Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa
File:                     b972c047-2afd-30a4-a40b-2b850202cf41.roa (raw, json)
Hash identifier:          m/wQIgmGWqAYLiyuAzY9wmxIxiFupVqrqK+s/EvXU+A=
Subject key identifier:   75:F2:24:46:67:65:84:28:BE:F9:DE:A8:6E:1A:CC:C3:9E:BB:82:09
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F432858454272C59A1B9FAA30CE1B7880
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     14593
IP address blocks:        135.129.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c5:9a:1b:9f:aa:30:ce:1b:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=9654ceeb-268a-49bb-91f4-2620588ac019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:2e:84:b2:11:a2:5f:e7:9f:ab:c5:82:73:
                    33:f9:af:45:e7:a8:89:a8:c6:76:bc:42:37:b1:a0:
                    a0:97:89:20:76:80:56:ce:3b:e3:ea:a8:55:d6:ce:
                    8a:09:b0:a3:83:13:47:91:9a:14:8a:9e:62:82:0d:
                    d1:5a:5f:6d:9a:60:86:cc:9d:c7:84:b4:f1:54:ac:
                    8c:3b:84:95:3e:0a:03:f4:66:f1:82:93:d4:a0:a0:
                    00:22:ae:8a:17:18:a0:03:70:ea:e3:0b:54:88:2a:
                    69:58:64:b9:32:26:e2:95:8e:02:04:ce:5b:46:16:
                    09:26:e0:c0:6c:cb:78:0e:97:9a:03:4c:40:c1:93:
                    64:43:87:db:b3:52:92:76:f3:27:00:97:40:c9:b0:
                    c2:ad:79:62:79:18:12:da:7b:07:40:b8:f8:9d:52:
                    33:38:d7:12:32:22:64:85:b3:ce:cb:8d:50:4a:dc:
                    ea:74:37:af:39:0f:dd:2a:41:ba:c1:c4:c9:20:30:
                    6d:b7:6c:a7:0e:81:39:5a:94:56:cf:5d:4e:08:93:
                    54:a7:39:f8:8a:a6:d3:8e:60:a8:e7:b8:51:fc:74:
                    8e:f8:f0:95:d5:57:f0:16:08:65:34:85:07:32:70:
                    2b:57:5a:02:10:eb:f9:f1:66:6b:08:37:d9:57:99:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:24:46:67:65:84:28:BE:F9:DE:A8:6E:1A:CC:C3:9E:BB:82:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:4c:79:bc:cc:d4:73:c5:3b:e1:7b:7a:2d:0b:0d:25:98:48:
         07:1c:34:a4:1a:e3:26:45:7e:f8:c1:2d:d6:fa:c0:43:fb:69:
         3e:fa:6a:61:32:46:19:b0:63:c8:ba:76:48:08:78:3d:93:e9:
         32:59:5b:cf:8c:ab:c2:0d:e9:a1:49:01:0a:76:27:ec:11:8b:
         2a:29:94:70:21:8b:9c:72:8a:0c:90:b5:1f:b0:b8:84:24:7c:
         0e:8c:e8:46:d9:ec:f4:d2:10:1c:d9:71:ef:52:a9:fe:88:27:
         78:19:ab:e7:e1:f4:b0:69:c0:e0:33:1a:a6:93:7e:df:d8:88:
         fe:84:88:f4:7a:96:7d:02:51:90:c5:b0:84:f2:58:ea:f0:97:
         90:8c:4d:d8:8a:c2:17:df:01:02:29:10:b6:e7:64:79:3f:7d:
         a7:91:60:72:cf:b0:7c:e4:fd:2c:ac:2c:a3:64:fd:09:7e:dc:
         87:67:25:81:43:3a:78:92:7e:9b:f8:08:c3:5d:40:aa:21:6b:
         74:67:9e:3e:bd:ab:87:e3:a2:a7:dc:de:52:ed:b0:a1:46:08:
         98:c1:34:50:5d:8d:0c:9c:c7:da:59:92:ae:3d:83:89:52:bd:
         6f:c3:13:6b:b6:4a:74:eb:f3:0b:fe:4f:84:ac:6b:4d:3d:47:
         f1:48:20:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:35 2024 by rpki-client on console-fra.rpki-client.org