Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa
File:                     38917362-89be-3070-88f1-aeb91e6b0dea.roa (raw, json)
Hash identifier:          plwJevJmbvFlOi6iZUDH/oGkREqn2Wjktor/2JdOhVU=
Subject key identifier:   84:F5:A0:88:CE:B0:97:58:28:04:5C:0D:FA:2F:90:41:80:9F:31:FF
Certificate issuer:       /CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be
Certificate serial:       010D0C9F4328584574B31443ED081E52C068A700
Authority key identifier: E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     47027
IP address blocks:        172.97.120.0/22 maxlen: 24
                          204.235.208.0/20 maxlen: 24
                          184.171.192.0/20 maxlen: 24
                          199.188.172.0/22 maxlen: 24
                          216.118.128.0/19 maxlen: 24
                          192.243.76.0/22 maxlen: 24
                          206.123.28.0/23 maxlen: 24
                          69.60.64.0/20 maxlen: 24
                          208.84.124.0/22 maxlen: 24
                          2607:fff8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:14:43:ed:08:1e:52:c0:68:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=6dce8691-ff14-4466-b2fd-d20782399588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:a0:5c:02:77:15:59:3a:bb:15:24:f0:3c:
                    ee:f1:8d:fa:83:81:cd:78:d2:ef:10:55:54:3d:9f:
                    a9:7d:f6:cf:98:d6:4b:40:63:a1:6c:35:25:05:68:
                    99:08:9c:df:0e:33:fd:98:21:4e:13:b5:c7:c3:a0:
                    f6:79:ca:5f:90:3d:22:6d:1f:c1:aa:d5:aa:ed:42:
                    01:53:42:9a:ee:7e:db:09:36:bb:51:6a:21:51:ee:
                    30:d2:16:38:5b:09:a8:9b:3a:14:90:1a:1b:f6:67:
                    55:22:82:d2:28:95:df:08:b3:5b:b0:eb:b5:e9:eb:
                    a3:c0:c4:a3:f6:a6:d9:8a:b5:12:92:ee:5a:b3:24:
                    4c:75:bb:3d:ad:7d:5f:0c:99:4b:ce:d0:48:14:32:
                    99:dd:da:ea:28:39:3a:ca:cb:16:39:01:4c:c5:63:
                    c9:66:4d:03:2a:c6:2f:03:af:7b:84:76:4d:4f:68:
                    d7:b7:ed:19:8b:16:7f:b3:41:78:3f:48:b1:da:12:
                    fe:f6:e3:58:75:22:d2:0a:39:a7:34:81:26:8f:e3:
                    bd:bf:37:c4:3c:21:10:9b:9e:4e:e3:f9:45:26:8d:
                    52:89:b6:23:fc:37:06:9f:62:65:82:2c:69:c1:28:
                    a6:57:af:56:90:9c:f6:b6:fb:61:d5:aa:be:16:c7:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F5:A0:88:CE:B0:97:58:28:04:5C:0D:FA:2F:90:41:80:9F:31:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl

            X509v3 Authority Key Identifier:
                keyid:E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.60.64.0/20
                  172.97.120.0/22
                  184.171.192.0/20
                  192.243.76.0/22
                  199.188.172.0/22
                  204.235.208.0/20
                  206.123.28.0/23
                  208.84.124.0/22
                  216.118.128.0/19
                IPv6:
                  2607:fff8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:a8:03:af:e1:19:97:82:d4:85:76:16:97:4b:f3:01:7b:
         83:77:6a:bc:b3:2e:b3:e3:33:67:a9:98:d9:60:4f:4a:52:fa:
         b8:80:21:2b:e4:da:1f:31:f8:f8:80:b0:9f:27:da:92:fc:1c:
         1b:e9:22:13:44:f9:6d:20:d9:55:d4:c2:bf:0a:9f:7c:ed:ad:
         b5:16:dc:87:08:ed:81:a1:48:ff:77:f0:11:c1:a5:8d:d2:6f:
         38:41:90:16:68:f7:57:5a:85:f1:c3:de:7d:c0:91:e8:86:8e:
         85:ae:1f:a7:3e:1c:f8:6c:52:38:b6:c4:a6:4c:70:f3:8d:bd:
         e5:48:be:93:4e:ad:8d:d9:04:52:a7:86:ee:23:11:c5:4f:56:
         0f:b4:15:4b:b6:37:08:ef:be:8a:8c:4d:47:9c:89:5f:20:ec:
         cb:3c:ed:55:01:e5:64:46:59:ed:1e:c3:d0:92:ea:2d:15:3d:
         58:18:fb:da:8d:7e:63:21:f9:c8:84:f9:7a:91:f0:27:10:7f:
         06:0d:99:22:63:6f:7a:da:64:ab:2b:67:68:21:07:6d:34:1c:
         f9:e4:e2:30:f4:92:60:9b:d9:53:8d:aa:5d:b8:b1:bd:1c:b9:
         7c:14:89:5b:a8:74:c5:2d:d0:e6:63:ed:68:96:56:35:fa:c4:
         09:c3:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:37:51 2024 by rpki-client on console-fra.rpki-client.org