Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
File:                     8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json)
Hash identifier:          FH7kQy5BluxAZI0OckCF82TV/p9vKQsGtzlpO4VEkf8=
Subject key identifier:   9F:0A:FF:2A:9C:7F:0E:8D:E5:EB:29:29:CD:BA:31:A1:38:8F:B9:30
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285845612856C1A3179C4EEBC2BC80
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     17012
IP address blocks:        64.4.240.0/21 maxlen: 24
                          173.0.80.0/20 maxlen: 24
                          64.4.248.0/22 maxlen: 24
                          66.211.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:56:c1:a3:17:9c:4e:eb:c2:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=d12c3e2c-45e6-4844-aa4d-77abe5f2caf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:39:e0:a6:45:7c:21:47:42:46:9b:cb:57:
                    c6:45:37:88:c4:6b:23:0b:f7:9f:f1:fd:3d:fd:b6:
                    4e:d7:a6:59:84:3f:a8:a6:4a:bf:7d:6e:58:5e:73:
                    85:e1:b3:fc:86:49:40:dd:f2:c9:93:4e:a1:f2:35:
                    dc:c3:2c:59:4a:bb:22:43:d9:b0:4e:82:f3:3d:49:
                    42:fa:61:ab:6f:ed:38:46:11:c0:38:78:34:20:36:
                    4d:43:d6:0f:b9:37:d3:d6:69:7b:5f:f5:34:32:35:
                    1e:3b:76:eb:1b:42:9a:21:a3:6e:a8:f1:ad:e2:0e:
                    8f:de:99:5f:84:13:51:3c:80:af:85:8a:e5:03:8e:
                    26:74:c5:c6:7f:74:5a:95:8e:9f:c9:99:b8:5e:c9:
                    11:49:84:2b:94:f5:d3:29:ac:1f:7c:fc:c2:b7:f8:
                    e2:7a:bd:94:1e:15:2f:26:08:46:c5:57:e9:64:5f:
                    8c:58:98:ab:25:e4:53:b3:91:f8:1f:52:5f:7a:5f:
                    29:24:6f:54:ad:c6:d4:ac:88:60:02:c7:4c:27:fa:
                    72:0c:f2:10:5b:a0:38:5e:e2:b2:2a:c3:74:b3:50:
                    ef:30:12:ee:76:b3:28:f2:3c:20:c8:a4:b6:c8:bc:
                    d1:51:f3:15:fd:40:6d:08:c3:08:68:ba:33:ef:ee:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0A:FF:2A:9C:7F:0E:8D:E5:EB:29:29:CD:BA:31:A1:38:8F:B9:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.240.0-64.4.251.255
                  66.211.168.0/22
                  173.0.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:cd:33:59:de:13:6b:99:f9:8e:72:76:f9:88:90:4b:4a:
         33:6f:60:ca:06:61:aa:a3:48:71:84:a0:77:3e:25:63:bc:89:
         03:e8:81:85:63:8b:7d:38:e9:ee:43:82:b5:ff:06:56:28:b2:
         65:30:e5:62:8a:eb:27:30:57:2a:bf:95:4b:f1:1d:de:ed:45:
         87:48:1f:37:11:43:55:03:6d:3f:b5:ff:13:23:52:3f:57:07:
         03:d5:fb:54:e6:44:3c:5a:3a:dc:e0:29:37:35:3b:b8:ab:72:
         cc:53:5a:7e:b6:39:af:6b:ca:2d:f4:f9:82:bc:ce:e5:61:aa:
         e1:96:a6:ae:85:c9:81:24:d6:be:b3:04:ce:d1:b6:fa:8b:e7:
         51:35:4d:4e:3f:a7:3a:07:f1:a0:50:c6:98:af:5d:ba:2e:00:
         8f:a2:71:f3:6e:6a:fa:cc:2d:15:a4:bc:10:24:18:7f:46:44:
         07:1d:46:56:e7:60:b9:a6:a4:99:3f:38:08:38:4e:35:07:2b:
         ab:7a:9a:3d:31:f0:02:64:ee:5c:11:b3:d6:58:b7:4d:90:d1:
         c2:dd:c0:11:ae:f3:31:ca:73:f3:61:70:ee:00:d3:ce:a6:51:
         be:1c:24:e7:6b:d8:a4:3b:df:4a:3b:b0:83:d4:09:fe:4f:ed:
         c5:91:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 07:31:04 2024 by rpki-client on console-fra.rpki-client.org