Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa
File:                     e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa (raw, json)
Hash identifier:          f104EouNr2btEJuFwB87GXvKyB5ZZEAixpWgaaUTACA=
Subject key identifier:   89:86:CA:96:5D:97:71:0A:51:B5:63:AC:85:8A:75:F1:91:A3:8C:A5
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845777DE235A98D9894F7BE4740
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     12129
IP address blocks:        67.214.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e2:35:a9:8d:98:94:f7:be:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=36b5c78a-41cd-4039-9c2a-f196e95547c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:86:49:e2:5d:bf:62:02:16:fb:a9:ce:ae:
                    84:35:51:18:52:ad:1a:e8:e6:01:03:5f:50:98:94:
                    bd:b9:77:2f:94:04:d8:c1:57:1a:98:76:6a:7f:51:
                    c8:18:a7:15:83:30:18:e8:ab:90:1b:48:86:f7:83:
                    66:66:f6:0a:a2:82:2a:7c:bb:cb:0d:af:16:df:b8:
                    e5:02:d2:32:53:e8:81:e5:d5:d1:28:91:92:18:9c:
                    9d:02:6f:c3:57:71:da:72:47:0d:f2:b6:ea:20:5f:
                    f0:4a:1d:7a:0d:d3:1f:13:8a:e6:09:1b:41:72:2d:
                    8a:1d:af:71:9b:2d:14:95:28:2a:d7:46:1a:31:d8:
                    7c:9b:4d:09:da:22:0a:d0:2c:44:82:c4:0b:55:57:
                    59:87:59:0c:58:c7:5d:6b:82:b2:dd:ec:c1:85:dd:
                    27:f9:05:c8:8e:ce:56:31:09:8b:0b:21:77:9b:8c:
                    29:26:9e:6d:e0:f1:9e:f4:d6:5c:9f:f0:10:75:7d:
                    4d:66:f2:c4:01:4e:fb:b1:cb:5e:ea:c0:82:21:bc:
                    5d:08:25:7a:a0:30:54:f1:d4:3d:c0:0a:c6:80:8a:
                    8a:d9:1d:23:a4:eb:0a:0f:ec:20:53:9e:b4:b0:79:
                    6c:e9:48:ef:dd:02:78:2d:58:a4:fc:00:69:70:20:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:CA:96:5D:97:71:0A:51:B5:63:AC:85:8A:75:F1:91:A3:8C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9d038d8-adbc-3ae4-b04f-205dc789af2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:40:46:15:77:db:59:f1:d4:22:5b:2b:9d:d4:b8:93:b7:aa:
         f2:d7:d6:4e:f5:58:df:55:84:b2:3f:13:99:f4:af:00:61:03:
         a9:6a:29:b0:7f:59:0c:ed:88:63:48:49:b2:65:1d:a8:ba:99:
         86:8b:81:34:4d:8e:99:23:30:f6:ec:e6:db:11:64:a7:89:83:
         1b:6d:b7:0c:35:b5:f9:95:61:2d:62:f2:ed:e7:02:77:60:b9:
         fa:42:dd:a7:d5:bb:ad:18:71:94:cc:c5:1b:08:16:7d:4f:c4:
         2f:0c:85:08:fa:7b:a0:77:8a:b2:6e:9b:29:2e:00:8d:bc:56:
         c0:2d:5b:45:e8:54:ef:d6:18:06:e0:8a:95:cd:14:ba:a4:3c:
         8d:36:8a:c5:27:ef:c3:50:1f:a3:30:8a:2e:39:b1:98:cc:c5:
         ec:d6:da:f8:71:93:f0:22:c9:4a:36:64:f0:49:2c:d6:b3:3b:
         14:8c:ea:9e:23:4b:39:5b:51:55:ec:58:64:41:1b:85:e0:32:
         2f:0f:90:28:ab:f9:b2:e3:3f:0b:0c:88:d5:6a:49:c6:f6:51:
         01:47:d6:89:b5:07:c0:63:7a:5a:0f:20:65:36:7b:b1:89:da:
         17:c6:e9:02:d8:a7:9a:73:b2:48:c2:76:da:2e:b0:64:4b:1e:
         59:2a:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:55 2024 by rpki-client on console-fra.rpki-client.org