Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa
File:                     282703f4-37f5-3c17-a75e-bd03d598e247.roa (raw, json)
Hash identifier:          e5I8Vp1q5YXPCTTY13CAwYAJMltvS+fULRugrVTAr/E=
Subject key identifier:   4C:71:0A:A0:D7:BB:98:0A:03:52:B8:61:B5:C6:A8:D9:B8:67:7B:91
Certificate issuer:       /CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
Certificate serial:       010D0C9F43285845E7291B4677F863B2728F0600
Authority key identifier: 25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     13768
IP address blocks:        66.129.176.0/20 maxlen: 20
                          67.226.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:1b:46:77:f8:63:b2:72:8f:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=fdbd5567-cf41-466c-aac8-f801194eb51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:5c:34:a9:4d:aa:de:5d:f0:d2:d5:a9:90:
                    57:1a:e3:87:f0:b1:c9:28:76:a9:80:dd:d2:95:01:
                    02:78:ef:e8:0f:c8:92:e9:2a:50:d0:45:eb:6e:7e:
                    b0:fb:31:87:9b:26:cd:fb:da:58:0e:81:8f:69:de:
                    aa:8c:82:4d:14:dc:4d:69:b7:2c:c4:4a:7a:d8:e8:
                    96:42:34:36:35:5c:d0:a9:9b:2f:66:1b:c9:d5:0a:
                    db:a6:d4:ac:80:f4:00:bf:bf:e0:82:05:9a:87:5d:
                    81:75:59:37:86:3b:79:71:30:a6:3b:83:91:aa:00:
                    52:d9:52:c0:05:fb:3e:6b:70:91:94:c9:25:a4:29:
                    e8:e7:bb:6f:0a:cf:d8:1c:fc:60:eb:45:4e:bd:f1:
                    3a:22:4e:58:fb:29:98:8b:c4:40:db:d4:a4:10:48:
                    7f:f0:b6:04:76:a8:f4:43:67:1d:a1:43:1e:18:f0:
                    5b:ec:1c:cc:e0:a7:a4:1b:a6:67:9f:7d:b6:3c:61:
                    6f:9b:29:cc:bd:a8:93:08:61:02:a2:0b:e0:7f:98:
                    db:7d:b1:a0:ad:9b:b5:49:e9:74:60:a4:1d:35:1a:
                    1c:8e:4d:8b:e1:13:89:5f:ff:fa:00:ea:47:a8:a8:
                    2f:bc:d8:dd:26:8b:0b:6d:e1:26:d1:44:24:f5:64:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:71:0A:A0:D7:BB:98:0A:03:52:B8:61:B5:C6:A8:D9:B8:67:7B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.crl

            X509v3 Authority Key Identifier:
                keyid:25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.176.0/20
                  67.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4b:0a:79:eb:db:e4:55:77:48:a2:11:3b:db:38:78:f3:ed:
         c6:31:09:91:92:0c:33:85:4f:e3:e7:44:f9:a4:e7:94:4f:fe:
         17:3c:20:27:ee:78:e4:77:d0:dc:1a:e9:3d:8c:b6:71:da:ad:
         4f:65:a7:3c:f8:d6:f0:2d:22:47:fb:f4:df:37:02:77:2c:58:
         5b:c8:e4:34:a6:aa:9e:f9:bf:50:de:d4:95:98:7e:45:00:3e:
         55:47:50:66:95:3e:ec:1f:c8:58:4d:c1:b9:78:e2:53:c5:c8:
         0c:1f:5b:22:05:4d:62:d0:57:9a:d2:1a:f5:91:37:ce:8d:56:
         19:dc:12:66:08:51:0a:58:81:bc:74:1b:a4:18:6d:84:0e:d8:
         c8:c8:cf:a4:77:0d:ae:9f:2b:d1:01:0f:fd:56:34:ce:c6:b3:
         dc:af:29:d2:03:63:72:90:fa:b3:ed:b8:c3:ae:97:fb:e7:a9:
         72:20:c5:ff:fb:98:ee:ab:d3:45:82:0a:05:af:b9:3d:6e:2f:
         7b:8d:ca:0f:f8:c0:77:19:46:bf:7e:e0:08:b9:e6:bf:b8:d7:
         96:5b:30:40:80:49:af:7f:ae:a9:c5:0f:41:de:a2:ab:2f:f0:
         6f:e4:ec:86:9e:4a:8f:7d:ae:58:72:fa:f0:f8:b8:9a:c6:48:
         fc:e0:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:21 2024 by rpki-client on console-fra.rpki-client.org