fb:b4:73:4a:5d:a2:f7:02:26:62:31:01:68:7b:c0:
                    28:ad:59:b0:dc:0f:99:14:23:7a:13:ef:ef:87:66:
                    f7:53:4e:93:72:b9:21:ee:be:06:17:99:14:d7:77:
                    ba:b7:63:d2:39:d7:38:85:2f:c8:87:c8:1a:0f:68:
                    eb:d4:92:cb:dc:36:03:d1:40:9f:41:52:7b:3a:2d:
                    1d:63:94:69:7a:04:15:3d:88:20:50:f1:67:76:21:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:67:96:54:89:07:57:14:16:A5:BE:64:26:E9:A3:45:4F:53:4A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b36b153d-587e-347a-bac9-f214ccecd1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.192.0/24
                  72.12.240.0/20
                  198.71.119.0-198.71.127.255
                  199.167.88.0/22
                  205.201.32.0/21
                  206.188.218.0/24
                  208.92.184.0/22
                  208.93.176.0/21
                  216.169.64.0/19
                  216.241.192.0/20
                IPv6:
                  2605:5480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7d:15:6c:1c:87:f6:c4:31:f9:e6:d7:1d:1f:fb:4e:07:d4:
         fb:94:fd:f4:db:1a:fd:12:d2:cc:25:5a:a5:f3:2d:04:01:f1:
         17:19:57:ce:5a:ec:8f:c8:a9:bb:56:da:08:74:18:e5:37:b3:
         08:81:0f:7a:21:d9:57:1e:a4:f8:ab:20:af:e4:fd:4b:29:68:
         57:e3:a7:0f:b9:58:bd:cb:e2:fd:2a:26:56:e6:5c:33:f9:aa:
         39:c8:42:82:5f:3b:f0:24:ef:28:df:19:77:e0:24:72:58:a2:
         b2:22:d8:86:9e:5b:ba:89:9c:ec:01:5b:6a:bf:18:01:7d:29:
         80:08:6f:21:ac:06:37:b2:9e:db:3d:67:23:a2:aa:26:c3:73:
         e4:b4:8a:a4:b8:9a:8b:c2:20:2f:18:f7:8d:ba:59:20:08:65:
         fb:31:35:7a:6f:cc:fd:75:a8:c0:e0:72:56:f7:31:9d:cb:f6:
         30:46:ab:90:29:5b:4f:f2:bd:1c:ab:3c:87:ce:24:88:21:00:
         a0:5a:9a:43:6e:cb:eb:56:09:2f:5b:fd:f3:4a:e9:ff:48:19:
         d3:ca:df:c3:73:08:52:be:a4:6a:12:cb:97:c7:eb:9a:fc:af:
         da:46:b8:86:ac:06:96:51:62:87:35:2e:37:a5:a1:1a:f5:30:
         49:93:af:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:46 2024 by rpki-client on console-ams.rpki-client.org