Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/c9e3bc57-1322-32f7-9545-0d6a1181bfad.roa
File:                     c9e3bc57-1322-32f7-9545-0d6a1181bfad.roa (raw, json)
Hash identifier:          yGG+b4IQpF7W+NLRYsdl20Sd6TWQbhHms7QVtR5aheE=
Subject key identifier:   6E:12:84:8A:D6:D3:08:A0:BC:B3:FD:FF:DE:FD:CF:BA:5F:B0:64:55
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285844F03551CAA7A0A79AF4783080
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/c9e3bc57-1322-32f7-9545-0d6a1181bfad.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     20473
IP address blocks:        64.237.32.0/19 maxlen: 32
                          104.238.128.0/18 maxlen: 32
                          104.207.128.0/19 maxlen: 32
                          104.156.224.0/19 maxlen: 32
                          68.232.160.0/19 maxlen: 32
                          66.55.128.0/19 maxlen: 32
                          66.42.64.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:51:ca:a7:a0:a7:9a:f4:78:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=6befd449-b4fb-475d-94a9-cf584deddc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:f1:00:5f:3f:4a:6b:c9:25:bc:88:6f:fe:
                    85:ed:0b:5a:cb:1f:fd:23:7c:1f:47:99:cc:43:ed:
                    e4:11:6b:7a:89:99:8c:9b:af:d0:15:18:4e:28:cf:
                    f7:82:a6:ed:64:23:b1:0b:99:b2:36:9f:71:2c:ac:
                    38:33:4f:00:9d:77:59:0a:03:66:66:a8:06:c4:0a:
                    17:ae:3c:96:5f:79:13:5b:37:12:65:47:45:59:1f:
                    04:63:2f:10:5e:a3:38:d0:9b:9f:5a:0e:47:4b:8d:
                    a0:47:81:c0:6d:06:43:1f:d9:55:e6:54:17:6b:20:
                    ca:30:66:99:35:55:32:03:55:4e:23:38:d8:8a:9d:
                    6f:0b:88:a7:ec:b5:7a:72:15:d7:65:fa:df:35:a8:
                    e7:b9:f9:3b:53:e7:5c:ef:89:fe:40:cc:c5:1e:c5:
                    8e:1b:e7:db:6a:7b:20:c2:f5:60:8f:10:72:43:42:
                    d2:c6:41:41:b7:11:82:ec:73:ce:a5:c1:f5:02:35:
                    f9:61:2c:43:29:aa:a4:91:2d:99:d2:c8:76:f2:7f:
                    02:08:ee:4c:a9:6b:d4:53:a5:bc:86:d3:28:63:06:
                    c1:de:89:a9:91:ba:d6:be:16:75:a5:d2:35:8e:a4:
                    57:cc:a3:15:db:d5:c9:2c:b6:57:8b:5e:22:b4:f1:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:12:84:8A:D6:D3:08:A0:BC:B3:FD:FF:DE:FD:CF:BA:5F:B0:64:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/c9e3bc57-1322-32f7-9545-0d6a1181bfad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.32.0/19
                  66.42.64.0/18
                  66.55.128.0/19
                  68.232.160.0/19
                  104.156.224.0/19
                  104.207.128.0/19
                  104.238.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:9a:f2:ee:c2:b9:90:a0:09:93:d3:7f:ae:ba:b2:4e:9c:
         c0:b9:59:fd:da:67:ae:4c:39:ea:a7:36:ce:9d:de:77:44:14:
         22:29:e1:55:d2:59:c9:f9:ef:25:ed:cd:a8:cd:ec:92:d0:c4:
         d2:71:dc:f7:40:4c:dc:d7:9f:15:bf:e7:c0:9b:9f:f4:83:67:
         99:cd:9e:a7:43:24:e0:f7:31:64:86:5d:7b:e6:a7:4b:d2:fb:
         7c:5b:db:34:1c:29:05:73:f7:38:47:37:1a:8a:70:0b:53:4d:
         72:32:a7:eb:26:03:82:b0:9c:4b:20:49:37:36:ef:16:01:5d:
         dc:e7:ce:46:09:25:f0:9d:e5:e7:ac:6f:0b:f3:9e:10:09:09:
         51:d5:b6:08:ec:36:bd:d2:71:23:be:26:86:6e:dc:40:e0:63:
         a7:e2:45:0f:fe:3c:8e:e0:0f:d1:f2:06:c0:54:a8:4c:12:64:
         73:3d:95:99:87:5d:bc:5c:4e:88:88:d3:41:21:e5:03:3e:37:
         0b:27:b2:cd:37:da:e0:4d:62:27:9c:90:2b:d5:b1:a8:96:5d:
         bd:1e:50:5a:d1:e4:10:1d:26:59:f5:bb:b0:5a:37:28:e3:fd:
         58:59:0c:cf:fd:79:de:39:5f:39:ac:31:fb:89:cf:f8:e6:0b:
         b2:a3:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:11:54 2024 by rpki-client on console-ams.rpki-client.org