Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
File:                     1e6d92e5-d123-30be-b170-e56ac208e478.roa (raw, json)
Hash identifier:          OXWMbmr1rCgw3Fn8/wvGnk8501iBtKCXvTILqmwv5u0=
Subject key identifier:   41:CE:FB:8F:FC:6A:3F:F5:86:11:4B:07:46:B8:61:6C:A6:A3:12:48
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285844F03551E2758D2E735D3E1500
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     20473
IP address blocks:        208.72.152.0/22 maxlen: 32
                          70.34.192.0/19 maxlen: 32
                          70.34.240.0/20 maxlen: 32
                          216.238.64.0/18 maxlen: 32
                          208.76.220.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:51:e2:75:8d:2e:73:5d:3e:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=543b27fe-f196-420d-9e79-eb9375bd5e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:88:77:ca:c2:bb:1a:01:d8:cf:82:a5:67:57:
                    91:4b:19:74:e5:f9:9e:a4:28:54:65:03:6a:0b:a6:
                    ae:b9:70:77:ce:b2:1f:95:26:a1:7b:81:c3:44:b4:
                    bb:54:a8:cd:9a:ab:11:b8:8b:df:3d:e4:22:b8:1d:
                    b1:fc:b8:56:f9:f1:2e:a4:73:84:88:9a:5d:53:04:
                    a4:84:ed:a1:68:40:68:31:c3:d5:c5:eb:57:ed:f0:
                    e4:d0:2c:81:3e:4c:6b:ae:32:bc:5f:63:d5:b7:d9:
                    d9:fe:52:ca:bb:12:47:3a:64:39:ad:c1:1f:20:28:
                    88:e6:8c:58:ed:ca:17:9d:ac:7c:3e:f3:f0:c3:e8:
                    50:54:2a:f7:3c:9a:17:e3:45:3d:aa:e6:f7:e1:16:
                    21:ed:98:3d:af:8b:71:e2:c5:a3:05:80:db:53:46:
                    98:8a:7c:86:c1:47:3e:42:4b:5a:c2:13:a4:92:62:
                    a1:ad:83:b8:2c:bd:03:aa:a3:62:ab:99:68:56:cb:
                    5e:df:67:75:78:4e:1b:13:f3:a0:82:37:be:2b:f7:
                    4d:d4:91:af:b7:c5:56:f8:f1:da:94:bc:7a:e2:3e:
                    f9:32:cb:ec:ee:2e:96:6b:d8:cc:1d:34:e8:84:72:
                    b9:8b:bd:aa:88:63:72:a2:87:73:3c:a5:34:71:f5:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CE:FB:8F:FC:6A:3F:F5:86:11:4B:07:46:B8:61:6C:A6:A3:12:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.34.192.0/19
                  70.34.240.0/20
                  208.72.152.0/22
                  208.76.220.0/22
                  216.238.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:79:25:01:77:f4:b1:6b:d4:64:81:a2:89:6e:02:1d:08:47:
         57:e7:c0:f7:27:99:66:ff:7f:53:9c:56:b8:1c:1a:c5:6f:32:
         cd:1b:00:05:ae:ca:99:7b:96:04:04:87:38:6d:0f:c0:99:8d:
         9d:d9:be:9b:90:c7:97:87:31:0f:6f:f1:37:de:7d:6b:1f:b8:
         3b:b6:07:d4:b6:42:be:17:52:c9:54:98:5f:ce:74:6d:9c:1a:
         d5:e8:b1:e1:ad:69:75:55:03:bf:12:2c:fe:0e:13:df:5c:f5:
         5e:2e:26:0a:a4:f3:c1:aa:bb:50:54:6e:d0:13:19:ad:9d:a3:
         a1:ee:f6:6b:4f:36:3a:ca:d3:85:a9:ef:10:82:77:e3:bd:cb:
         ea:da:25:98:d1:19:e2:5d:1e:82:22:b6:4a:6c:bd:d7:7b:2a:
         69:aa:5f:3f:54:01:97:2d:62:3a:d8:2b:da:e2:13:09:2a:44:
         0a:34:94:46:61:58:e9:64:e4:ed:b2:e4:92:50:71:79:d0:ce:
         b9:29:16:46:01:b2:aa:ef:68:be:d8:d9:48:f0:87:ab:d5:0d:
         cd:62:4f:6a:c0:87:62:37:a5:5e:a2:a4:60:ce:2d:ce:fa:25:
         9b:c0:6b:8e:2c:3f:e9:3d:55:01:3d:f5:cc:ae:4b:43:9a:cd:
         46:9d:df:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 6 14:47:46 2024 by rpki-client on console-fra.rpki-client.org