Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/f2b49c45-af8a-311f-8090-946b21cb37aa.roa
File:                     f2b49c45-af8a-311f-8090-946b21cb37aa.roa (raw, json)
Hash identifier:          RjXpAEEqEHtDO+i73E3mCeDRFBXwCxQgqtlrNoUPdw4=
Subject key identifier:   DB:18:A5:47:66:C2:8B:51:A2:68:BE:CD:F9:7A:5C:A0:D7:03:F3:2A
Certificate issuer:       /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
Certificate serial:       010D0C9F4328584561285B52F0E5E470341460C0
Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/f2b49c45-af8a-311f-8090-946b21cb37aa.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     20394
IP address blocks:        69.10.192.0/19 maxlen: 24
                          74.50.192.0/20 maxlen: 24
                          2604:b100::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5b:52:f0:e5:e4:70:34:14:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=196c3697-5700-4b02-ad45-abdda81a2ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:57:e0:e9:2d:51:cd:eb:8d:e2:4c:27:c2:
                    e6:88:f7:87:0a:fe:36:9f:8f:8f:b6:2e:41:1c:cd:
                    cd:76:c5:96:24:c8:a4:f9:b1:15:37:f7:a0:bf:e5:
                    91:d3:b5:b0:98:34:3f:64:ce:46:54:09:dd:75:0b:
                    a1:19:27:d6:de:6c:61:20:11:c6:d1:66:2b:e6:a1:
                    f7:0a:1e:ac:ca:a6:75:bb:52:1d:9c:1a:f9:1d:bf:
                    62:8f:48:60:97:72:51:78:6e:fb:8f:40:cc:69:17:
                    70:d7:ef:ec:d5:7f:92:5b:60:e3:d1:6c:3b:00:61:
                    57:1a:e3:69:45:7a:49:2d:37:ba:b6:f2:b8:38:b2:
                    01:72:d6:7d:e7:da:e2:b6:38:7c:b9:a1:d5:66:03:
                    14:2c:bd:d8:09:f2:dd:b0:11:89:c3:7a:65:ea:58:
                    df:08:0b:10:e2:94:71:94:6d:f0:1f:04:6a:4c:2b:
                    43:5f:3e:20:76:b2:dc:15:97:0f:fb:13:4d:02:86:
                    c1:16:bf:44:53:40:a2:29:8a:b0:93:77:57:c0:47:
                    87:f0:13:c5:7d:ff:fc:8e:d6:35:72:9a:33:ab:a3:
                    fc:a4:82:fc:b4:17:08:a5:9c:e7:fb:76:8d:e6:2f:
                    ee:ba:b5:57:c8:84:6b:d2:7d:30:aa:8c:3f:96:16:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:18:A5:47:66:C2:8B:51:A2:68:BE:CD:F9:7A:5C:A0:D7:03:F3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/f2b49c45-af8a-311f-8090-946b21cb37aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.10.192.0/19
                  74.50.192.0/20
                IPv6:
                  2604:b100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:16:8d:df:a8:36:54:19:4e:8a:dd:55:06:cf:c0:98:80:
         91:37:dd:80:73:58:5c:7f:6c:8b:74:e4:a3:d0:17:dc:05:31:
         0d:35:d8:a8:2e:66:e6:ac:6e:16:f9:75:6f:9c:36:a1:ed:cd:
         13:6e:26:92:81:9c:b9:e6:95:83:c7:ba:3b:70:14:61:81:91:
         eb:43:46:ef:b0:94:18:8b:8a:74:15:67:8c:7e:e5:66:bb:d3:
         88:2a:87:9c:91:cf:d4:a7:36:51:50:4c:c1:2e:78:7d:58:91:
         64:13:50:d6:d0:7c:ad:75:99:93:15:02:ff:39:9a:69:69:35:
         a1:ff:32:6a:b1:a3:d4:57:7f:41:0f:f1:28:0e:c2:af:47:17:
         cc:56:40:b5:c7:9a:62:5d:ca:7b:71:52:8e:eb:9c:d9:96:c3:
         6c:88:33:71:0e:62:42:f8:cc:21:7f:c7:fb:1b:7b:0a:8c:a3:
         74:39:71:7c:61:6a:c1:e6:1e:6e:fb:02:0e:8f:e0:ad:bd:65:
         36:c0:6e:51:cc:d9:74:8c:92:e8:f0:a5:c1:5c:b7:59:ea:4f:
         e1:31:eb:de:c3:f3:b3:84:9b:d3:79:8a:cd:8d:fd:b0:16:ce:
         61:f3:a4:b9:16:1e:9c:bb:f1:b0:f6:bd:b1:cb:c5:7d:d9:ce:
         1e:ad:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:49:08 2024 by rpki-client on console-fra.rpki-client.org