Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/60000e37-b527-3189-9379-65c88001b757.roa
File:                     60000e37-b527-3189-9379-65c88001b757.roa (raw, json)
Hash identifier:          PKxgB6zBeIUMHFjDwj7qlrl5eL7tbEXgkAr5HIuZSaY=
Subject key identifier:   BA:F4:4F:7F:6A:A7:F5:A2:F2:32:E3:E3:AA:0A:D6:CE:25:CE:99:8A
Certificate issuer:       /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial:       010D0C9F4328584561285EED102D6BFD96608400
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/60000e37-b527-3189-9379-65c88001b757.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     32097
IP address blocks:        173.208.128.0/17 maxlen: 24
                          208.110.64.0/19 maxlen: 24
                          204.12.192.0/18 maxlen: 24
                          69.30.192.0/18 maxlen: 24
                          69.197.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5e:ed:10:2d:6b:fd:96:60:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=bfe8930d-f780-4f38-a218-a2d1085e3eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:9f:a6:bc:20:e1:e7:0d:b1:d8:ea:52:cd:
                    9a:d5:bf:a3:ae:e7:24:8b:64:36:e8:14:9d:f9:45:
                    8f:2d:0c:3d:2f:cf:9c:5b:de:6e:cd:58:d4:b7:f1:
                    8a:07:95:c8:c6:8a:2d:32:50:f6:e1:50:33:4f:f2:
                    7f:a6:78:36:89:60:f7:79:0e:b2:ec:87:a3:d2:7d:
                    65:ea:a6:83:ab:3f:7f:8e:01:4f:ad:19:6f:1e:0f:
                    c9:c2:6a:58:6c:f9:1c:65:b4:77:e0:fe:e4:15:8d:
                    51:df:06:bc:fb:e3:2e:90:ea:53:13:eb:43:bb:4a:
                    88:47:ea:98:d9:7e:f6:2b:db:da:c1:0f:2b:b9:9d:
                    cd:b9:75:c0:94:e7:e9:06:14:ac:90:07:1c:d1:69:
                    a3:9a:47:e4:b9:9a:75:b6:52:a8:0d:5a:27:af:b5:
                    b0:39:34:9a:3c:98:32:62:19:18:7c:5f:16:ca:23:
                    a6:6d:33:1d:d0:c1:cf:51:08:4b:27:a7:77:31:ac:
                    85:cc:2e:93:f5:a5:39:28:01:f3:a9:6d:e9:7d:ce:
                    48:d8:fb:b9:ac:77:6b:b6:e0:04:d7:82:6e:91:85:
                    fe:51:14:eb:fa:6a:7b:8c:f9:bc:77:35:f7:b6:58:
                    be:12:3a:eb:10:46:82:4f:a5:85:40:13:0d:27:91:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:4F:7F:6A:A7:F5:A2:F2:32:E3:E3:AA:0A:D6:CE:25:CE:99:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/60000e37-b527-3189-9379-65c88001b757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.30.192.0/18
                  69.197.128.0/18
                  173.208.128.0/17
                  204.12.192.0/18
                  208.110.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:b2:6f:c0:ab:3c:42:00:88:27:4d:5c:a7:1f:c6:28:4e:
         24:3f:cf:d8:70:68:3e:07:ed:f7:ca:bc:52:79:9c:f3:08:5b:
         fc:21:f2:99:a8:d5:82:97:3a:68:d3:52:ea:8e:e3:f6:95:4e:
         0b:7c:4f:8b:de:f8:30:ad:d9:03:e3:e7:d9:ac:da:93:bc:00:
         c0:e2:8e:80:b5:ae:65:f1:c0:81:39:dd:9b:6f:78:f2:76:a3:
         5a:1c:18:6b:52:f7:3b:ca:ff:3f:6d:eb:21:ae:96:ed:96:ae:
         74:a4:36:8a:51:d3:7d:2c:7f:28:a2:52:71:15:cd:34:b3:40:
         99:5d:14:76:63:9f:0b:31:80:a9:2a:80:2b:13:82:54:de:15:
         8b:59:38:6b:d8:00:d2:3d:23:a9:dc:1f:85:1b:b1:24:ee:d8:
         1a:e6:35:fa:6b:9a:e8:53:05:43:20:0a:40:4d:1b:a8:0a:d2:
         2e:38:3f:6b:06:8b:4f:32:6e:a9:a3:35:8c:d0:e5:1e:fb:9a:
         77:7b:6a:d6:ff:41:84:5d:e9:a3:bc:6e:1f:fb:61:23:8f:ba:
         46:2e:fd:60:57:1e:06:df:66:c9:33:8f:59:02:23:8e:82:ce:
         76:e0:06:41:46:e3:93:41:14:18:c6:8e:34:ea:1b:ec:ff:42:
         fa:77:fa:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 6 11:59:18 2024 by rpki-client on console-fra.rpki-client.org