Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/d4e3f9f0-1991-3e3c-9f48-7f5ece4a8b7f.roa
File:                     d4e3f9f0-1991-3e3c-9f48-7f5ece4a8b7f.roa (raw, json)
Hash identifier:          7Mga9sVXFpmrWU59JUf54QMx6A6SJNYFekmeciamY0A=
Subject key identifier:   78:B1:94:34:9B:C5:55:7D:0C:53:B0:E2:33:69:B7:CD:7E:FF:0C:B6
Certificate issuer:       /CN=81265180-e7c6-4999-acdf-f522ab2a4a0b
Certificate serial:       010D0C9F432858458F388118B2375789D957B300
Authority key identifier: 09:32:D0:B5:C9:83:B7:0B:3E:C7:14:16:C2:46:07:98:70:D2:2E:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/d4e3f9f0-1991-3e3c-9f48-7f5ece4a8b7f.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     27632
IP address blocks:        199.181.220.0/24 maxlen: 24
                          198.140.189.0/24 maxlen: 24
                          146.88.150.0/23 maxlen: 24
                          2607:2bc0::/32 maxlen: 48
                          2620:126:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/81265180-e7c6-4999-acdf-f522ab2a4a0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/81265180-e7c6-4999-acdf-f522ab2a4a0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:81:18:b2:37:57:89:d9:57:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81265180-e7c6-4999-acdf-f522ab2a4a0b
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=6f0c8941-052f-4a63-b1c1-2a5fe30c44cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:98:1a:b7:df:c4:0d:6a:94:6e:3d:0b:9d:
                    68:76:2f:42:88:9e:82:db:5d:88:50:6e:2e:bd:fc:
                    fe:9c:b1:f4:1c:44:24:d4:5e:5f:5b:d0:6e:cf:60:
                    85:10:a1:16:d7:1d:01:05:31:19:0b:a2:fc:ba:4d:
                    3c:19:27:cc:ab:b6:ea:fa:10:ac:fa:da:0b:cd:0b:
                    7a:7a:88:b1:2a:55:44:d2:54:1a:c2:cc:32:f8:59:
                    0a:17:55:fa:38:71:8e:03:17:7d:82:89:15:95:b1:
                    b3:6f:e7:8c:77:a1:ed:79:fc:eb:1a:1e:45:26:14:
                    19:98:e7:6a:5d:83:b4:78:bf:09:08:5f:b4:21:a3:
                    2f:a3:f2:d3:c0:3e:7f:d0:9b:b0:8a:33:0a:bf:0f:
                    3b:55:18:1f:55:40:32:85:cf:5f:25:3b:37:93:97:
                    18:59:2d:8c:b8:38:31:34:d3:c9:19:e6:32:64:0d:
                    d1:ab:13:70:71:54:d6:00:35:a4:df:ad:47:48:60:
                    c2:ac:6d:95:5c:4e:8f:9e:00:51:21:b1:76:cc:32:
                    ba:f3:5a:1b:2c:88:f9:e1:d4:fe:8f:3f:03:00:b0:
                    49:e8:18:fc:70:f5:8f:49:0b:e6:32:63:ad:1d:99:
                    db:ab:79:5e:9b:5f:7f:1b:35:6d:59:e6:08:b5:bf:
                    09:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B1:94:34:9B:C5:55:7D:0C:53:B0:E2:33:69:B7:CD:7E:FF:0C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/d4e3f9f0-1991-3e3c-9f48-7f5ece4a8b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/81265180-e7c6-4999-acdf-f522ab2a4a0b.crl

            X509v3 Authority Key Identifier:
                keyid:09:32:D0:B5:C9:83:B7:0B:3E:C7:14:16:C2:46:07:98:70:D2:2E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.150.0/23
                  198.140.189.0/24
                  199.181.220.0/24
                IPv6:
                  2607:2bc0::/32
                  2620:126:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:af:dd:d9:62:af:ec:ff:bf:a0:93:9f:63:2c:7a:5d:8c:
         9a:3a:65:f7:42:3c:5f:83:8c:fe:14:a1:92:06:06:7b:df:f8:
         ad:9c:f7:75:6d:68:72:a6:5f:62:6d:26:25:b7:41:b1:27:4b:
         6e:4b:95:58:41:41:36:c8:81:f5:1e:03:6f:35:61:11:2d:05:
         40:a8:40:ef:0f:3d:89:5b:43:17:27:15:f6:91:0f:bb:63:81:
         78:c8:dc:8b:73:ef:94:a3:78:72:7c:c1:0e:ee:db:55:7a:7f:
         0c:62:87:37:36:83:7d:b7:9f:b3:63:d3:6f:ae:e4:90:ac:3e:
         69:c4:cc:9d:85:b6:7c:11:c4:a9:e2:a5:75:79:e0:65:9d:77:
         05:4c:da:1b:ca:f2:7f:77:51:0f:ab:08:e9:e7:df:f0:40:52:
         ee:16:dc:bc:ca:c8:51:16:ba:20:45:51:0b:16:7b:ae:6c:a7:
         0a:17:70:34:c1:36:91:4b:69:55:95:db:6a:e5:e7:13:7d:10:
         a1:a8:46:6d:c2:72:ca:fa:6f:d0:0c:ed:9a:b4:45:2c:14:da:
         09:2a:75:74:74:c8:e2:5e:3e:a5:36:59:5d:3e:ec:b7:e9:4c:
         c1:be:8d:e3:f6:40:60:4c:59:85:a6:cb:f9:6b:0d:03:43:9e:
         b6:35:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:45 2024 by rpki-client on console-fra.rpki-client.org