Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e0b6d9cf-566a-36d8-bf65-83c583e60273.roa
File:                     e0b6d9cf-566a-36d8-bf65-83c583e60273.roa (raw, json)
Hash identifier:          cNMi8v7damPq3uMihkqHdnMy3sEak6tdU8h3fYhFUm0=
Subject key identifier:   DC:A0:C0:6A:ED:C7:4F:2F:FB:E9:C5:D5:FD:1C:A1:E5:EF:CC:8E:3F
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F432858452AB7DB1EA714027FEEF4D580
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e0b6d9cf-566a-36d8-bf65-83c583e60273.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     19871
IP address blocks:        162.241.192.0/23 maxlen: 23
                          162.241.232.0/21 maxlen: 21
                          162.241.32.0/21 maxlen: 21
                          162.241.40.0/21 maxlen: 21
                          162.241.48.0/21 maxlen: 21
                          162.241.104.0/21 maxlen: 21
                          162.241.88.0/21 maxlen: 21
                          162.241.72.0/21 maxlen: 21
                          162.241.96.0/21 maxlen: 21
                          162.241.128.0/21 maxlen: 21
                          162.241.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:db:1e:a7:14:02:7f:ee:f4:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=ab359c45-78ce-4e3a-9871-a605b1c9949d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:93:63:f5:23:15:fb:1b:3a:93:6a:a9:de:
                    0f:ca:e3:c3:4f:f7:ac:c7:f2:89:f8:a9:38:67:cf:
                    aa:f2:d4:ac:65:c4:3d:5e:f2:0a:54:07:64:44:a5:
                    50:b7:b3:da:9c:32:20:e4:fc:64:89:52:6b:da:16:
                    b4:cb:fe:9e:e5:a3:83:ec:e5:9a:11:06:f2:c5:3b:
                    6a:12:15:10:97:e1:bb:82:68:f5:f1:84:0a:7e:a9:
                    6a:f4:ce:6d:e1:47:b3:c3:75:25:c2:3d:0c:ac:fa:
                    ae:56:40:92:2f:0f:bd:56:77:a6:8c:5f:ed:08:ce:
                    b8:92:84:6d:1f:be:8c:89:4f:77:70:0f:51:4b:b6:
                    9e:90:fa:67:03:d3:a6:42:2a:f1:bf:9a:ee:f8:21:
                    44:1c:c0:cc:cb:93:c0:9f:c7:15:7a:71:52:05:29:
                    a2:56:d8:fe:45:71:df:4a:11:8c:94:b8:d4:4e:21:
                    0f:f3:43:b4:cd:ab:93:80:be:86:2f:1e:f7:51:93:
                    da:25:85:7d:f6:b6:f8:b7:ca:d6:26:2d:10:55:6c:
                    66:86:b4:e0:dc:1e:f1:57:f7:8f:c9:5b:47:4d:b7:
                    27:c1:86:52:10:84:a0:ea:86:db:21:f1:c8:06:56:
                    d4:2b:99:1c:92:67:37:7f:48:ae:4d:c6:7f:fa:bd:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:C0:6A:ED:C7:4F:2F:FB:E9:C5:D5:FD:1C:A1:E5:EF:CC:8E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e0b6d9cf-566a-36d8-bf65-83c583e60273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.241.32.0-162.241.55.255
                  162.241.72.0/21
                  162.241.88.0-162.241.111.255
                  162.241.128.0/21
                  162.241.176.0/21
                  162.241.192.0/23
                  162.241.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:5e:e9:2e:54:51:bf:58:81:38:2a:1d:18:3d:96:fc:b6:
         88:8d:aa:49:0b:88:47:79:e7:81:f4:02:fe:f6:c6:4e:db:e3:
         14:02:e4:06:b7:78:c1:a6:3c:d0:7f:56:31:ce:21:bd:73:6a:
         8b:31:f4:69:51:e7:e1:a1:00:54:90:33:f2:55:e8:37:e2:dd:
         61:d1:cf:7e:dd:66:b7:96:8e:b3:29:2e:36:69:78:54:b3:ae:
         ab:54:42:0c:b9:ba:13:75:04:a9:ac:0d:31:7a:40:6e:98:d1:
         81:02:02:e5:b7:41:e2:a3:5e:75:53:a4:0f:82:0f:2f:ee:fc:
         b7:3d:63:07:c8:85:3e:b8:ca:74:e2:7e:e6:59:ab:49:5b:2f:
         ce:de:70:c8:ea:88:0f:8a:79:e8:b0:dc:7b:fa:b5:b0:47:f3:
         11:b1:16:f3:d9:f7:d8:56:8d:16:6c:fc:3b:08:f8:35:93:61:
         8b:51:96:41:79:8a:21:b0:b2:cd:bc:7e:99:62:b5:9c:13:3f:
         45:cc:f2:bc:0d:b1:a6:13:34:9d:7f:7d:80:af:8a:7a:52:10:
         66:29:60:a4:f4:6e:34:23:d3:3e:b7:62:58:38:26:c4:b3:1c:
         f7:cd:f2:3b:11:5f:60:92:b6:05:f4:42:c6:e6:6d:bf:d4:aa:
         67:ad:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 20:53:33 2024 by rpki-client on console-fra.rpki-client.org