Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa
File:                     51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa (raw, json)
Hash identifier:          W6CdmlILAcqgEVI/I/SssATi9zCY/Pgcdql0ifFXU8I=
Subject key identifier:   2E:94:18:AF:BD:34:E9:D5:6F:73:CD:B2:DA:CA:9D:43:CC:D2:8A:45
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F432858454D9D7B30C1D3DABEE9F18140
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     19871
IP address blocks:        162.222.226.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          162.210.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7b:30:c1:d3:da:be:e9:f1:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=7a2b0e4d-4af8-4cd6-b1f5-a3ca8144594e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:25:20:8b:8d:1e:1f:3d:d3:f6:34:22:4a:
                    bd:70:e6:8b:b4:f9:54:eb:d6:58:ac:47:8a:1e:30:
                    23:0d:91:3f:71:82:3b:d9:e4:3e:5c:ff:36:61:2c:
                    65:68:34:9d:b2:d4:ba:77:be:3b:8a:cd:43:7c:b6:
                    6e:eb:67:70:2c:2f:1c:e5:6c:4b:e3:f4:b0:b4:18:
                    a1:d8:ed:70:35:8c:fe:64:62:00:f8:8f:73:dd:48:
                    f7:ab:ce:6f:be:03:6f:cd:db:91:6e:51:f2:a4:cf:
                    10:f2:c7:7a:54:f5:9c:aa:39:e6:09:e6:b5:c3:de:
                    0b:8e:7b:af:56:ed:fe:ea:8f:07:4b:b5:a4:fb:96:
                    16:5e:3f:75:e0:dc:29:16:6c:53:d0:5c:65:5d:a1:
                    c0:1c:c7:05:fb:f3:6e:9d:24:6f:9a:9e:cc:fe:e3:
                    7e:f1:3c:6f:90:e1:06:8b:4a:ee:5d:77:87:83:d5:
                    ce:a7:b2:fd:20:d5:75:58:6f:ca:4a:43:43:1a:55:
                    1c:62:80:5f:c7:4f:af:30:81:a8:10:d9:36:0a:63:
                    c7:c7:1b:e0:cf:3e:a5:9f:c8:d3:4f:cd:70:9e:19:
                    d6:15:f2:e7:f9:8c:64:b3:7c:a8:e2:9b:26:ab:b2:
                    f9:28:cc:f3:39:36:35:34:5c:86:a4:13:7e:96:29:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:18:AF:BD:34:E9:D5:6F:73:CD:B2:DA:CA:9D:43:CC:D2:8A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  199.79.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:5a:6f:15:f7:ba:2e:36:50:05:e2:db:31:72:3d:3f:cd:
         ff:6d:50:f5:8d:84:31:75:17:f8:2a:ae:c1:6c:fe:7d:b5:5f:
         ce:d3:1c:14:87:e7:90:2e:66:ad:5e:67:b8:ee:f4:8a:75:bb:
         ab:b3:81:0d:e2:d9:1b:ac:b1:8a:66:8a:84:4e:5e:f9:d4:4f:
         f8:8d:84:7c:d9:c2:85:e3:60:42:59:cf:34:2d:16:b2:a6:69:
         8d:da:43:cc:01:0e:24:a5:3e:9f:62:a8:01:77:31:57:a9:85:
         e4:bb:29:4b:35:46:c5:0f:37:7d:f4:0a:a4:b8:93:12:93:9f:
         e4:73:3d:31:19:1c:f4:0b:17:17:92:0c:1d:a7:0d:2a:03:41:
         f9:9d:33:66:5f:28:fd:bc:39:9d:02:3e:4f:91:18:30:d5:a2:
         81:67:17:dc:62:48:35:5c:21:3d:3e:87:43:22:80:94:d3:13:
         5d:ce:56:e8:30:53:08:dd:19:af:84:10:b8:b8:d2:49:92:ff:
         c2:a8:5b:c8:fb:75:b8:ff:06:57:85:d1:e8:bc:ee:46:8b:e9:
         17:06:57:02:f9:5f:f0:79:d0:0c:1e:22:42:3d:2d:82:3c:69:
         53:87:59:12:17:bb:23:9f:45:79:f3:3a:fb:17:c7:ee:65:18:
         0c:ce:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org