Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
File:                     6806c449-9b48-3ef6-8232-47296eb5e804.roa (raw, json)
Hash identifier:          be4f2krtrRI+cVSylSoOd+aqcpqWop3OeCdaSIXcBSo=
Subject key identifier:   78:AB:9E:03:18:47:4B:97:E4:72:E7:22:B9:17:DC:47:28:1F:4F:E6
Certificate issuer:       /CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
Certificate serial:       010D0C9F432858456A6EA167FFB9CEF4DA612B40
Authority key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
Signing time:             Tue 02 Apr 2024 20:44:40 +0000
ROA not before:           Tue 02 Apr 2024 20:44:40 +0000
ROA not after:            Mon 01 Jul 2024 20:44:40 +0000
asID:                     46886
IP address blocks:        104.36.252.0/22 maxlen: 32
                          104.193.128.0/22 maxlen: 32
                          170.178.140.0/22 maxlen: 32
                          158.51.192.0/22 maxlen: 32
                          165.140.16.0/22 maxlen: 32
                          2602:ffa4::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:6e:a1:67:ff:b9:ce:f4:da:61:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
        Validity
            Not Before: Apr  2 20:44:40 2024 GMT
            Not After : Jul  1 20:44:40 2024 GMT
        Subject: CN=02629df7-9453-4de7-b89b-476a0615fce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:50:d9:5c:e2:50:b6:34:c1:af:68:78:b0:
                    c9:38:20:96:31:e0:1e:6c:a3:b2:42:10:75:de:8a:
                    c6:00:5d:e1:e8:a2:a2:e2:8d:82:8d:0f:f4:ce:fc:
                    0a:13:d3:2c:4f:cf:01:f5:dd:6f:52:95:0f:e7:a3:
                    a3:6e:d7:92:f8:00:9e:6f:19:64:3e:a4:c9:dc:23:
                    b2:57:95:35:ba:be:b8:fd:e7:62:ed:55:fd:fa:5a:
                    dc:ae:e1:6b:30:75:c4:fe:5e:4c:6b:41:18:ff:f7:
                    29:7e:c3:f2:39:8f:e4:fb:77:81:ee:1b:91:29:99:
                    1d:e5:7d:fd:67:37:92:a3:83:14:23:b1:cd:1d:a8:
                    45:40:99:ed:9f:cb:93:d6:46:71:22:1b:b4:34:3e:
                    6c:cb:6c:18:24:b4:64:bf:ae:74:83:c6:aa:e9:93:
                    3e:ac:a7:e3:58:14:b8:9f:f6:01:8a:8d:40:5d:a7:
                    26:bd:aa:fd:77:61:e4:e8:7e:7c:5b:18:ac:cc:08:
                    4a:43:43:db:33:75:35:6d:c1:3c:b5:01:8b:b6:d2:
                    33:79:a2:60:d9:1a:63:86:b0:41:04:d9:a5:3d:f9:
                    53:bf:70:3b:29:20:37:5e:ad:44:8a:34:e7:38:76:
                    66:e8:e6:ed:bf:81:12:22:f1:5b:73:88:9e:42:82:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AB:9E:03:18:47:4B:97:E4:72:E7:22:B9:17:DC:47:28:1F:4F:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl

            X509v3 Authority Key Identifier:
                keyid:AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.252.0/22
                  104.193.128.0/22
                  158.51.192.0/22
                  165.140.16.0/22
                  170.178.140.0/22
                IPv6:
                  2602:ffa4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:c3:44:a4:e2:bc:f0:5e:6a:2b:03:86:25:58:ce:12:bd:
         d1:fc:5f:7b:c5:cf:d8:e2:b7:a4:0f:91:08:9a:b2:ed:c2:ff:
         1d:3d:62:85:2f:a5:23:3f:6c:7b:62:6c:36:20:5e:f7:f6:32:
         7a:a4:6a:80:9c:12:26:10:08:3b:02:df:aa:c5:5b:4d:0b:db:
         0e:10:f8:20:94:df:8d:b4:2a:13:c1:17:e5:fc:56:a0:8c:5a:
         90:c4:07:64:d4:c1:cc:4b:bb:d5:48:cb:fd:1c:50:63:b3:f8:
         0b:5c:c0:d2:72:74:26:b9:61:a9:f3:82:c2:e1:10:f0:f7:a5:
         1a:fe:34:1f:21:b6:6a:61:8f:d6:40:05:12:67:02:28:c7:ef:
         b7:23:95:26:c2:23:8c:74:7e:fe:b1:08:1b:26:ec:f7:48:42:
         b5:02:4d:88:55:56:ca:6f:3e:96:b6:96:db:43:e9:5e:88:35:
         84:2a:51:7d:2f:56:40:f3:ef:4c:04:f3:52:d8:94:a2:12:a3:
         4d:87:ec:e3:2e:30:d7:66:49:8a:3d:68:c9:ad:0b:77:a8:5d:
         6e:63:6d:1b:bd:a6:e1:e7:08:38:04:af:09:de:b4:72:18:20:
         ec:84:e4:76:ed:65:0a:17:31:90:c5:c5:4b:35:02:fc:f2:d7:
         89:d4:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:16:18 2024 by rpki-client on console-ams.rpki-client.org