Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/0a8e478e-8b73-3990-bc36-108093a83571.roa
File:                     0a8e478e-8b73-3990-bc36-108093a83571.roa (raw, json)
Hash identifier:          nfFdRDTOCY/iLbY3iYtgUWUlKw4kW3jiORWfi17OX1s=
Subject key identifier:   5A:48:8B:C9:B2:8B:FC:A3:DB:16:08:46:7E:A8:20:2D:37:0C:5A:DC
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F432858452275944B1EA651FDC4F60AC0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/0a8e478e-8b73-3990-bc36-108093a83571.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     8100
IP address blocks:        104.223.80.0/23 maxlen: 24
                          104.223.34.0/23 maxlen: 24
                          155.94.210.0/23 maxlen: 24
                          155.94.208.0/23 maxlen: 24
                          161.129.64.0/22 maxlen: 24
                          66.63.168.0/23 maxlen: 24
                          64.188.22.0/23 maxlen: 24
                          72.11.156.0/23 maxlen: 24
                          66.212.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:94:4b:1e:a6:51:fd:c4:f6:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=7b2801ed-cd31-4c03-ad67-e2b88ac2c9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:36:d3:50:2e:e0:cc:92:9a:33:c4:a4:81:
                    09:f0:5a:be:06:a3:05:68:0c:ab:cc:da:16:6f:68:
                    ec:2b:97:b0:f8:68:26:f3:5f:40:1e:aa:5a:00:8f:
                    00:be:5f:44:6a:09:73:a2:34:fc:99:9b:0c:3e:2e:
                    7c:49:7c:6a:4e:db:a3:1c:92:ea:a2:c8:d0:88:18:
                    08:f2:a4:9b:39:31:77:f3:ba:e6:04:3d:30:e5:1f:
                    61:d0:b9:0a:3d:99:1f:58:fa:55:ca:10:ea:0f:88:
                    b6:74:94:10:44:23:2d:b1:fb:da:27:26:a3:ed:0a:
                    b9:30:86:39:23:45:cb:be:7c:90:5d:b8:26:4a:c0:
                    c0:17:15:85:87:3c:73:f3:9e:55:b0:3c:70:f6:ed:
                    4d:92:48:84:a6:76:c0:31:17:eb:65:ab:cc:19:23:
                    a1:cc:b3:57:9b:31:79:02:d8:99:6f:52:cc:03:90:
                    67:cd:d3:f2:03:74:70:e5:52:f9:2d:75:25:a0:03:
                    3e:8b:e9:a9:4e:d2:77:45:07:a5:d8:94:36:5f:10:
                    c4:3d:45:d5:69:e5:b6:c4:c0:65:ac:ac:91:08:d3:
                    f0:0a:7e:10:9d:76:ca:ed:06:0a:56:27:a8:eb:46:
                    a8:3b:d8:ed:ed:1f:92:db:66:d5:69:3a:42:91:da:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:48:8B:C9:B2:8B:FC:A3:DB:16:08:46:7E:A8:20:2D:37:0C:5A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/0a8e478e-8b73-3990-bc36-108093a83571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.188.22.0/23
                  66.63.168.0/23
                  66.212.22.0/24
                  72.11.156.0/23
                  104.223.34.0/23
                  104.223.80.0/23
                  155.94.208.0/22
                  161.129.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:11:db:5f:30:10:5d:20:92:ba:e9:1e:dc:a8:2d:6d:d5:14:
         de:b3:f1:7b:66:20:61:f3:05:d4:e8:f4:6a:c7:be:77:e7:ad:
         90:78:10:ea:70:dd:17:58:99:03:ab:5b:ab:af:01:62:aa:ec:
         9b:2b:63:fb:d5:67:f0:6e:de:8b:7a:f5:e0:54:5d:05:2b:27:
         c0:c0:f1:9b:e6:83:42:7c:1f:5e:19:06:3e:2c:53:a8:bc:04:
         87:c6:17:f5:de:3b:a5:3c:86:c8:98:38:bc:61:37:a2:1a:aa:
         9b:dd:ea:47:ae:c0:16:03:a2:b6:c5:a4:16:36:f9:a2:8b:da:
         ea:f6:01:18:53:ea:15:14:c7:67:58:b9:a1:2b:2e:28:40:73:
         16:73:c3:f6:f6:ac:11:7b:9d:89:1b:e7:74:1e:95:3e:07:2e:
         6d:00:22:7c:84:7f:74:26:0c:5a:6e:d6:96:72:dd:82:58:ca:
         3c:b5:a4:13:e5:56:56:d1:4c:63:88:5d:b0:9b:46:47:6b:58:
         70:fd:7c:d9:f0:8f:3d:da:23:ef:93:5f:15:eb:db:50:12:53:
         08:f4:a4:3a:3e:79:7b:ae:67:70:ef:37:a9:b9:db:14:61:92:
         6f:c9:93:55:fc:2a:72:aa:79:71:3f:5e:1e:e1:76:e1:27:35:
         50:fc:4c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:30 2024 by rpki-client on console-ams.rpki-client.org