Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa
File:                     aefb5437-6034-3391-9329-ca5ca351ea5d.roa (raw, json)
Hash identifier:          CLpY+qqZCcEIR7Hz32k+jtwIme7jN3I/xjn17Tio+sg=
Subject key identifier:   24:A4:7D:A5:F6:46:98:BC:17:28:B1:C4:C0:D8:E9:7A:B1:0A:A4:66
Certificate issuer:       /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
Certificate serial:       010D0C9F432858457A4876BF0DAC5331896C7A80
Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     3737
IP address blocks:        66.152.128.0/19 maxlen: 24
                          207.44.0.0/17 maxlen: 24
                          216.144.160.0/19 maxlen: 24
                          2606:9400::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:76:bf:0d:ac:53:31:89:6c:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=90f102a2-969d-4a38-bb33-b64bf6178a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:01:63:e2:78:6e:5c:99:18:e7:88:71:94:
                    81:e9:cf:81:18:db:3c:93:7e:fb:76:88:ff:16:c4:
                    47:ea:78:a1:9a:18:0b:8c:9d:bf:cf:1b:e1:ea:be:
                    a6:f5:e6:84:00:de:70:8b:0b:07:bd:f8:b0:fa:c9:
                    b8:54:a3:76:37:7d:aa:59:34:b5:74:33:f7:c6:8b:
                    60:30:a0:02:05:63:3e:73:23:2b:5c:ed:12:ed:ec:
                    bf:73:1b:00:17:4a:17:de:f4:eb:c7:89:98:99:86:
                    fd:c0:d3:a0:86:63:3e:5a:f0:f5:62:c3:ad:ad:45:
                    64:82:55:04:30:72:c3:c1:52:8e:18:2a:e1:32:08:
                    d3:74:23:98:09:c0:43:48:8e:ab:08:17:dd:40:32:
                    76:15:aa:57:f9:1f:79:f4:a4:37:d2:68:b2:20:7f:
                    ae:76:b1:c6:b3:9c:af:7b:7a:bf:70:43:88:fc:b5:
                    14:72:62:63:1a:12:ae:06:8f:73:4d:52:9f:e4:97:
                    05:c0:ab:61:81:d0:5a:45:b2:a1:e4:84:53:55:84:
                    28:6d:8d:ed:98:2c:ed:15:7b:8a:2d:97:ea:ae:05:
                    03:00:8f:88:b5:83:b4:9d:8c:07:90:04:d6:60:22:
                    7d:71:10:07:ae:35:bb:8f:9e:0d:d7:4b:ea:9b:d9:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:7D:A5:F6:46:98:BC:17:28:B1:C4:C0:D8:E9:7A:B1:0A:A4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.128.0/19
                  207.44.0.0/17
                  216.144.160.0/19
                IPv6:
                  2606:9400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:a2:44:43:65:64:4b:73:f4:72:1f:22:be:0d:70:58:a0:
         3f:59:ce:67:01:26:f6:b4:62:b7:2d:91:c9:45:e4:7f:ed:99:
         c7:17:b2:ac:0e:39:7c:b0:e9:d9:45:64:07:9e:49:3f:3a:9f:
         e4:aa:46:a9:41:45:20:5f:ed:a3:89:e9:42:16:cd:6e:ca:34:
         38:18:84:72:ba:19:a2:7a:4b:62:b7:47:e9:6b:83:fc:ca:7b:
         ba:a0:9c:b2:ac:c9:1a:e7:7c:bb:05:de:e0:08:10:6c:7b:aa:
         f5:4e:db:e4:66:3a:61:c6:8a:8c:14:5c:71:9b:55:b5:42:f2:
         b4:a5:9e:a0:14:a7:3c:e7:b5:67:69:bc:aa:d0:63:27:08:76:
         a0:1b:37:54:57:ca:83:8c:78:ad:93:25:f7:06:54:fd:cb:00:
         24:0f:a1:e2:73:2c:05:e8:17:23:43:2d:ee:1e:e1:ef:e1:de:
         11:9f:60:50:e6:60:83:1e:3f:46:99:cc:5e:95:1a:06:e2:75:
         77:c3:bd:13:07:99:87:a6:a9:31:7e:a5:17:92:75:e6:ee:cc:
         6a:f0:b6:09:32:20:5e:3c:f4:47:9e:9f:af:35:0b:b1:48:61:
         28:66:29:7f:9f:b3:42:39:9c:65:30:8c:bc:31:b1:0b:ea:e9:
         bd:ca:90:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:22:00 2024 by rpki-client on console-fra.rpki-client.org