Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
File:                     f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (raw, json)
Hash identifier:          jD+Qphf8qMYV/BzWUDE04ZTaTmCNS23H5SpFlmfnMck=
Subject key identifier:   36:21:1A:40:B1:B7:D8:53:08:CB:45:5D:A7:C7:BC:C4:10:56:60:E3
Certificate issuer:       /CN=de111c10-2de5-41fa-a9e4-1e49a0479199
Certificate serial:       010D0C9F43285845068AC47789EC536FD2E7AA80
Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     26793
IP address blocks:        69.5.128.0/19 maxlen: 24
                          162.216.76.0/22 maxlen: 24
                          173.240.192.0/20 maxlen: 24
                          205.237.160.0/19 maxlen: 24
                          206.127.176.0/20 maxlen: 24
                          2604:2800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c4:77:89:ec:53:6f:d2:e7:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=3b7d10f4-abf4-43cd-87fe-5900b1ecfbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:38:80:be:2f:60:9a:7d:b1:4e:1e:45:3a:
                    eb:0e:92:bd:ef:2e:40:33:4c:f0:b4:c1:6e:a3:a5:
                    25:a3:0a:c0:8a:c3:a6:7a:f7:f8:d1:b2:f2:14:ea:
                    b8:05:67:46:7b:01:98:5e:da:fc:a4:c3:15:9e:ae:
                    5d:3c:0f:9f:7f:a2:6b:15:57:1c:17:23:d8:f0:e7:
                    1e:c9:dc:80:f4:23:75:d3:29:61:84:e2:3b:62:32:
                    ca:dd:a0:8e:41:fc:12:1f:81:bc:59:15:ed:1a:63:
                    3a:15:89:34:02:26:a1:ba:4f:cf:b1:55:ae:f1:b4:
                    a0:6d:03:1b:ff:e4:9e:6d:2d:ec:ab:e8:06:8a:36:
                    3e:ed:e6:88:9a:6a:2e:4c:fe:2d:43:9e:45:2e:5e:
                    da:23:9d:af:c5:be:1c:a1:c1:1a:01:64:8d:db:a1:
                    c9:38:bf:b4:93:64:19:24:95:35:f9:0c:84:97:70:
                    46:ea:13:2c:9a:7c:d9:ab:7a:2d:a9:78:69:45:c8:
                    52:81:24:5e:48:84:53:86:e7:35:15:8b:f4:82:75:
                    66:df:0e:da:47:48:a6:a0:02:6c:29:46:71:47:44:
                    b2:1a:ba:e2:3b:59:0f:0a:c6:40:41:ef:7e:33:97:
                    51:71:5f:38:fc:7f:e4:3a:91:99:ce:f4:c1:0f:5a:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:21:1A:40:B1:B7:D8:53:08:CB:45:5D:A7:C7:BC:C4:10:56:60:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl

            X509v3 Authority Key Identifier:
                keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.5.128.0/19
                  162.216.76.0/22
                  173.240.192.0/20
                  205.237.160.0/19
                  206.127.176.0/20
                IPv6:
                  2604:2800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:74:f6:5d:2f:31:1b:eb:9d:95:cf:ec:71:07:11:b0:3f:ff:
         c4:74:f6:9e:4b:94:7c:b6:4a:a4:8e:0f:00:11:fa:f3:b9:8c:
         c5:7a:e4:1b:eb:08:20:c3:10:df:32:38:7d:15:69:6a:fd:d5:
         9d:a0:34:0c:fe:74:5d:a5:52:5a:6d:cb:5d:91:f7:da:b9:7c:
         20:24:d1:67:ae:85:4a:bd:a2:94:21:b0:d0:3f:e0:86:c4:d9:
         44:26:9e:12:a8:5c:47:5c:dd:7e:8a:e5:19:2c:59:29:8d:4b:
         00:80:b1:ba:9c:2c:fc:e1:a5:34:a5:69:23:0e:52:7e:99:87:
         d9:95:b4:c8:98:65:ef:be:71:d9:24:96:81:aa:db:e0:86:2d:
         7d:c6:3a:6e:03:0e:b2:f4:42:88:7a:3c:80:78:b5:a3:8d:de:
         4d:d5:64:d8:7d:90:80:74:60:3a:2d:31:59:73:62:af:8e:b9:
         f3:8c:81:bd:e7:67:96:fe:a3:ef:fc:78:6b:3b:74:d3:f3:24:
         7f:f0:91:9a:97:07:f1:d0:14:88:34:49:51:a6:2a:7f:7b:bc:
         22:11:e7:44:ad:ee:56:8d:89:19:ed:5a:0a:95:81:19:fd:c9:
         e1:0d:f6:48:00:bc:26:e8:f3:71:38:67:62:8e:81:d1:38:2a:
         4f:0c:68:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:04:44 2024 by rpki-client on console-ams.rpki-client.org