Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/c2426f57-b823-345d-b891-0c00a98d5d07.roa
File:                     c2426f57-b823-345d-b891-0c00a98d5d07.roa (raw, json)
Hash identifier:          SMPZQGnFl66UuBr3eMUTCaa5c2PSwKEuk5JIqFCP3oY=
Subject key identifier:   69:6C:C6:C3:B7:32:C6:38:B4:D5:76:D5:CF:38:46:FD:E4:ED:0D:92
Certificate issuer:       /CN=a686eafb-60a6-46e8-b535-fcb7eb7f5c45
Certificate serial:       010D0C9F43285845A9E2ACACDA3DBA7A9DF6E760
Authority key identifier: 42:42:7A:72:DD:4E:35:2F:31:08:25:14:35:43:07:FF:CC:AD:A2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/c2426f57-b823-345d-b891-0c00a98d5d07.roa
Signing time:             Thu 25 Apr 2024 14:14:24 +0000
ROA not before:           Thu 25 Apr 2024 14:14:24 +0000
ROA not after:            Wed 24 Jul 2024 14:14:24 +0000
asID:                     36446
IP address blocks:        208.65.112.0/22 maxlen: 24
                          2604:7180::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:e2:ac:ac:da:3d:ba:7a:9d:f6:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a686eafb-60a6-46e8-b535-fcb7eb7f5c45
        Validity
            Not Before: Apr 25 14:14:24 2024 GMT
            Not After : Jul 24 14:14:24 2024 GMT
        Subject: CN=b96a2b8c-f90a-4f5d-952f-0b087ca93727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:77:d1:2c:da:3f:f1:73:7d:f4:f9:e2:fc:
                    5d:b2:b9:c5:9c:bd:f6:20:f2:d9:d3:a2:b4:78:27:
                    32:b7:f4:72:6c:eb:dd:7c:a5:7c:82:87:ec:36:d9:
                    2e:84:49:24:3e:a7:c2:11:e6:dc:7a:45:c8:69:cd:
                    3c:ac:ee:4b:42:8e:0e:ff:93:b0:af:64:1d:42:19:
                    a3:22:8c:27:c7:8d:5e:8e:ca:a8:9e:63:dc:0f:ad:
                    dc:7b:8f:ba:4d:82:67:b8:da:d2:06:cf:4d:c0:f0:
                    74:e9:bf:ae:c4:33:9b:b2:eb:c3:37:ca:da:45:ee:
                    19:fa:d0:0d:eb:2f:18:47:9f:5d:bf:d6:d0:b5:2d:
                    da:46:8e:ef:c4:60:64:3e:2d:63:d6:0d:32:eb:11:
                    6e:8c:19:5f:30:8c:71:d8:93:55:ce:43:27:61:d6:
                    94:ca:b5:75:1a:e5:6a:cc:a5:b2:16:da:be:a3:2e:
                    7a:c3:ab:71:94:ad:a3:df:4f:f5:5e:0d:28:c6:16:
                    b1:13:06:ae:4f:53:b1:2c:69:e5:43:92:a6:cd:e3:
                    f5:c8:6c:89:1f:24:41:0e:18:76:c5:08:71:e3:ba:
                    2f:41:bf:0c:cb:5e:66:58:e8:48:8d:94:a3:54:48:
                    9f:b9:d4:5b:c7:17:02:b2:05:08:c1:99:3f:6e:10:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6C:C6:C3:B7:32:C6:38:B4:D5:76:D5:CF:38:46:FD:E4:ED:0D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/c2426f57-b823-345d-b891-0c00a98d5d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.crl

            X509v3 Authority Key Identifier:
                keyid:42:42:7A:72:DD:4E:35:2F:31:08:25:14:35:43:07:FF:CC:AD:A2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.112.0/22
                IPv6:
                  2604:7180::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:a7:00:09:b2:5b:1a:a5:1b:b8:00:07:9d:62:83:da:a3:
         57:59:00:48:55:94:9a:2f:a5:31:c8:50:26:50:9a:24:ac:5c:
         be:72:3a:99:84:dc:3d:0a:42:3e:5e:07:8e:d1:81:39:95:e9:
         61:03:a9:64:9f:a0:da:f2:31:5e:a9:12:e6:6a:49:5c:0a:c3:
         fa:c1:b4:9b:fe:d9:f8:e6:07:bd:cc:c0:01:e5:88:81:fb:f1:
         a9:48:04:54:70:a8:37:d3:51:d9:10:10:95:b7:0b:da:3e:71:
         ba:98:69:7e:96:e5:a9:4a:5b:45:4c:90:1e:0d:8d:a6:cd:34:
         ec:26:d1:46:8f:42:87:02:12:0f:c0:a5:f2:04:ff:ca:7b:70:
         12:59:23:d1:81:61:52:91:22:ae:68:85:93:c6:cb:f7:f7:df:
         aa:1a:fa:c0:35:bc:5b:77:c0:60:2e:34:ab:fc:b3:87:7a:b7:
         93:6b:3a:41:19:10:c6:09:48:72:cb:e7:2d:19:88:64:e2:d8:
         dc:8e:12:41:46:39:1a:19:41:50:72:48:53:a8:2d:65:9d:31:
         aa:6b:a3:79:02:af:ce:77:da:de:dd:1d:56:6c:20:9c:de:45:
         fe:54:1d:72:1d:2f:1e:95:65:f9:da:36:ba:25:1e:db:45:b5:
         02:12:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:55:42 2024 by rpki-client on console-ams.rpki-client.org