Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
File:                     366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa (raw, json)
Hash identifier:          Fb4lrXw7Ma/HD9u9eGyE+3+LpT/A8iLBIkfe/ten3DQ=
Subject key identifier:   7A:30:E9:72:D9:B0:EB:E8:42:80:34:11:FB:5F:06:D2:45:6D:70:76
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F43285844FCC56391C7A34854A8DA2320
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     19844
IP address blocks:        199.102.64.0/22 maxlen: 24
                          198.205.112.0/20 maxlen: 24
                          216.238.144.0/20 maxlen: 24
                          68.67.64.0/20 maxlen: 24
                          2605:d100::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:63:91:c7:a3:48:54:a8:da:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=f60e4c69-0a2a-4b48-aea1-4a97808a148e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:93:1d:23:46:58:ac:ef:5e:e7:cb:4e:bd:
                    bc:a4:3e:f1:9d:14:4a:78:0d:15:6f:dd:c3:01:f4:
                    e6:fd:bf:29:51:92:a4:e5:2b:a7:04:41:9e:82:90:
                    30:66:f3:a2:41:2b:78:42:2a:8a:54:ea:71:a0:84:
                    f0:c1:44:c3:f7:3e:40:69:84:ee:e3:78:5d:c6:d4:
                    e3:0e:8a:77:3a:35:a2:97:01:c4:e0:91:ca:d2:bc:
                    5d:b1:97:28:8a:42:d5:fa:92:44:ba:1a:a6:50:f3:
                    0c:f2:b6:2f:0f:14:3e:6b:0f:02:b9:17:8b:d4:e8:
                    70:69:9f:02:f0:ea:96:22:33:f4:93:e7:9e:09:ed:
                    22:0b:15:2c:56:7e:99:f2:4c:f4:4d:86:a2:e4:70:
                    da:9c:4a:9e:b9:f6:ca:c6:91:54:17:4d:e9:72:17:
                    da:b0:2c:71:55:f6:8d:8d:61:48:1f:8f:02:c9:b3:
                    8c:61:10:5e:31:fe:c7:07:26:8b:3d:95:b1:47:49:
                    b5:4f:25:75:39:2d:08:28:a2:6e:c5:02:c3:50:19:
                    02:af:1b:e2:0b:be:41:c5:06:0d:62:e6:73:2d:e2:
                    9c:b3:6b:23:fa:ee:2e:c0:8f:47:a7:36:cf:ab:47:
                    6b:43:3a:d8:18:78:88:20:a9:7a:79:ff:51:b4:b8:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:30:E9:72:D9:B0:EB:E8:42:80:34:11:FB:5F:06:D2:45:6D:70:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.64.0/20
                  198.205.112.0/20
                  199.102.64.0/22
                  216.238.144.0/20
                IPv6:
                  2605:d100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8e:26:66:16:e6:37:e0:a1:8d:5d:9c:6b:25:4a:37:ef:77:
         f3:ce:ae:ec:97:41:e7:67:af:34:44:e3:55:7e:76:2d:ce:24:
         53:3b:6b:da:a7:03:7f:ae:a3:40:1c:75:cf:69:f3:de:89:a7:
         50:38:c2:46:bf:c7:df:62:ee:ea:8d:16:68:78:7c:fb:69:6d:
         4b:14:c5:73:63:e0:d6:21:85:78:e3:2b:44:14:15:47:46:1e:
         a8:11:9e:cc:5f:9a:ba:ad:57:d7:91:16:dd:03:c6:33:32:64:
         cd:f2:02:2f:fd:11:eb:1e:86:37:cd:38:13:ee:a4:69:4c:67:
         51:4d:b4:cd:c7:96:8c:a1:0a:84:0a:d4:da:0b:49:e2:f6:44:
         29:ed:d2:77:c5:dc:c8:18:e6:7e:db:16:c2:a2:83:2d:c0:66:
         25:4f:59:4d:63:0d:1a:07:6d:a8:f0:51:9e:10:64:f5:7e:99:
         d4:18:a8:5f:d7:e8:cb:05:a4:a2:21:d0:50:d3:00:16:ee:92:
         15:7d:8e:2e:e9:03:69:de:84:5f:24:dd:c3:fd:11:de:d7:fe:
         3d:6a:88:8a:0f:ce:3a:a3:6f:f0:ff:c8:ae:7e:c2:ef:8f:fa:
         79:30:ed:10:bf:4d:d5:78:f0:52:af:e9:1b:f4:f5:1c:82:6b:
         6b:df:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:15:49 2024 by rpki-client on console-ams.rpki-client.org