Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
File:                     49950327-e458-3c3a-8593-2cea9f0380f0.roa (raw, json)
Hash identifier:          6U5tvZAetHGPKppP5z88h3W8tR68JIsOjY80Mdy8hOk=
Subject key identifier:   67:5A:E5:6B:38:2D:20:9E:9E:F4:75:1E:95:D4:FA:13:4A:92:6D:EE
Certificate issuer:       /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
Certificate serial:       010D0C9F432858457A4876D883259CD468FD64A8
Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     3737
IP address blocks:        24.115.0.0/16 maxlen: 24
                          75.97.0.0/16 maxlen: 24
                          104.36.124.0/22 maxlen: 24
                          24.238.32.0/19 maxlen: 24
                          70.15.0.0/16 maxlen: 24
                          24.152.192.0/18 maxlen: 24
                          70.44.0.0/16 maxlen: 24
                          24.229.0.0/16 maxlen: 24
                          24.238.64.0/19 maxlen: 24
                          216.49.0.0/18 maxlen: 24
                          24.55.128.0/19 maxlen: 24
                          24.246.224.0/19 maxlen: 24
                          24.102.128.0/17 maxlen: 24
                          50.29.128.0/17 maxlen: 24
                          69.12.12.0/22 maxlen: 24
                          64.67.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:76:d8:83:25:9c:d4:68:fd:64:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=8af90f4a-dadf-4a88-91de-fcf662bb6760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:b3:49:b8:9a:63:fb:1c:a5:37:35:45:3b:
                    f7:e2:3c:f2:98:04:84:40:cc:31:ae:3b:6b:3d:c0:
                    f3:fb:07:79:8e:37:65:1b:cd:f3:4d:f2:d1:4e:af:
                    64:04:dd:0e:92:76:74:81:03:02:2c:ff:6a:33:77:
                    f3:23:29:bb:72:d8:95:b0:d5:15:9d:45:1b:2d:c6:
                    da:6a:73:95:9b:47:b3:e0:8c:bd:14:0e:25:34:ab:
                    4c:45:88:ea:71:eb:b7:4d:ac:ce:61:61:2c:1a:2a:
                    b1:cc:c1:eb:33:9d:cb:ed:9c:7e:de:53:05:78:89:
                    3c:54:db:70:d8:7d:a3:65:45:9c:b5:19:9e:a8:63:
                    31:13:2d:8b:14:61:6e:c7:e7:32:86:0f:d2:fe:5d:
                    b2:61:a1:48:23:f3:d5:06:89:5f:a4:56:2d:a7:87:
                    77:5f:fd:ca:73:37:e4:63:6b:15:f9:3f:98:7a:cc:
                    57:ee:c9:20:9e:dd:f4:25:25:f1:cd:2e:19:46:89:
                    ad:fe:14:7d:63:23:d8:a7:91:3e:21:69:1b:9c:39:
                    1f:01:00:e6:1c:7b:42:5e:d2:da:50:ff:00:45:0b:
                    f6:b2:1d:d3:17:d5:c8:77:57:0f:fa:4d:63:1d:df:
                    69:73:14:66:a1:3c:5b:97:0a:31:9b:cc:84:c0:cd:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:E5:6B:38:2D:20:9E:9E:F4:75:1E:95:D4:FA:13:4A:92:6D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.55.128.0/19
                  24.102.128.0/17
                  24.115.0.0/16
                  24.152.192.0/18
                  24.229.0.0/16
                  24.238.32.0-24.238.95.255
                  24.246.224.0/19
                  50.29.128.0/17
                  64.67.0.0/16
                  69.12.12.0/22
                  70.15.0.0/16
                  70.44.0.0/16
                  75.97.0.0/16
                  104.36.124.0/22
                  216.49.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:67:9b:bc:d9:35:99:52:96:0d:32:ed:62:f4:21:f6:a5:f3:
         5f:c6:9b:1b:02:92:6b:49:4c:45:a3:ed:a5:90:2d:d7:47:c0:
         01:d1:c4:5d:9d:5b:07:b8:a3:01:77:c6:6a:d8:c8:55:da:bf:
         e8:3c:bd:b6:b5:1b:b8:97:83:53:5b:e8:32:6d:8e:83:a0:16:
         82:48:28:6f:a1:f9:1f:68:bf:df:0e:7a:12:ff:39:32:3b:64:
         af:80:34:b5:08:29:c7:76:69:20:5f:cb:81:f0:53:5d:39:dc:
         30:56:75:0e:50:c9:f7:94:18:4a:ea:3a:b9:ab:8a:c7:2e:65:
         4d:58:4f:15:15:1b:35:2a:8e:33:55:8d:05:d1:47:8e:2b:25:
         56:3c:66:8c:a7:c2:7d:56:cd:9b:b6:f2:e4:19:0b:d9:1d:33:
         c9:8a:89:39:c2:d3:16:19:1c:ab:22:5d:5f:65:ce:94:0a:c1:
         50:72:a7:0a:c1:d1:9b:08:5b:e5:1f:d3:4c:35:e1:87:e2:60:
         ad:15:b3:96:b2:de:f1:c1:68:c1:72:f2:03:4d:a2:eb:e0:cd:
         65:1d:c6:eb:5a:8a:27:cc:2d:91:be:18:51:73:de:c3:a6:3d:
         a7:e7:91:ea:70:83:6f:af:53:70:35:b6:d9:11:b4:d7:8a:99:
         38:e6:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:53:02 2024 by rpki-client on console-fra.rpki-client.org