Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d5d3d74-7820-382b-ad3f-68875bccb85d.roa
File:                     1d5d3d74-7820-382b-ad3f-68875bccb85d.roa (raw, json)
Hash identifier:          +dm3bonRzz0VsbGo50veRUHMagnYyIRjnnU9qhC63Nk=
Subject key identifier:   12:B9:92:FF:C7:F0:24:B3:C7:BA:EA:32:31:53:65:17:A9:8D:EE:5F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456C5312CAFF7486E63BEDAD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d5d3d74-7820-382b-ad3f-68875bccb85d.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     32787
IP address blocks:        209.200.156.0/24 maxlen: 24
                          23.57.98.0/24 maxlen: 24
                          23.45.88.0/24 maxlen: 24
                          23.40.104.0/24 maxlen: 24
                          23.32.180.0/24 maxlen: 24
                          23.57.102.0/24 maxlen: 24
                          72.52.3.0/24 maxlen: 24
                          69.192.6.0/24 maxlen: 24
                          2606:6c00:7::/48 maxlen: 48
                          2606:6c00:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:12:ca:ff:74:86:e6:3b:ed:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=3d36e4e8-d950-45d3-802c-84a10e994523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:a2:7b:e0:24:2c:13:72:95:46:3e:06:90:
                    fc:7a:fa:0d:55:55:4b:67:e2:9f:44:7f:47:a4:d0:
                    2e:44:7f:a6:ef:26:fa:1e:58:bd:9a:0a:ef:cd:fb:
                    32:a0:b6:c0:94:91:8a:55:42:28:cc:57:75:91:5c:
                    a2:45:7a:c1:10:b9:56:06:d2:e6:43:62:49:f7:9f:
                    1c:0e:31:d0:cb:a3:b2:78:25:fa:96:0f:70:71:ea:
                    dd:2a:0d:d4:50:ee:8a:da:e3:e8:98:58:72:6e:3b:
                    69:38:ea:58:4e:11:a6:7e:a1:74:ca:7d:b1:ae:bb:
                    bb:9d:7b:4a:ea:75:c9:3c:e2:bb:00:8b:1d:06:da:
                    70:f0:ef:93:91:fa:a0:a9:85:f8:2f:ea:c5:6f:df:
                    48:63:0c:fd:cb:26:2c:86:68:58:65:b7:f5:58:d6:
                    48:e9:21:48:51:4a:ee:83:c5:da:19:54:1b:0e:d5:
                    6a:2b:ea:e6:68:a9:12:ec:95:d5:06:5f:4f:dc:3d:
                    62:fc:c4:7b:4b:75:d7:7b:d6:59:50:e4:f6:d7:e5:
                    26:f1:09:da:3b:c8:14:86:8b:49:f3:81:2f:00:e1:
                    06:64:c7:94:1a:0f:d0:a0:3f:94:60:37:1f:b9:bf:
                    23:19:21:0b:68:17:99:3b:80:85:6c:51:be:bb:22:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B9:92:FF:C7:F0:24:B3:C7:BA:EA:32:31:53:65:17:A9:8D:EE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d5d3d74-7820-382b-ad3f-68875bccb85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.180.0/24
                  23.40.104.0/24
                  23.45.88.0/24
                  23.57.98.0/24
                  23.57.102.0/24
                  69.192.6.0/24
                  72.52.3.0/24
                  209.200.156.0/24
                IPv6:
                  2606:6c00:6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:88:81:c4:14:27:db:60:98:41:89:5c:84:dc:1b:92:50:
         d3:21:c6:c3:6b:a5:ce:17:3a:ac:64:4d:24:33:7a:01:f4:f1:
         5e:a1:38:58:e1:40:d8:c3:d7:03:c3:80:b9:82:8a:5f:b4:e2:
         db:f5:ff:f0:08:dd:9d:6a:84:b8:fe:b6:bb:52:86:57:16:81:
         1f:70:81:eb:16:a0:d3:99:57:5d:9c:b5:d9:ca:b3:31:63:dc:
         d4:4b:93:29:ac:e1:97:70:4c:46:f5:90:f0:ac:78:a1:b9:c8:
         29:6f:f1:3d:e3:da:52:5f:21:aa:ef:eb:38:a3:6e:5a:42:b6:
         93:18:64:a7:8f:e7:36:9c:8e:e9:52:bf:cb:45:4b:39:50:02:
         cf:ce:7e:5c:c7:44:dd:98:19:6e:6b:12:71:b2:5c:8a:95:af:
         ae:d3:94:e5:f3:c7:5a:51:a1:99:f0:8a:d7:6e:a7:eb:08:eb:
         2c:cd:5a:31:29:75:da:b9:bf:dc:f1:50:b4:90:e0:1d:24:15:
         b6:1e:24:8b:53:35:f7:5d:f8:b0:d3:bd:bb:fa:a0:a4:7c:85:
         a3:a1:08:ef:24:62:d0:0c:f3:e7:f3:73:1a:c2:fb:1b:dd:53:
         1b:57:4d:ab:91:86:11:29:80:ae:5d:d5:23:f6:55:8c:eb:6e:
         73:16:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:06 2024 by rpki-client on console-fra.rpki-client.org