Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa
File:                     290a97eb-7241-31b2-bc68-434e03367db9.roa (raw, json)
Hash identifier:          fE8l+NNREc2MgGRH4/U10+kzcUY/konZWJ/+KmnykiU=
Subject key identifier:   2B:8F:A3:9A:D4:50:32:1D:4D:43:07:24:6B:99:47:42:61:22:4D:82
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584511B5912A2B2A99D492A3C000
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     63062
IP address blocks:        67.142.156.0/24 maxlen: 24
                          66.82.244.0/24 maxlen: 24
                          67.142.192.0/24 maxlen: 24
                          67.142.187.0/24 maxlen: 24
                          67.47.22.0/24 maxlen: 24
                          66.82.242.0/24 maxlen: 24
                          67.47.19.0/24 maxlen: 24
                          66.82.237.0/24 maxlen: 24
                          67.47.21.0/24 maxlen: 24
                          67.47.20.0/24 maxlen: 24
                          66.82.231.0/24 maxlen: 24
                          66.82.230.0/24 maxlen: 24
                          66.82.232.0/24 maxlen: 24
                          72.171.14.0/24 maxlen: 24
                          66.82.236.0/24 maxlen: 24
                          72.171.6.0/24 maxlen: 24
                          72.169.215.0/24 maxlen: 24
                          67.143.99.0/24 maxlen: 24
                          72.169.71.0/24 maxlen: 24
                          72.169.73.0/24 maxlen: 24
                          72.171.15.0/24 maxlen: 24
                          72.171.11.0/24 maxlen: 24
                          67.142.204.0/24 maxlen: 24
                          67.142.203.0/24 maxlen: 24
                          67.142.251.0/24 maxlen: 24
                          67.142.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:91:2a:2b:2a:99:d4:92:a3:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=93b9cbe4-4c35-4f08-8728-bc51f48d0b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:7d:b0:46:96:de:1d:12:84:b8:69:e5:98:
                    96:82:af:db:b6:2d:4b:30:e8:a3:63:fd:15:d2:83:
                    a7:46:d3:b8:97:4a:ec:8e:94:1c:97:8b:64:35:b4:
                    c2:ea:a4:fc:58:a8:3a:e1:06:d6:0a:b1:df:e2:54:
                    ff:d7:e6:62:91:c6:e3:18:29:12:3d:cc:9e:19:7f:
                    4d:90:1d:e7:de:46:5a:e3:49:73:26:62:4b:26:e0:
                    3e:3d:6d:32:fa:c9:c0:97:fd:c6:f3:ca:4e:93:0a:
                    b7:44:8a:2e:1e:3a:1a:a6:1d:fd:17:8b:41:90:05:
                    77:ed:e3:06:03:0e:fe:b9:3e:26:32:fe:68:b8:9e:
                    ae:41:af:23:af:e8:d8:30:0b:ef:0f:29:5b:3f:f2:
                    8e:8a:5b:d9:91:d4:5f:51:ef:77:3d:56:a1:99:96:
                    ce:bd:77:78:4a:02:7b:b0:78:0e:ee:d5:82:db:7d:
                    7e:d8:30:34:30:4c:85:ff:37:e4:4f:93:04:17:75:
                    4f:6c:65:86:bc:de:12:ea:62:e0:be:6d:7d:a1:21:
                    57:df:a4:53:3e:94:3e:9b:19:c7:a6:12:b5:e4:74:
                    2b:f1:2d:85:4b:29:ec:c3:37:11:c0:fe:ce:39:a0:
                    31:e8:ea:f6:b8:b0:06:c8:e0:85:64:63:37:87:10:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8F:A3:9A:D4:50:32:1D:4D:43:07:24:6B:99:47:42:61:22:4D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.82.230.0-66.82.232.255
                  66.82.236.0/23
                  66.82.242.0/24
                  66.82.244.0/24
                  67.47.19.0-67.47.22.255
                  67.142.156.0/24
                  67.142.187.0/24
                  67.142.192.0/24
                  67.142.203.0-67.142.204.255
                  67.142.243.0/24
                  67.142.251.0/24
                  67.143.99.0/24
                  72.169.71.0/24
                  72.169.73.0/24
                  72.169.215.0/24
                  72.171.6.0/24
                  72.171.11.0/24
                  72.171.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:42:cd:89:14:6e:b4:97:56:75:23:71:ca:b2:41:cc:30:
         c3:f0:cb:c0:f9:5c:46:fc:2b:1d:81:61:b2:53:97:00:16:76:
         f1:b2:3d:00:f3:d3:c9:3f:41:11:64:87:58:75:5e:b3:75:5c:
         bd:80:ad:72:36:cb:c0:07:f8:11:88:f1:d0:56:7e:9b:11:2a:
         c3:99:e4:d8:97:57:bd:7b:c9:bb:33:6f:0f:e7:77:89:92:fe:
         6a:ae:fd:f6:c9:ee:31:8c:c7:1c:d9:39:f9:da:61:fd:49:5d:
         6b:5c:63:18:01:f6:28:c9:f9:f3:cb:49:66:e3:20:eb:5c:e0:
         06:1c:58:43:61:60:77:a3:0c:c2:84:e0:b4:ae:05:e3:96:60:
         d8:2b:01:66:82:dc:fa:40:a1:8e:56:52:62:3b:37:17:43:06:
         bd:48:e6:d4:c9:92:f1:b5:ac:51:93:59:88:07:ed:01:04:99:
         6a:5d:da:79:24:f2:21:66:b2:33:13:8c:9f:6b:70:a1:a7:87:
         11:c3:88:1e:5c:51:57:a5:4d:84:0f:ca:39:13:a7:f0:7c:a4:
         ea:61:e7:35:7c:00:05:d9:00:5a:a3:42:04:dc:cc:35:b9:8d:
         b3:d5:48:45:89:fb:38:f1:08:4c:a7:06:4d:3d:06:84:7f:c3:
         bc:a6:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:25 2024 by rpki-client on console-fra.rpki-client.org