Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa
File:                     0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa (raw, json)
Hash identifier:          KJz0DTOltapNYdEQpxD+7Wf20yr56yt83Xc44Ec4h64=
Subject key identifier:   77:B5:4D:4D:EE:36:50:BA:92:B1:B1:8D:37:04:15:F5:38:91:F3:34
Certificate issuer:       /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Certificate serial:       010D0C9F43285845AED6E0ED3C373B64EEC3FE00
Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa
Signing time:             Sat 27 Apr 2024 08:49:41 +0000
ROA not before:           Sat 27 Apr 2024 08:49:41 +0000
ROA not after:            Fri 26 Jul 2024 08:49:41 +0000
asID:                     35906
IP address blocks:        162.250.104.0/21 maxlen: 24
                          199.21.184.0/22 maxlen: 24
                          199.180.192.0/22 maxlen: 24
                          199.201.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ae:d6:e0:ed:3c:37:3b:64:ee:c3:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
        Validity
            Not Before: Apr 27 08:49:41 2024 GMT
            Not After : Jul 26 08:49:41 2024 GMT
        Subject: CN=1e70e2eb-0155-452b-b04e-624dad35bfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:20:de:fb:33:95:28:1c:9b:36:58:4d:2b:
                    d3:00:6f:93:cf:11:17:f7:54:1e:8f:53:b0:d9:9e:
                    14:0e:32:84:c8:a4:5c:ac:c2:81:51:d8:61:ab:e3:
                    59:2a:fb:a1:73:5b:a9:ac:a7:d4:5b:66:1e:cd:64:
                    45:49:ba:11:e3:28:0a:8b:55:d3:ec:0e:a7:43:0d:
                    56:1f:4b:9d:bd:1e:0b:f3:61:52:35:21:3d:57:b6:
                    36:ab:4f:ea:21:b8:30:8b:87:27:69:a4:53:8d:ca:
                    ea:27:f8:f3:82:e4:35:3f:b4:99:7d:ba:fe:55:94:
                    1f:0e:b1:ba:c2:4b:7e:79:2d:70:d7:ad:9c:d3:56:
                    a7:80:82:98:87:65:84:6c:1d:f3:65:17:af:73:c3:
                    7a:89:cf:73:22:c7:e3:4f:8a:bf:4d:1e:48:27:57:
                    6c:b6:c8:b5:6a:ba:60:85:65:6a:e8:f6:d1:b1:de:
                    5c:eb:e6:27:6d:71:b1:8a:ac:a9:78:aa:0b:f6:81:
                    6f:41:c0:2d:f9:d2:50:6a:29:8f:97:9d:26:b3:c5:
                    a5:a2:12:8c:c8:95:63:d0:3a:6e:aa:67:0b:f2:9e:
                    53:28:70:86:0d:49:5e:bf:98:96:2b:22:7b:5c:42:
                    81:3f:e1:5a:6a:1f:c9:30:a8:61:38:83:8a:96:ed:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B5:4D:4D:EE:36:50:BA:92:B1:B1:8D:37:04:15:F5:38:91:F3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.104.0/21
                  199.21.184.0/22
                  199.180.192.0/22
                  199.201.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:7a:ab:3e:2c:58:5c:d4:17:4f:73:e6:42:1d:c1:c0:a4:
         d0:06:68:66:5f:1b:ca:40:5c:6f:9c:d1:83:2b:51:e1:8d:b0:
         bb:b5:3b:62:17:49:20:52:eb:6d:b3:53:ce:8b:6e:d3:83:81:
         0f:5d:88:79:88:1f:05:60:8b:94:51:3f:91:6c:66:f1:7d:74:
         12:32:ca:a0:2f:8d:cc:66:da:9c:de:1a:ce:d7:32:be:dd:0f:
         e9:7e:63:fa:7d:56:50:28:1f:bf:23:99:41:37:d8:e5:a7:b8:
         b5:29:8d:59:de:8e:3f:d3:94:57:f1:62:5a:b5:e6:f4:bf:ed:
         fb:a8:67:d0:ec:3b:4f:b9:cd:40:5e:aa:ed:c9:41:63:74:9c:
         60:26:9f:d8:85:a3:7c:f5:81:c5:cc:a0:91:0d:6d:2d:05:0d:
         8c:63:56:e5:24:e9:38:e6:b8:6e:3b:50:95:55:7a:73:a6:1d:
         12:80:d7:af:53:9d:52:9f:23:81:83:98:73:82:08:57:3d:43:
         58:73:e0:9a:1d:14:55:c0:59:78:30:2d:2c:f7:d2:f8:4f:67:
         e1:1a:0a:75:9b:d1:4b:9f:17:8b:84:f9:c8:d4:85:4a:0a:cb:
         c9:38:97:43:7e:a3:0a:46:02:d9:93:62:83:13:a7:d3:da:05:
         57:0d:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:16:33 2024 by rpki-client on console-ams.rpki-client.org