Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
File:                     9ab84c57-3305-30ff-b583-4bb0023c64b2.roa (raw, json)
Hash identifier:          ThjXQvl1WTORkcrV/GkuKB8gN5w+rsmXItl7lLlEMz4=
Subject key identifier:   C4:F2:4F:24:F4:AA:6C:19:08:78:77:66:47:DD:57:12:FE:05:12:8A
Certificate issuer:       /CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
Certificate serial:       010D0C9F432858457A48797D18F307507C2D4000
Authority key identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     53949
IP address blocks:        192.119.134.0/24 maxlen: 24
                          198.98.208.0/20 maxlen: 24
                          173.225.144.0/20 maxlen: 24
                          206.198.204.0/22 maxlen: 24
                          162.213.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:79:7d:18:f3:07:50:7c:2d:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=417e9332-2f88-4cc0-ac98-031f5caf8532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:9f:50:7f:52:6b:33:cf:cd:85:ab:ab:c5:
                    06:33:31:7c:dc:95:af:7b:10:1b:0e:ea:aa:09:fd:
                    3c:58:4e:e0:d0:57:9c:7b:d2:38:40:f3:de:80:39:
                    02:33:41:f8:1e:b0:66:c9:f8:d8:7d:e9:3b:8d:04:
                    8c:de:9a:b5:6d:c5:49:1b:80:cb:67:7e:a0:4b:7f:
                    6b:a6:c3:34:14:a4:07:c1:db:e8:0b:da:f6:bc:26:
                    db:89:95:3e:5d:a1:29:df:5e:2e:8f:ca:e6:58:bd:
                    6b:b7:4b:5b:dc:50:2d:ef:da:d2:1f:c1:ca:57:19:
                    88:60:f3:a8:ac:98:dd:e9:e4:0b:af:1d:54:f3:fc:
                    10:05:7f:b0:d6:2f:e2:11:3b:ac:2f:d2:07:f6:79:
                    b1:a8:99:9e:29:4a:e8:74:90:b7:2a:fa:e9:a8:a0:
                    17:2a:84:07:1c:1e:ec:f3:25:d9:3a:ff:d5:f4:a9:
                    f0:e1:22:3c:3b:10:1e:a6:f1:a8:5d:2e:0b:31:2b:
                    ea:db:38:16:ae:24:8a:30:a4:df:ec:a1:51:f9:28:
                    f8:79:05:07:f1:ab:a7:46:71:c9:63:70:83:50:45:
                    49:ce:d0:c4:f8:96:65:84:85:ae:37:83:89:94:61:
                    3b:8f:b7:db:51:a5:8a:22:a7:cc:1f:99:e7:3e:e6:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F2:4F:24:F4:AA:6C:19:08:78:77:66:47:DD:57:12:FE:05:12:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl

            X509v3 Authority Key Identifier:
                keyid:68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.172.0/22
                  173.225.144.0/20
                  192.119.134.0/24
                  198.98.208.0/20
                  206.198.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:80:17:4b:61:04:2f:42:27:b9:96:de:3b:ef:4f:09:88:4f:
         a9:9f:5f:57:01:c8:00:72:04:1d:64:56:27:f0:1c:31:1e:2b:
         bf:aa:6b:ec:97:6f:09:e7:a3:4d:84:e3:2c:b3:ca:23:ec:f7:
         a7:f6:41:1a:b8:60:a9:9a:54:b1:4b:b0:c3:39:94:9f:4e:a0:
         f7:c7:42:17:81:9b:48:23:ce:38:09:b2:80:29:9b:fe:3a:dd:
         14:f1:e8:ae:44:db:3d:69:92:71:3a:00:99:a9:bb:47:fd:01:
         d3:49:3d:80:fa:53:1f:4d:da:55:bd:49:1d:7a:45:4b:c5:80:
         94:1f:5f:7c:29:09:df:79:b7:bc:29:ed:ec:da:af:8b:c1:41:
         c0:b9:fc:33:f0:50:f4:8f:17:97:6c:62:1a:b8:86:5c:c3:ff:
         7c:1e:fe:4b:36:9f:d6:30:d9:e6:73:34:3f:fb:8f:75:03:e7:
         f8:3e:13:3a:80:56:48:b3:45:5a:41:87:7d:76:75:26:62:b5:
         34:ea:87:59:04:c2:81:cf:43:ac:a1:fb:f5:77:42:b1:75:b1:
         5b:e5:a5:e3:8d:7f:55:b6:65:17:be:7c:0d:5f:71:48:52:a0:
         19:0e:67:9a:11:51:f6:68:58:2c:c6:0a:e8:ea:3a:ff:81:f2:
         d9:6e:0e:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:49 2024 by rpki-client on console-fra.rpki-client.org