Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/e85d5f14-5cd8-3090-bfa4-6108f02d6c1e.roa
File:                     e85d5f14-5cd8-3090-bfa4-6108f02d6c1e.roa (raw, json)
Hash identifier:          J6fjEA8Sxf54gqSIN4AZDeq+gq6yHRx4cachps4w51g=
Subject key identifier:   C2:02:FC:9D:6E:8C:62:8E:9B:98:7A:EA:AD:C8:11:EB:8C:DF:C3:73
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F432858450ABAD5ED3F20B6927B47B700
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/e85d5f14-5cd8-3090-bfa4-6108f02d6c1e.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     17048
IP address blocks:        67.220.64.0/19 maxlen: 24
                          68.168.16.0/20 maxlen: 24
                          69.42.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d5:ed:3f:20:b6:92:7b:47:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=587b0358-bb3b-4616-afb7-278e8688fafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:66:8f:eb:db:9a:61:58:07:c3:d4:ae:4c:
                    f4:33:37:d1:18:78:a8:0e:c1:d4:8b:cc:bc:8d:d1:
                    a1:0e:85:8e:81:8e:1f:70:c8:7d:14:e5:97:35:13:
                    28:76:98:a8:7f:c2:ae:90:bf:1a:60:40:15:e2:95:
                    58:f4:06:4a:ad:e8:37:d9:20:24:66:84:7f:15:3b:
                    41:28:f8:b8:2b:b5:06:05:62:02:94:e7:d3:87:12:
                    55:b5:52:d8:6c:ef:97:fc:d7:52:e9:6e:03:65:6a:
                    9b:fc:3b:97:4e:5a:b9:eb:c8:b5:40:ee:b3:c2:11:
                    1c:a6:44:0f:f5:4d:66:71:05:74:51:f8:e5:d4:08:
                    bf:13:85:9a:e6:e7:87:a5:50:8b:e7:25:ad:d5:e0:
                    1b:b5:06:93:a9:04:f3:22:25:9b:32:e8:94:d2:91:
                    00:5e:d1:fd:88:3e:ab:45:3c:82:d8:b5:ef:89:50:
                    47:67:27:07:1d:29:06:83:a0:63:23:64:48:2f:74:
                    7e:db:99:49:12:50:d6:39:b6:66:4a:54:74:b5:e6:
                    cc:d1:2f:27:66:64:52:4d:7e:0b:b8:ef:1b:35:1f:
                    82:8d:02:9b:8f:4e:b1:eb:2c:a2:38:f4:c4:c3:8c:
                    39:a9:1d:8b:03:13:84:01:45:8c:7e:1c:f2:76:54:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:02:FC:9D:6E:8C:62:8E:9B:98:7A:EA:AD:C8:11:EB:8C:DF:C3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/e85d5f14-5cd8-3090-bfa4-6108f02d6c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/19
                  68.168.16.0/20
                  69.42.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:7f:f2:b0:5c:7b:3d:73:5d:55:83:2a:bd:ae:cf:00:91:
         e2:8f:aa:2f:ee:f6:a0:16:bd:80:3f:de:b4:08:9b:0d:08:79:
         4e:84:6a:5e:a2:0e:76:50:5d:3c:e7:08:29:1f:c8:fc:98:f8:
         0f:f1:27:92:d6:d0:f0:17:96:78:c2:22:bf:80:e2:2b:c6:1d:
         a2:b6:5b:ee:e6:6e:0c:b6:38:e2:2d:53:32:79:ec:36:69:43:
         66:5e:70:19:03:89:02:7d:8d:75:14:82:7f:f3:3f:7a:c4:0e:
         da:82:47:df:4d:c5:9d:ad:a8:4f:a4:96:d2:6c:7d:2e:d0:70:
         4e:51:25:5a:6d:e2:1d:97:1f:01:df:ad:01:80:23:4e:c7:a6:
         be:da:11:bb:35:18:60:bc:27:dd:be:10:da:28:18:ae:5c:a3:
         73:5b:82:1e:32:37:6a:e2:97:60:d5:25:59:77:7f:f8:79:16:
         86:d0:92:f4:2b:17:ed:32:ab:e0:1e:a7:28:b4:fb:77:23:f6:
         a4:ea:55:3a:7e:c1:b6:76:96:d3:4c:c3:6d:3e:d0:84:6f:02:
         7d:58:14:28:6e:05:16:5c:9f:ab:e8:4e:7b:00:76:15:aa:1f:
         34:e1:b1:fe:8d:66:af:df:5d:bb:c3:a5:b4:e5:66:01:22:74:
         92:b3:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:25:18 2024 by rpki-client on console-fra.rpki-client.org