Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1deae8cb-3b65-3970-b4de-89fbd5922395.roa
File:                     1deae8cb-3b65-3970-b4de-89fbd5922395.roa (raw, json)
Hash identifier:          j6N1L2Cev5zugIAjovRquUTDY+leY72qJZDCoErxiZg=
Subject key identifier:   10:94:C6:D0:83:22:6F:F4:E9:96:0B:78:7D:18:82:06:FB:1D:1E:5A
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328583A0D0E16B67C84430696E5C960
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1deae8cb-3b65-3970-b4de-89fbd5922395.roa
Signing time:             Tue 30 Jul 2019 04:00:00 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     34011
IP address blocks:        132.148.0.0/16 maxlen: 24
                          68.178.128.0/17 maxlen: 24
                          23.229.128.0/17 maxlen: 24
                          45.40.128.0/18 maxlen: 24
                          50.62.0.0/15 maxlen: 24
                          72.167.0.0/16 maxlen: 24
                          97.74.0.0/16 maxlen: 24
                          104.238.64.0/18 maxlen: 24
                          148.72.0.0/16 maxlen: 24
                          160.153.0.0/16 maxlen: 24
                          166.62.0.0/17 maxlen: 24
                          173.201.0.0/16 maxlen: 24
                          184.168.0.0/16 maxlen: 24
                          192.169.128.0/17 maxlen: 24
                          192.186.192.0/18 maxlen: 24
                          198.12.128.0/17 maxlen: 24
                          198.71.128.0/17 maxlen: 24
                          208.109.0.0/16 maxlen: 24
                          216.69.128.0/18 maxlen: 24
                          2607:f208:d000::/43 maxlen: 43
                          2607:f208:df00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:0d:0e:16:b6:7c:84:43:06:96:e5:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=34e45e24-affe-475c-be99-ca236accb109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:74:4f:d5:fe:e4:a5:80:95:af:c3:63:b4:b3:
                    d3:27:fe:7d:be:e7:6d:ef:4e:d3:33:d1:a6:bf:d2:
                    2d:b5:f0:15:82:e8:c2:d1:51:20:c7:97:49:47:ef:
                    05:70:55:c7:3a:76:22:25:d7:46:99:04:08:66:c5:
                    af:94:17:af:eb:7d:6a:39:6b:93:4a:8f:ad:3a:3d:
                    e3:39:e3:0d:bb:42:d7:ad:b1:96:d1:13:16:be:90:
                    3a:e0:39:0d:aa:8f:7b:cd:30:7e:ea:88:d6:9d:e4:
                    48:f3:94:db:f0:b3:f2:d6:72:4a:ba:bc:f6:37:65:
                    7f:f1:ca:93:8a:e8:0a:f4:4f:df:9a:66:a8:5d:1c:
                    09:3d:4d:21:ed:db:d1:cd:a6:1c:86:f0:0c:cb:22:
                    38:47:3d:c4:ef:2b:83:ae:24:a4:99:db:c3:8d:ea:
                    2c:f7:a5:0c:b2:4f:88:5c:e7:93:3b:fa:55:b6:3d:
                    44:7f:33:4e:fc:74:80:07:a8:56:73:e3:61:b8:57:
                    18:70:fb:ad:db:9c:78:d8:d9:78:d2:44:57:31:f4:
                    61:a6:c8:32:c8:c2:3f:8d:b8:cd:4e:c2:fe:40:3d:
                    36:ca:2f:02:e8:8f:67:58:80:b3:a4:83:c5:b5:67:
                    69:c8:32:a4:8a:f4:46:65:04:68:02:2b:a8:26:79:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:C6:D0:83:22:6F:F4:E9:96:0B:78:7D:18:82:06:FB:1D:1E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1deae8cb-3b65-3970-b4de-89fbd5922395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.229.128.0/17
                  45.40.128.0/18
                  50.62.0.0/15
                  68.178.128.0/17
                  72.167.0.0/16
                  97.74.0.0/16
                  104.238.64.0/18
                  132.148.0.0/16
                  148.72.0.0/16
                  160.153.0.0/16
                  166.62.0.0/17
                  173.201.0.0/16
                  184.168.0.0/16
                  192.169.128.0/17
                  192.186.192.0/18
                  198.12.128.0/17
                  198.71.128.0/17
                  208.109.0.0/16
                  216.69.128.0/18
                IPv6:
                  2607:f208:d000::/43
                  2607:f208:df00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:8d:6a:d4:28:0b:49:04:be:ab:68:b3:60:e2:09:35:3a:
         fb:3f:ea:79:28:c8:e6:63:ce:19:1e:12:56:d2:30:5d:fc:74:
         a6:11:d8:bc:81:fb:11:28:d2:d0:e8:29:cd:7f:5f:c4:46:3f:
         63:e3:5a:80:79:56:72:e8:e4:ce:51:b0:02:f3:25:dd:2e:e8:
         67:49:aa:19:b7:bc:91:46:6b:26:11:4c:07:7c:c7:cf:95:9a:
         2c:09:98:56:4b:0d:41:55:d4:bc:7e:bc:5c:3a:fb:82:15:47:
         24:c8:c6:3d:9f:10:62:12:21:07:62:e8:8d:4d:da:20:aa:35:
         44:1d:93:b8:3d:51:c5:24:88:37:40:94:bf:39:fa:5c:97:d4:
         d9:8f:a7:c9:12:48:b6:c6:78:f6:40:6f:99:0b:a8:4c:ec:8f:
         2c:72:4d:de:1c:91:e0:0b:5c:5e:a9:74:11:e3:f5:a2:59:d2:
         14:6a:ae:a5:e6:71:61:e5:a3:2a:01:57:16:8c:12:94:48:3e:
         39:2e:06:b8:9d:9c:72:0a:db:8f:8c:61:67:8e:97:fd:b5:70:
         84:03:f9:70:ec:19:c9:9f:03:c1:9b:e9:f4:9a:b4:18:85:40:
         c6:c6:38:88:eb:0c:7e:cf:85:ef:40:2b:19:87:7b:31:55:b1:
         67:ed:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:21:12 2024 by rpki-client on console-ams.rpki-client.org