Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
File:                     495553e5-6804-3997-88ac-54c613b38c17.roa (raw, json)
Hash identifier:          C+HXIBn2b860tbbz96q9zfyOP33mzSLrraikNnNOCZw=
Subject key identifier:   06:3D:20:56:8F:1B:DB:2E:73:33:54:21:9D:56:2A:01:4E:27:EC:DD
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285845F253EEF690C9B1F52D9D7C80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     6621
IP address blocks:        67.142.176.0/24 maxlen: 24
                          67.142.160.0/19 maxlen: 19
                          67.142.240.0/23 maxlen: 23
                          67.142.224.0/20 maxlen: 20
                          67.142.208.0/20 maxlen: 20
                          67.142.206.0/23 maxlen: 23
                          67.142.202.0/24 maxlen: 24
                          67.142.144.0/21 maxlen: 21
                          67.142.200.0/23 maxlen: 23
                          67.142.112.0/22 maxlen: 22
                          67.142.104.0/22 maxlen: 22
                          67.142.100.0/22 maxlen: 22
                          67.142.0.0/19 maxlen: 19
                          67.142.108.0/22 maxlen: 22
                          67.142.124.0/22 maxlen: 22
                          67.142.116.0/22 maxlen: 22
                          67.142.248.0/23 maxlen: 23
                          67.142.244.0/22 maxlen: 22
                          67.142.242.0/24 maxlen: 24
                          67.142.160.0/24 maxlen: 24
                          67.142.158.0/23 maxlen: 23
                          67.142.157.0/24 maxlen: 24
                          67.142.250.0/24 maxlen: 24
                          67.142.152.0/22 maxlen: 22
                          67.142.128.0/20 maxlen: 20
                          67.142.120.0/22 maxlen: 22
                          67.142.252.0/22 maxlen: 22
                          67.142.196.0/22 maxlen: 22
                          67.142.194.0/23 maxlen: 23
                          67.142.193.0/24 maxlen: 24
                          67.142.189.0/24 maxlen: 24
                          67.142.188.0/24 maxlen: 24
                          67.142.186.0/24 maxlen: 24
                          67.142.185.0/24 maxlen: 24
                          67.142.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:ee:f6:90:c9:b1:f5:2d:9d:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=f43d31dc-a3d0-4bda-979f-3db8b35761c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:e2:4e:93:ab:3f:92:18:81:96:d6:32:cb:
                    09:78:cc:e3:3a:4b:21:58:db:ea:51:d6:87:ba:2f:
                    ef:9c:e8:ad:6d:bb:50:a6:7c:2a:6a:32:1f:4a:b4:
                    ea:c6:2a:8b:e8:8e:c3:5c:60:2a:3f:0c:2a:2c:ea:
                    f2:6a:65:46:e7:b1:e3:7b:bc:7d:4e:09:7a:42:3b:
                    02:34:e7:f9:83:64:a0:c4:e6:c9:09:37:4e:60:13:
                    1b:39:2f:ff:af:e3:62:3d:3c:9e:8f:9e:ed:12:e7:
                    14:ad:0f:16:79:04:f4:a1:e2:b4:48:55:ce:2e:b4:
                    bc:bc:f2:95:24:16:a2:a5:33:e2:8f:7f:da:a5:30:
                    02:8c:2b:86:c3:78:7f:c5:27:5c:a7:c5:4d:37:3b:
                    65:a9:27:bb:fa:21:9c:32:e9:e6:c2:4d:8f:a0:8e:
                    3f:90:da:a7:27:b0:d3:42:89:33:44:78:0a:2e:6f:
                    e2:27:31:54:9d:be:48:a3:2c:ef:9b:af:70:ef:fc:
                    1f:d4:3b:c7:33:49:c4:29:11:ca:ca:49:07:a1:b1:
                    b5:52:10:51:6f:b6:60:9f:41:fd:68:6b:35:1a:52:
                    4c:ac:2c:dc:3f:aa:c3:de:9c:0b:ac:a3:c4:de:f6:
                    0e:f9:7b:d9:6e:30:87:db:e4:19:57:6b:7b:cf:80:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:20:56:8F:1B:DB:2E:73:33:54:21:9D:56:2A:01:4E:27:EC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.142.0.0/19
                  67.142.100.0-67.142.155.255
                  67.142.157.0-67.142.191.255
                  67.142.193.0-67.142.202.255
                  67.142.206.0-67.142.242.255
                  67.142.244.0-67.142.250.255
                  67.142.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:66:f1:d5:04:92:04:af:9a:25:34:c6:0b:aa:b4:01:65:
         d5:ba:87:50:39:db:ab:ab:8b:e4:8c:5e:a3:2e:af:23:be:67:
         85:53:a0:79:02:e3:a7:d7:02:12:46:63:c8:87:7d:59:86:c5:
         94:b1:12:5a:86:62:a0:58:9d:1a:fd:c1:06:4b:f4:1e:27:5a:
         19:3e:32:e1:12:e8:88:86:a2:58:f3:30:85:3c:ef:ed:e0:05:
         9a:bc:12:20:4c:4a:f4:f8:1b:8e:21:6b:b0:d4:a2:60:f6:e5:
         ec:fa:a5:d4:4a:0d:9f:c6:ec:74:c8:14:9a:31:ec:13:f4:45:
         2a:32:97:6e:65:41:c1:24:7f:9d:ec:10:07:bf:64:4a:e4:fe:
         77:0e:23:3d:0a:b9:98:33:42:4f:f5:ce:48:5f:ac:e2:c8:38:
         4d:78:f4:97:f7:14:30:0c:3a:fc:72:5d:57:75:99:b8:ed:24:
         65:10:be:b7:c7:26:37:7f:99:0e:93:f1:ad:2a:7e:2d:1e:51:
         c8:90:ed:a4:c5:58:d1:24:d0:ca:73:43:37:29:31:2c:ae:74:
         1d:5f:b5:a8:f6:d1:7c:06:b5:e4:10:bb:56:1b:b7:4f:46:8e:
         5e:ce:fb:23:5f:ad:19:b8:f0:0d:3f:15:96:92:bf:4b:d6:ab:
         31:03:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:50:28 2024 by rpki-client on console-ams.rpki-client.org