Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa
File:                     df871738-5e35-3002-9112-c507cc9ddafc.roa (raw, json)
Hash identifier:          Pk+JBY1ICVIBbQLsdUzWTP/QhBKciybdrnTQjQIdjCw=
Subject key identifier:   D5:80:2D:1D:AC:98:A7:AD:C8:CE:27:52:8E:DC:4D:E5:E5:1E:5E:B0
Certificate issuer:       /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Certificate serial:       010D0C9F43285845280AF732236C042343CC2720
Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     17326
IP address blocks:        138.129.219.0/24 maxlen: 24
                          138.129.217.0/24 maxlen: 24
                          138.129.64.0/18 maxlen: 18
                          138.129.16.0/22 maxlen: 22
                          138.129.128.0/17 maxlen: 17
                          138.129.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f7:32:23:6c:04:23:43:cc:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=26069748-6d69-4606-abe3-1c4734575981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:35:15:02:2e:8b:31:fc:a4:2e:6f:6e:81:d2:
                    65:9b:99:74:6f:ea:0c:ab:18:e5:2e:9d:fa:94:a1:
                    d5:5e:4f:49:e9:6f:f7:9f:50:1b:df:bb:eb:41:ce:
                    10:bd:c6:dd:9c:ee:6f:19:5e:7c:7b:a8:1b:82:8a:
                    64:7d:68:81:dc:35:2a:cd:fc:ae:6d:6d:a7:2d:64:
                    73:bd:48:e2:d6:e8:74:e7:34:7d:18:e7:73:32:29:
                    24:68:ca:15:0e:bc:fd:d7:40:cb:a7:c2:a5:f3:a2:
                    43:db:40:9c:74:34:06:b1:79:30:9d:de:9c:63:6d:
                    51:06:a4:ad:e0:37:f2:0e:1f:f0:c2:f4:fa:62:12:
                    5c:f1:88:b6:b2:b3:60:b0:b6:18:43:d4:9a:3b:e4:
                    43:af:7d:d3:95:21:69:24:ee:b9:2c:52:fb:6d:bf:
                    fc:05:24:4e:e5:8b:3a:e8:2d:59:bc:d9:58:cd:ad:
                    66:08:2b:63:1d:9d:e7:c9:1f:89:f7:f8:f2:f8:e3:
                    10:c4:f7:cd:9c:d3:cd:2e:5e:51:50:d5:b9:aa:2f:
                    d2:61:6c:e3:23:d2:fe:4e:1b:87:d0:33:9c:3c:f0:
                    a8:d6:f5:5a:2f:08:23:de:98:f7:48:25:5a:43:44:
                    21:e0:5a:c9:48:00:5d:f2:d2:97:16:8d:33:ff:bc:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:80:2D:1D:AC:98:A7:AD:C8:CE:27:52:8E:DC:4D:E5:E5:1E:5E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl

            X509v3 Authority Key Identifier:
                keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.129.16.0/22
                  138.129.64.0-138.129.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:a6:ca:cc:6e:94:06:38:1b:63:62:c7:03:31:2c:9c:f2:
         b8:70:3d:0b:c2:71:6f:7d:97:2b:d6:0c:93:eb:bc:f3:72:20:
         2f:60:e0:a3:85:dc:87:3b:85:4d:ba:97:aa:d5:6d:54:25:7e:
         51:74:c6:61:2e:f9:6e:f7:e1:dc:c7:70:36:db:78:24:94:72:
         cc:59:27:2c:76:1b:2d:7b:ac:e6:5c:54:cd:57:3d:7e:eb:71:
         87:b1:08:a4:77:3d:35:a0:e4:1f:87:37:f1:37:3b:08:6c:3e:
         78:0e:b6:3f:46:5b:71:12:f1:ae:3b:38:75:65:e0:e5:24:c6:
         e9:2b:d2:2b:41:79:0b:09:15:ea:a1:69:1e:73:cb:d0:46:60:
         70:11:8c:14:fd:d4:04:9e:26:3e:0e:d3:f3:71:fb:5e:a4:41:
         74:42:e4:6a:da:8c:e4:2c:d5:13:9a:dc:bd:6e:bf:84:26:fe:
         86:c5:55:69:52:6e:56:fa:76:f2:41:ff:59:d3:7c:81:13:de:
         e0:2a:03:80:77:90:a5:db:7b:0d:65:ba:ed:a8:7f:af:ab:05:
         8f:28:30:e0:d6:61:5a:92:9d:37:af:c1:cc:56:48:4f:81:56:
         b6:85:6e:16:4a:01:e2:95:9a:f1:0d:4a:f0:2a:ad:5b:78:83:
         fb:9d:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org