Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
File:                     63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa (raw, json)
Hash identifier:          oVD7OvcSrWrdC4GElG4QVzdaW9+Zt9pnHT9WMtB9p5U=
Subject key identifier:   72:2A:1B:FE:36:65:BD:BD:08:33:F3:C5:E3:5B:DA:D3:36:B8:7A:3A
Certificate issuer:       /CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Certificate serial:       010D0C9F432858451A158DE6E905EBA356B92200
Authority key identifier: 47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     19935
IP address blocks:        173.224.247.0/24 maxlen: 24
                          173.224.240.0/24 maxlen: 24
                          173.224.254.0/24 maxlen: 24
                          173.224.241.0/24 maxlen: 24
                          173.224.255.0/24 maxlen: 24
                          208.52.144.0/24 maxlen: 24
                          159.112.233.0/24 maxlen: 24
                          205.178.191.0/24 maxlen: 24
                          173.224.242.0/24 maxlen: 24
                          208.103.184.0/24 maxlen: 24
                          173.224.251.0/24 maxlen: 24
                          173.224.244.0/24 maxlen: 24
                          173.224.252.0/24 maxlen: 24
                          173.224.253.0/24 maxlen: 24
                          173.224.243.0/24 maxlen: 24
                          173.224.249.0/24 maxlen: 24
                          173.224.246.0/24 maxlen: 24
                          173.224.250.0/24 maxlen: 24
                          173.224.248.0/24 maxlen: 24
                          173.224.245.0/24 maxlen: 24
                          173.224.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8d:e6:e9:05:eb:a3:56:b9:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=1b16d2b7-47d9-4855-bf9c-40a42fccc4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d8:2b:bb:1a:75:2b:85:c4:d1:34:f0:b7:93:
                    0d:15:91:db:77:a0:6a:07:3b:35:2c:12:ca:38:88:
                    6f:28:1a:56:f1:73:3d:e1:84:ea:9e:f4:d5:34:a9:
                    f9:18:72:35:56:ab:ea:5a:cc:57:77:ba:67:9e:87:
                    48:59:2d:5b:7c:8d:9a:cd:11:aa:e9:c7:e9:47:82:
                    3f:57:df:00:33:77:29:b8:04:44:73:f0:22:80:7f:
                    d3:49:b8:88:b8:5b:cf:37:8f:93:a9:4c:bd:be:70:
                    34:15:48:57:ba:27:34:17:8c:09:cf:a6:7d:f7:b8:
                    19:a6:6b:c4:33:da:32:1c:f8:97:39:b1:00:c1:16:
                    f0:0c:66:a9:5c:18:09:0f:04:a5:f7:50:9c:bb:bc:
                    28:6d:4d:09:1d:7c:6d:c5:6d:21:c3:23:58:f0:a9:
                    f8:e2:98:a4:10:01:74:a9:03:3a:73:73:bf:7f:e2:
                    92:88:94:7c:c3:f2:62:9e:24:62:b4:76:59:88:e0:
                    7f:08:33:b4:8b:9f:1f:14:27:fa:e4:fc:21:48:0c:
                    6b:e5:d9:82:d3:0f:3e:21:a6:4f:1b:c0:a4:b2:23:
                    5e:89:97:94:37:9d:38:a5:e1:51:c7:cf:19:85:39:
                    7e:42:16:0b:df:f5:7c:15:07:d8:9a:dd:3e:72:ad:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2A:1B:FE:36:65:BD:BD:08:33:F3:C5:E3:5B:DA:D3:36:B8:7A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl

            X509v3 Authority Key Identifier:
                keyid:47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.233.0/24
                  173.224.240.0/20
                  205.178.191.0/24
                  208.52.144.0/24
                  208.103.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:8a:d6:25:e9:c5:73:cc:41:90:43:f0:69:4b:bf:8a:4c:
         06:be:39:57:6b:a9:7c:74:36:8b:a8:0d:1e:69:01:65:56:db:
         c4:72:e0:f9:0a:e3:bf:ba:aa:6e:61:65:16:39:70:71:1e:f3:
         ed:9d:5f:54:51:37:38:98:88:bc:0c:30:c7:dd:19:84:7d:25:
         4c:31:cf:1c:77:db:f1:8d:1b:84:3a:be:41:71:96:0a:f8:af:
         75:1a:95:59:63:7f:df:82:49:2e:bd:9d:2d:d1:37:43:83:55:
         f4:69:37:97:38:f4:b0:00:27:c6:33:90:a7:db:9f:f2:13:8e:
         eb:b0:6b:d1:6e:9d:84:5c:4a:cd:03:86:ff:37:c1:9f:a5:ef:
         00:82:22:b2:41:63:d9:1c:a8:3c:b7:11:ee:f7:fc:9d:68:59:
         00:19:8f:5e:dc:76:4a:22:23:e0:c4:f5:79:08:89:1f:54:0c:
         36:80:62:41:43:f5:fa:5d:79:08:38:af:8b:64:01:fe:80:8d:
         88:26:f2:d9:95:f1:6a:41:96:99:d9:ef:95:23:be:98:dd:92:
         73:3b:16:1e:58:22:69:aa:04:1c:4d:21:8f:08:bc:ac:6e:19:
         6f:57:75:b4:6b:2a:8d:71:ed:7a:6e:4c:52:d6:28:55:9f:41:
         78:e8:31:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:09 2024 by rpki-client on console-fra.rpki-client.org