Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa
File:                     9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa (raw, json)
Hash identifier:          LKk6ar0G731GnOG6cZpdP4cU2cKvNNJxmgGo138Fs7I=
Subject key identifier:   B5:C6:45:55:80:A0:6A:ED:E7:45:7D:CB:E9:AF:B2:50:F7:C7:BE:73
Certificate issuer:       /CN=91b93de6-6446-4623-a181-5425af4f85cb
Certificate serial:       010D0C9F43285845227599EE2E33C324F0256DC0
Authority key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     36459
IP address blocks:        192.30.252.0/22 maxlen: 24
                          143.55.64.0/20 maxlen: 24
                          140.82.112.0/20 maxlen: 24
                          2620:112:3000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:99:ee:2e:33:c3:24:f0:25:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91b93de6-6446-4623-a181-5425af4f85cb
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=0924d6f6-3036-4c90-9a88-1741fb81558b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ae:f9:90:de:3e:9d:d4:1d:a0:2b:b4:41:7f:
                    61:18:dc:5b:f8:f5:33:cd:75:6b:92:d4:21:25:8a:
                    a9:9a:be:66:80:4f:31:6d:c4:80:11:67:ca:46:07:
                    05:9f:d1:db:27:d8:8b:ef:86:97:c5:ab:d9:df:42:
                    d1:16:63:a3:66:b5:d2:be:e9:5b:d1:82:58:ca:c9:
                    92:3c:27:e7:d7:34:ec:de:65:9c:72:4c:0b:b3:d1:
                    9d:c8:a7:f1:1a:14:1a:4e:0c:ee:c1:fc:89:c9:12:
                    7a:85:ce:6b:d4:d2:98:56:0c:89:8b:57:79:9c:53:
                    80:fa:44:87:18:17:30:ce:42:21:3a:aa:e8:b6:b0:
                    41:4a:22:00:d3:13:37:3c:be:ea:ad:cd:55:dd:b2:
                    89:f0:6e:f3:fc:5c:18:75:a8:75:85:27:8b:e5:36:
                    67:24:49:59:87:03:45:ac:36:d4:94:83:48:33:84:
                    16:31:06:c3:b3:ef:ab:d7:d1:95:db:b1:62:d8:c6:
                    22:e0:81:8d:94:63:a6:21:b2:0e:a5:c8:4f:80:be:
                    bf:1c:3d:7b:2c:a0:ac:f4:88:ba:ac:60:96:03:00:
                    4a:41:09:8e:b4:b2:ae:91:fb:21:90:3b:d3:f6:19:
                    70:64:58:04:06:35:19:89:e8:a8:13:f9:ec:8b:79:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C6:45:55:80:A0:6A:ED:E7:45:7D:CB:E9:AF:B2:50:F7:C7:BE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.112.0/20
                  143.55.64.0/20
                  192.30.252.0/22
                IPv6:
                  2620:112:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:14:2d:8e:56:22:f0:9d:3f:49:38:be:3b:7f:cf:6e:62:
         ed:36:85:87:ac:45:27:e6:d7:1b:12:dc:d7:94:21:30:21:64:
         b3:18:54:58:0e:7c:90:66:29:36:84:2c:62:20:be:3b:75:cf:
         8b:9e:c1:02:be:8b:91:16:e9:8e:38:10:d5:65:3e:ab:bc:04:
         ed:79:2a:29:e0:e6:5d:5f:33:05:ea:41:c0:11:96:b6:d3:31:
         7e:41:54:95:9c:7b:42:69:a2:7b:3b:cf:4d:f1:0d:ff:b4:79:
         e1:9d:6e:cb:95:64:e1:cb:31:56:fa:e4:fa:6c:0e:49:95:2d:
         8a:f2:22:73:37:62:87:c9:63:54:35:45:c4:29:98:9e:62:43:
         21:23:46:04:8f:91:29:a2:32:5d:91:59:4e:c8:3b:ca:50:a4:
         f0:c0:a9:d5:b1:c5:1d:b5:a6:68:e2:37:fe:3d:c1:1a:46:4d:
         c2:bb:61:f2:36:c2:b6:cf:dc:2a:2b:dd:78:05:0d:70:ab:bd:
         5b:65:08:1e:61:18:61:34:d4:25:eb:4c:43:ce:76:f1:a9:66:
         5c:24:62:94:e1:74:a5:41:1f:50:ab:8f:95:47:5e:7f:39:41:
         37:e8:22:fd:fe:7a:2c:cf:e2:80:51:84:00:c2:d1:07:9f:b2:
         40:d5:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:54:21 2024 by rpki-client on console-ams.rpki-client.org