Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/33019f3c-c9cc-3581-9a91-f7b0213c4888.roa
File:                     33019f3c-c9cc-3581-9a91-f7b0213c4888.roa (raw, json)
Hash identifier:          UwoSFfsdNhIPoq7NGJqVdSN18w0yL+1EdVaPHbUw8zg=
Subject key identifier:   1A:B6:B7:F0:53:62:36:59:6C:D7:D4:A4:69:63:79:8B:C6:0D:5C:8A
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F43285845C8A5FD0D67529816147B7560
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/33019f3c-c9cc-3581-9a91-f7b0213c4888.roa
Signing time:             Mon 06 May 2024 14:42:11 +0000
ROA not before:           Mon 06 May 2024 14:42:11 +0000
ROA not after:            Sun 04 Aug 2024 14:42:11 +0000
asID:                     7029
IP address blocks:        209.135.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:a5:fd:0d:67:52:98:16:14:7b:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: May  6 14:42:11 2024 GMT
            Not After : Aug  4 14:42:11 2024 GMT
        Subject: CN=f8c63a4a-eb72-4422-9c7c-eeee08b79489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:6d:ef:0e:76:33:bf:3b:85:5a:5b:51:ce:
                    dd:d1:20:b7:75:25:c4:20:1b:8b:34:7f:ca:d2:d4:
                    7e:29:b3:5b:fa:f8:98:87:9d:01:8c:ee:da:a1:a0:
                    dd:ad:c9:97:08:e8:9f:68:4f:e1:10:b1:45:06:88:
                    b3:6d:80:04:79:6c:71:73:71:e6:a8:ca:ad:a1:b8:
                    bf:e0:0c:2f:18:7c:00:ab:f0:9c:93:32:90:ab:6a:
                    12:e1:c1:a4:e8:eb:5c:1d:aa:8c:e7:73:c2:fe:c6:
                    59:15:4c:9b:f6:c2:7a:12:ee:22:cf:b5:60:ff:53:
                    41:c1:43:58:cc:ba:3d:86:0c:92:2e:f1:d9:40:dd:
                    a1:91:2a:25:e5:dd:2d:07:a1:8f:a2:9e:28:de:a9:
                    b2:bf:af:5b:be:52:e0:7d:c7:8b:2c:47:25:b9:9d:
                    91:c1:99:6a:8b:81:86:2d:6f:c5:99:80:08:ef:0a:
                    56:57:26:67:02:69:be:eb:70:88:a1:0e:bd:af:ef:
                    96:ee:34:d7:b2:83:be:ee:34:ad:3e:c3:f2:56:16:
                    8c:2a:80:4a:12:72:e9:63:ca:a6:16:a1:0d:6a:30:
                    20:3f:f5:04:b0:5d:12:09:ae:4e:20:b2:4d:66:bc:
                    03:e3:96:e3:73:b1:99:d5:2c:dc:ad:c2:c7:c6:34:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B6:B7:F0:53:62:36:59:6C:D7:D4:A4:69:63:79:8B:C6:0D:5C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/33019f3c-c9cc-3581-9a91-f7b0213c4888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:18:e2:a3:b9:a7:ab:a9:6c:48:8a:de:93:59:60:ff:1c:
         5a:fa:77:fa:28:12:e4:68:1c:67:ec:4f:5b:bc:05:24:3f:04:
         08:fa:1e:b5:9d:71:62:da:93:14:a7:ec:f0:76:e1:ea:74:c5:
         22:df:3c:bd:b0:af:57:d0:0b:7f:c4:0e:b6:ad:38:b6:05:91:
         a1:dd:3f:5b:3c:fc:84:41:15:4d:fd:cc:df:f7:20:c9:a9:81:
         9d:05:9a:4c:15:b4:c6:fa:70:ef:04:aa:95:d9:8b:c1:d4:bf:
         5d:c9:da:10:84:e7:a7:38:2d:cb:94:b5:c0:f7:73:2f:95:ec:
         1b:6d:60:c4:12:c9:a5:18:42:c9:ef:06:70:c1:64:16:80:83:
         2f:f2:cf:29:90:00:0e:f1:bc:b1:27:47:46:f9:d5:2d:db:db:
         7a:a2:c3:63:68:50:d5:83:02:83:c0:5b:d5:21:a8:21:4d:ab:
         9c:67:a3:75:6e:e7:22:da:85:3b:cd:67:64:84:ee:5a:56:fd:
         1c:5e:5f:a6:4f:4c:45:04:6a:1a:1a:9b:df:e0:4e:22:3e:b6:
         0c:6a:8b:16:21:83:ca:d6:a1:63:94:5a:ef:07:bb:ca:28:62:
         3f:54:aa:c9:44:ac:e9:f1:f0:30:c8:19:86:29:60:99:f5:d8:
         80:7c:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:10 2024 by rpki-client on console-fra.rpki-client.org