Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa
File:                     b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa (raw, json)
Hash identifier:          aoqsGWwD5CMvpvN3sBe7kXWxduPYkSMpE+lEALS7Vt0=
Subject key identifier:   62:17:93:14:86:A6:2B:DF:08:E2:1B:71:19:26:7C:5D:52:93:2F:39
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F43285845410D4DE5902648EBA970F200
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa
Signing time:             Tue 19 Mar 2024 01:00:24 +0000
ROA not before:           Tue 19 Mar 2024 01:00:24 +0000
ROA not after:            Mon 17 Jun 2024 01:00:24 +0000
asID:                     30092
IP address blocks:        72.11.153.0/24 maxlen: 24
                          66.212.24.0/24 maxlen: 24
                          66.212.18.0/24 maxlen: 24
                          167.160.169.0/24 maxlen: 24
                          216.144.226.0/24 maxlen: 24
                          167.160.164.0/24 maxlen: 24
                          216.144.225.0/24 maxlen: 24
                          155.94.213.0/24 maxlen: 24
                          216.144.231.0/24 maxlen: 24
                          104.223.114.0/24 maxlen: 24
                          216.144.229.0/24 maxlen: 24
                          104.223.65.0/24 maxlen: 24
                          192.161.185.0/24 maxlen: 24
                          104.129.23.0/24 maxlen: 24
                          209.54.107.0/24 maxlen: 24
                          204.44.69.0/24 maxlen: 24
                          216.144.235.0/24 maxlen: 24
                          216.144.233.0/24 maxlen: 24
                          66.63.187.0/24 maxlen: 24
                          66.63.175.0/24 maxlen: 24
                          23.226.139.0/24 maxlen: 24
                          23.226.136.0/24 maxlen: 24
                          66.63.180.0/24 maxlen: 24
                          66.212.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:0d:4d:e5:90:26:48:eb:a9:70:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Mar 19 01:00:24 2024 GMT
            Not After : Jun 17 01:00:24 2024 GMT
        Subject: CN=9ceccb61-e296-46e2-8399-0659ffd20698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:c3:75:df:99:5a:72:89:89:08:69:4d:3c:
                    61:dc:dc:fc:7b:b8:ff:bf:65:4a:ea:15:ee:32:71:
                    b4:49:89:81:4d:65:3b:cd:8a:87:a3:37:e0:af:40:
                    3f:15:66:88:6c:5c:1e:24:42:f4:ec:0e:f1:17:a9:
                    61:a3:13:eb:ec:dc:c3:3e:06:87:41:b3:8d:c8:7d:
                    5d:e7:5a:7c:4a:d1:d5:4d:1b:41:31:ec:24:74:77:
                    90:71:5c:0f:24:02:76:db:83:9b:a2:ab:86:c8:de:
                    94:4d:b5:51:7f:ea:c9:64:e5:b5:50:d1:84:a6:82:
                    9f:a7:fe:2a:f8:50:51:52:2a:be:68:d6:a3:9b:df:
                    5d:75:a9:ef:1b:32:f5:1b:21:ad:7b:30:26:3d:58:
                    3c:0a:e3:f4:3c:20:50:23:27:ae:b9:30:f1:26:bf:
                    ce:c1:b7:3b:ef:9f:7e:f6:5b:c9:82:86:8e:75:19:
                    80:36:89:28:2a:c6:c9:0d:6e:0e:e7:72:c7:27:84:
                    51:22:bc:b4:a7:3d:9b:2c:b7:5e:87:1a:0d:48:20:
                    bd:ea:e0:78:4e:0a:b0:04:d7:85:8e:d2:5e:2a:c8:
                    f4:e0:9b:55:be:74:c2:2e:77:e7:c9:0b:d5:fe:d5:
                    c4:b2:5f:13:ed:04:91:0b:aa:b0:c6:81:df:82:0c:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:93:14:86:A6:2B:DF:08:E2:1B:71:19:26:7C:5D:52:93:2F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.136.0/24
                  23.226.139.0/24
                  66.63.175.0/24
                  66.63.180.0/24
                  66.63.187.0/24
                  66.212.18.0/24
                  66.212.24.0/23
                  72.11.153.0/24
                  104.129.23.0/24
                  104.223.65.0/24
                  104.223.114.0/24
                  155.94.213.0/24
                  167.160.164.0/24
                  167.160.169.0/24
                  192.161.185.0/24
                  204.44.69.0/24
                  209.54.107.0/24
                  216.144.225.0-216.144.226.255
                  216.144.229.0/24
                  216.144.231.0/24
                  216.144.233.0/24
                  216.144.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:6f:bc:1c:7c:7b:ad:e2:93:a6:9f:a3:0b:61:54:62:8b:
         75:a7:a3:21:13:68:ba:12:cd:d2:19:4b:80:aa:8a:4d:95:39:
         5f:56:9b:a5:62:e8:79:d9:3b:b3:6a:e8:2f:6c:12:74:2d:13:
         9c:48:ac:cc:40:c8:68:7f:61:47:4f:29:ca:a6:0f:b5:45:c2:
         fc:c9:38:fc:e2:58:67:65:56:31:58:ac:73:0b:bc:3c:c8:71:
         13:40:fe:f7:b7:96:8f:ee:2b:eb:68:04:08:bc:37:3c:52:6c:
         d2:88:b8:66:db:24:7c:33:ac:07:58:6c:45:ad:eb:7f:4f:72:
         19:18:6f:10:fd:7e:89:4f:1d:25:f0:87:aa:20:3d:0b:19:77:
         0c:6f:fd:d1:69:cb:ed:d4:aa:91:d9:c2:f9:c9:20:e9:bf:de:
         73:a3:b4:7f:bb:f1:ed:82:4c:ca:3f:b5:91:6f:fb:24:96:c5:
         01:47:c5:46:03:ad:37:e6:37:2a:38:0a:bc:d9:00:67:d5:6e:
         d3:9a:0c:b8:bf:8c:c0:f8:ce:22:5a:bb:96:11:0f:fc:98:31:
         74:7b:eb:10:4f:7b:7c:fe:f8:11:5f:62:48:e0:3c:4e:55:99:
         b7:95:dc:89:c5:cf:d1:f5:eb:4e:f3:4c:ae:ab:30:66:0f:2b:
         8b:0d:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:17:13 2024 by rpki-client on console-ams.rpki-client.org