Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39009bcf-fec5-37e7-bcfa-82c35936c92f.roa
File:                     39009bcf-fec5-37e7-bcfa-82c35936c92f.roa (raw, json)
Hash identifier:          WHgP3vBm2m2mRHeDaOcYCPJlwWyUrNycwYw3Aqx4p1E=
Subject key identifier:   E9:0B:8A:64:67:46:5D:44:67:1E:FE:45:25:C8:BF:FA:86:F9:2A:A5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8C7391F9B87EBB9D2140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39009bcf-fec5-37e7-bcfa-82c35936c92f.roa
Signing time:             Thu 25 Apr 2024 22:43:55 +0000
ROA not before:           Thu 25 Apr 2024 22:43:55 +0000
ROA not after:            Wed 24 Jul 2024 22:43:55 +0000
asID:                     204957
IP address blocks:        172.120.199.0/24 maxlen: 24
                          172.120.202.0/24 maxlen: 24
                          172.120.203.0/24 maxlen: 24
                          172.120.204.0/24 maxlen: 24
                          172.120.205.0/24 maxlen: 24
                          172.120.207.0/24 maxlen: 24
                          172.120.209.0/24 maxlen: 24
                          172.120.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8c:73:91:f9:b8:7e:bb:9d:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:55 2024 GMT
            Not After : Jul 24 22:43:55 2024 GMT
        Subject: CN=b602da51-ac7f-446f-bd0f-35b1b43aaa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:a6:92:38:62:90:fc:02:27:25:81:36:99:
                    54:87:09:d5:46:6b:6e:67:22:99:6a:48:8d:30:9c:
                    46:89:68:68:e8:3c:8a:56:23:c5:d3:6c:6f:a3:1c:
                    93:fe:36:12:f8:1c:95:3c:47:66:d7:03:cc:ca:c0:
                    d9:d9:e0:b8:a5:81:a1:50:2d:be:00:56:7d:4f:74:
                    a1:27:6a:c4:e4:72:79:f8:7f:65:a5:3e:42:65:4d:
                    b0:70:84:16:52:8d:68:63:97:65:79:57:3d:8d:94:
                    cc:77:43:90:01:54:05:7d:de:ea:16:1c:bc:18:99:
                    74:2c:78:a1:c2:4c:c1:26:59:e9:53:91:7c:7b:dd:
                    16:6a:82:c7:29:d7:df:9d:f7:21:68:e1:f1:5b:3b:
                    c8:4e:bc:73:24:47:80:bf:d5:33:a8:78:0a:d3:0b:
                    11:31:b1:30:71:76:ac:d0:58:3e:3f:f7:d3:f9:ed:
                    5f:92:bc:4a:05:da:d1:4a:b7:94:37:60:8d:af:05:
                    2f:a3:b0:55:ce:1b:b6:c8:79:69:8b:2a:38:f2:38:
                    15:4d:34:8d:de:78:4f:00:4a:4d:74:e3:d4:11:36:
                    92:bc:04:68:33:ce:da:b1:46:89:36:9d:ad:6e:37:
                    a3:03:1b:d7:86:b0:03:db:b2:aa:4f:82:59:63:08:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0B:8A:64:67:46:5D:44:67:1E:FE:45:25:C8:BF:FA:86:F9:2A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39009bcf-fec5-37e7-bcfa-82c35936c92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.199.0/24
                  172.120.202.0-172.120.205.255
                  172.120.207.0/24
                  172.120.209.0-172.120.210.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:b6:84:4e:1f:60:74:90:2f:4a:6f:41:28:2e:d6:9d:d0:
         41:b8:b5:0e:22:12:7a:6c:b6:26:26:1b:2e:b1:d1:8c:27:28:
         6e:a1:78:c5:c4:cd:8b:a3:33:0c:ce:cd:3d:0f:cc:c0:77:d8:
         9b:f3:da:b0:41:b1:30:6c:47:0e:03:13:43:97:76:3f:b4:49:
         37:20:d2:b9:a8:f3:77:40:8c:bb:ad:0a:74:67:88:54:1d:dd:
         a7:32:1d:1b:79:af:1d:fb:fc:d2:b2:a9:03:d7:b7:8a:a4:d3:
         1f:83:5b:ef:07:26:80:e7:e8:8b:d5:e5:a0:eb:a9:68:83:b9:
         ea:c7:3d:56:16:16:65:42:2c:fc:48:b0:b8:29:e6:09:29:d2:
         1f:1d:71:78:53:1b:a6:e4:54:2c:15:4d:0d:02:e5:a7:8d:bf:
         0f:ba:59:23:e7:60:92:fc:09:d6:cb:1b:d7:e1:b9:0d:5c:74:
         b9:e3:cd:1f:9b:f1:63:ca:a3:11:c8:bb:34:80:c2:56:5c:47:
         b2:a3:c6:d2:92:f1:c2:8e:1e:10:7b:66:e6:26:07:28:18:0f:
         cc:32:ff:a8:67:61:f7:df:fe:44:57:96:79:17:5d:c8:4a:1b:
         98:1e:23:7f:3e:03:77:52:c8:8a:9a:bf:5a:69:cf:60:30:51:
         64:dd:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:16:46 2024 by rpki-client on console-ams.rpki-client.org