Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
File:                     d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa (raw, json)
Hash identifier:          vpfNyT+RE9eCFFiUPJgt6Cq0VS1wSCVqN5b1b9rflrY=
Subject key identifier:   C6:98:B9:E6:8F:C8:E4:A7:EC:C8:46:9E:42:87:4C:B2:DC:A3:F7:D1
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F432858451B7AED063ED23F366EC75F00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     36007
IP address blocks:        104.128.65.0/24 maxlen: 24
                          104.238.214.0/24 maxlen: 24
                          78.138.0.0/24 maxlen: 24
                          52.144.45.0/24 maxlen: 24
                          83.229.67.0/24 maxlen: 24
                          52.144.46.0/24 maxlen: 24
                          138.128.240.0/24 maxlen: 24
                          52.144.47.0/24 maxlen: 24
                          104.128.64.0/24 maxlen: 24
                          78.138.31.0/24 maxlen: 24
                          195.88.56.0/24 maxlen: 24
                          147.185.238.0/24 maxlen: 24
                          147.185.239.0/24 maxlen: 24
                          138.128.241.0/24 maxlen: 24
                          138.128.247.0/24 maxlen: 24
                          103.90.161.0/24 maxlen: 24
                          199.244.48.0/24 maxlen: 24
                          199.244.49.0/24 maxlen: 24
                          199.19.73.0/24 maxlen: 24
                          103.90.160.0/24 maxlen: 24
                          195.88.24.0/24 maxlen: 24
                          195.88.25.0/24 maxlen: 24
                          194.113.211.0/24 maxlen: 24
                          194.113.195.0/24 maxlen: 24
                          194.113.210.0/24 maxlen: 24
                          199.19.75.0/24 maxlen: 24
                          199.19.72.0/24 maxlen: 24
                          104.238.215.0/24 maxlen: 24
                          83.229.3.0/24 maxlen: 24
                          83.229.39.0/24 maxlen: 24
                          83.229.112.0/24 maxlen: 24
                          83.229.115.0/24 maxlen: 24
                          103.54.57.0/24 maxlen: 24
                          103.54.58.0/24 maxlen: 24
                          103.89.12.0/24 maxlen: 24
                          103.89.13.0/24 maxlen: 24
                          195.88.57.0/24 maxlen: 24
                          194.113.194.0/24 maxlen: 24
                          198.22.162.0/24 maxlen: 24
                          103.90.162.0/24 maxlen: 24
                          103.90.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:ed:06:3e:d2:3f:36:6e:c7:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=65109b3b-c3f7-457c-9133-976e675996c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:54:62:7b:f5:e1:a5:2f:36:1b:fd:93:de:
                    25:fd:57:09:90:0d:bb:1b:91:a7:c3:7f:fe:22:ae:
                    bd:c3:b9:0d:f8:5f:ef:0f:18:12:21:b9:09:e2:7c:
                    51:c1:de:38:de:24:2c:a4:26:11:ff:63:39:28:69:
                    de:4f:0e:96:01:be:e4:7c:ac:8d:cf:d8:01:05:dd:
                    ac:1a:13:a7:da:bb:de:25:1a:4c:b4:14:14:45:ad:
                    49:30:b7:da:aa:55:c8:27:f3:3f:82:07:32:42:3c:
                    3e:e0:91:50:2d:90:79:9e:60:a9:61:ee:b3:ec:cd:
                    8c:99:a1:38:43:17:01:a9:04:34:ee:6c:b3:d2:64:
                    06:5d:5c:0a:62:dc:25:fa:4f:09:1e:63:82:d2:f3:
                    ea:cd:11:ed:28:5f:1c:34:76:e8:9a:65:ca:64:0a:
                    3f:fd:b0:07:22:63:e5:28:d9:71:17:82:ef:61:4d:
                    90:f0:24:b7:82:0c:69:05:0b:e0:f6:af:a5:e7:13:
                    bf:c8:11:1b:ca:83:e9:8d:d6:4b:95:4e:58:1c:f1:
                    70:56:f2:a1:54:08:b2:d7:af:33:76:99:cb:b9:0c:
                    82:4b:62:51:4e:9a:52:dd:6c:16:2e:dc:bb:67:92:
                    69:84:58:fa:a4:de:f7:51:e1:7e:30:b4:66:a5:e6:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:B9:E6:8F:C8:E4:A7:EC:C8:46:9E:42:87:4C:B2:DC:A3:F7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.45.0-52.144.47.255
                  78.138.0.0/24
                  78.138.31.0/24
                  83.229.3.0/24
                  83.229.39.0/24
                  83.229.67.0/24
                  83.229.112.0/24
                  83.229.115.0/24
                  103.54.57.0-103.54.58.255
                  103.89.12.0/23
                  103.90.160.0/22
                  104.128.64.0/23
                  104.238.214.0/23
                  138.128.240.0/23
                  138.128.247.0/24
                  147.185.238.0/23
                  194.113.194.0/23
                  194.113.210.0/23
                  195.88.24.0/23
                  195.88.56.0/23
                  198.22.162.0/24
                  199.19.72.0/23
                  199.19.75.0/24
                  199.244.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:75:f5:e3:f3:9a:6a:f5:bb:17:9a:45:98:de:72:4a:22:ee:
         dc:bf:08:00:2d:09:f1:1d:a4:0f:f6:46:2b:bc:14:63:2e:89:
         fe:b7:90:37:f5:75:f5:0d:ef:71:9d:7c:87:5e:99:86:ad:95:
         60:bb:03:b6:59:fb:e7:bd:61:1a:51:57:af:ce:33:ba:76:ae:
         a5:ff:c1:2c:c6:fe:9b:83:2e:ad:43:5b:25:f6:08:3b:5b:f8:
         02:fa:1d:80:fb:42:1a:19:91:e4:37:20:da:2f:d3:e1:7e:8a:
         84:77:a8:ea:f8:59:7e:24:58:24:48:fb:d0:36:2d:c4:17:66:
         ff:ec:e7:5f:ab:bf:25:c7:b9:dc:73:02:d8:7f:f0:93:b8:4a:
         5d:dc:48:f9:22:ce:91:48:bc:60:d9:7c:06:d5:4d:ed:64:b0:
         da:6a:c8:f6:aa:43:4b:9e:11:33:ba:a7:0c:b7:da:a9:b8:cd:
         e8:27:bd:22:80:42:40:37:04:58:d2:01:6f:d8:29:35:07:d3:
         2a:c0:3a:c2:93:44:96:9e:9b:d5:25:a4:89:66:19:33:77:ad:
         be:4d:e5:91:7c:d0:97:90:f9:1c:b3:ed:a1:35:fb:92:8c:57:
         d9:ae:b2:4d:ae:b8:6d:8d:36:90:51:29:ac:2a:ce:71:16:a1:
         3e:11:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:49:18 2024 by rpki-client on console-ams.rpki-client.org