Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa
File:                     cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa (raw, json)
Hash identifier:          lrwt3DQR1nCk/PhYr6OI3YzsYSBKnKPkaqpRN37DF1w=
Subject key identifier:   B9:1B:EF:B9:CD:73:41:3B:5F:8B:71:EC:79:65:93:5E:49:69:A1:73
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285845A8CED50C5C0DE8BF91B2C440
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa
Signing time:             Thu 25 Apr 2024 04:58:37 +0000
ROA not before:           Thu 25 Apr 2024 04:58:37 +0000
ROA not after:            Wed 24 Jul 2024 04:58:37 +0000
asID:                     21928
IP address blocks:        24.221.0.0/16 maxlen: 24
                          52.144.16.0/21 maxlen: 24
                          75.122.0.0/15 maxlen: 24
                          104.152.20.0/22 maxlen: 24
                          173.4.0.0/14 maxlen: 24
                          174.141.208.0/20 maxlen: 24
                          174.144.0.0/12 maxlen: 24
                          184.192.0.0/10 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a8:ce:d5:0c:5c:0d:e8:bf:91:b2:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Apr 25 04:58:37 2024 GMT
            Not After : Jul 24 04:58:37 2024 GMT
        Subject: CN=89442075-4f41-407c-85b5-abe8921eb0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:02:7e:90:e7:4f:8e:88:64:c2:5f:f9:55:b4:
                    09:1c:67:80:11:45:00:a6:fb:e0:86:c8:70:37:cd:
                    11:7e:29:4b:ac:f8:a2:f4:c1:32:78:68:3a:81:fc:
                    69:5a:e0:53:a5:43:42:cb:c0:06:39:c9:55:a7:29:
                    9b:0d:c0:75:1c:41:e7:59:f0:4d:3e:9a:fc:6d:95:
                    68:36:a7:cc:ab:e5:72:ba:bd:37:8b:9f:1f:0d:70:
                    9f:f7:1b:5e:91:cc:02:f0:4b:c9:9a:c6:f0:fc:d7:
                    97:02:41:af:1f:61:f8:ac:b2:c5:fd:ca:a7:9c:9f:
                    8f:ac:41:1f:b7:7e:16:23:d1:49:33:e7:24:32:7f:
                    47:1a:9f:31:32:7c:8f:2c:74:3d:9c:e6:b9:72:38:
                    db:5f:77:00:82:ab:05:48:a9:35:d3:04:f9:b1:97:
                    57:1a:50:c0:b9:66:5e:25:7a:0a:c3:05:62:51:18:
                    60:69:01:9e:45:e7:48:4e:7b:19:72:e2:cd:44:a6:
                    d3:c9:90:57:9a:20:cf:b2:1d:ee:2b:5b:5d:25:0a:
                    f3:00:ec:98:1a:11:e3:0f:22:e0:9e:7e:40:ca:aa:
                    2f:68:fc:8c:1f:7f:6d:0b:48:ce:3e:9b:b7:0a:d3:
                    78:46:65:67:0b:0e:85:5a:b9:83:1f:22:db:a6:48:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:EF:B9:CD:73:41:3B:5F:8B:71:EC:79:65:93:5E:49:69:A1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.221.0.0/16
                  52.144.16.0/21
                  75.122.0.0/15
                  104.152.20.0/22
                  173.4.0.0/14
                  174.141.208.0/20
                  174.144.0.0/12
                  184.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:a9:f5:d3:f1:39:c5:94:25:bc:90:40:7e:7a:e1:d0:d5:
         91:38:6a:32:ef:ab:ee:1e:61:37:34:bc:a3:ac:34:19:04:c8:
         a3:ff:ae:c5:d0:00:f3:52:e0:e2:94:72:48:6f:c3:33:f8:5e:
         86:81:d1:c8:06:ab:f7:ce:4d:f0:12:5f:40:bd:7d:5f:76:10:
         6e:ad:84:8e:eb:7f:b7:8a:ac:e0:60:8f:6a:15:b5:3d:20:cf:
         c9:e0:38:77:50:6e:ef:41:79:76:ef:e5:55:55:4f:c2:c0:b8:
         87:c1:f3:75:4a:49:6f:8a:31:99:76:26:1c:67:79:9d:57:50:
         06:3e:02:ae:65:0f:4f:3a:de:52:4c:eb:6c:3d:c2:7c:df:15:
         40:f4:b7:d8:d5:b6:c2:df:ed:d0:b2:c7:ac:ce:95:41:83:c5:
         04:d9:5b:ab:13:34:4a:7a:f1:a9:91:2f:cd:0c:74:7d:f2:7d:
         26:86:fb:5b:50:72:43:ca:55:70:d2:88:e2:39:99:da:89:19:
         7b:be:98:c9:39:1d:c2:dc:04:cd:d1:23:59:db:e7:94:42:45:
         ac:8a:fc:c8:10:56:88:13:2b:e6:4f:36:49:3f:9a:3d:fa:29:
         5c:ec:0c:8a:69:6c:a2:48:82:e8:93:df:70:b8:90:78:64:83:
         95:70:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:06 2024 by rpki-client on console-fra.rpki-client.org