Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa
File:                     84d571f2-66e1-3f12-9230-063e7c81b63a.roa (raw, json)
Hash identifier:          vgk8VAdK2/Dtev2TirR33C2Tj/v7RBLGNqk1IqjkYuE=
Subject key identifier:   70:D7:13:66:DA:89:04:DF:74:C2:24:D1:11:5F:5F:E8:42:F8:0C:23
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845777DE25A81542269CF5E44A0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     12129
IP address blocks:        209.124.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e2:5a:81:54:22:69:cf:5e:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=349d75b8-914e-4124-a92a-4f15c7151dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:de:13:75:1b:0d:a4:9c:14:ba:ff:46:a0:
                    73:b6:0f:65:91:ef:1c:2e:d3:1e:34:25:19:39:74:
                    13:16:65:63:ae:9e:5f:81:7f:09:6d:27:a9:05:b2:
                    05:55:93:4a:60:1e:6d:ec:19:5a:78:a7:82:c3:f8:
                    d4:04:83:65:28:ce:e8:1f:8d:7d:eb:f7:c8:1a:e0:
                    d1:ff:c8:42:5a:f7:2d:32:cb:3f:a3:18:98:0d:38:
                    be:53:f6:66:3f:f3:ff:96:52:68:51:8e:8f:72:33:
                    21:69:04:e6:ef:2a:a0:1e:aa:c3:de:56:ea:e6:e0:
                    43:b0:5c:91:bc:c9:51:9a:11:2e:48:d5:0c:07:ce:
                    40:4c:1c:56:47:ce:ad:c9:36:63:77:85:48:90:1a:
                    a7:bd:72:5e:2b:1d:c8:3d:2d:3a:ee:a9:1f:97:f0:
                    85:d1:89:2e:81:b7:8b:fd:ca:a0:46:76:b9:b2:c2:
                    5d:8b:9b:05:7e:69:f2:09:7e:d1:8a:3f:6d:50:71:
                    50:a3:4d:96:3f:f1:78:45:68:4a:e7:60:f0:e8:22:
                    51:e9:d3:56:24:80:7d:37:2d:18:4a:b8:05:c6:59:
                    71:54:13:83:13:56:73:11:5a:d0:b7:79:33:f7:9e:
                    39:a9:35:1e:0f:0f:54:3e:43:42:6e:cc:e3:95:d8:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:13:66:DA:89:04:DF:74:C2:24:D1:11:5F:5F:E8:42:F8:0C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:76:60:ad:72:e4:62:7b:0a:96:ef:0d:e5:75:2a:a9:67:6f:
         a7:ce:76:c9:b5:50:e8:a8:64:64:46:90:75:15:1f:78:f5:ac:
         b5:c5:77:9e:85:81:3a:55:8c:e0:4f:d8:47:f5:d8:0e:32:9b:
         b7:3b:db:fd:24:a4:26:dd:65:cb:a9:88:37:2d:54:83:84:06:
         94:2f:90:b2:f5:4e:7b:27:cd:17:99:42:25:bd:92:87:57:e6:
         75:6d:e0:1f:52:64:ba:ae:23:f8:1a:c9:c1:19:95:59:a6:03:
         e2:52:98:98:28:c8:f6:38:79:04:70:d5:93:b8:30:79:26:90:
         51:8e:ff:01:03:fc:e6:0d:b4:22:47:ef:71:c8:ca:bc:38:fc:
         76:79:c2:06:26:68:fb:fa:23:01:1d:a6:fc:b4:8f:85:cf:f2:
         4f:45:3b:34:1c:2c:f8:c8:bb:66:f7:1f:ed:03:2d:f4:3a:57:
         52:ea:4d:5d:47:c6:f3:95:38:8b:7e:59:7c:ec:1f:1a:f1:0e:
         2f:dd:9d:13:31:9f:a5:bc:3b:29:83:8c:96:8b:75:12:22:a0:
         46:bf:d3:17:5d:5a:ae:be:80:26:4d:7d:da:a2:93:0e:83:90:
         04:7d:5f:e7:a4:14:01:a8:b0:b9:37:cb:29:a3:21:32:54:b9:
         01:d6:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:59 2024 by rpki-client on console-fra.rpki-client.org