Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
File:                     2f128b9d-1500-3392-9a71-877eea156886.roa (raw, json)
Hash identifier:          KMWRLGbiGNbrbz1q23NpMPU403wfWWHGhhtZYhPweTg=
Subject key identifier:   35:DD:FD:9A:6F:C5:4E:B5:07:AB:F2:E1:50:F1:ED:10:9E:10:AD:DB
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285844FCC56B703DA71E87BDF2A980
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     26496
IP address blocks:        72.10.32.0/19 maxlen: 24
                          70.32.64.0/18 maxlen: 24
                          216.70.64.0/18 maxlen: 24
                          205.186.128.0/18 maxlen: 24
                          72.47.192.0/18 maxlen: 24
                          64.207.128.0/18 maxlen: 24
                          64.13.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:6b:70:3d:a7:1e:87:bd:f2:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=93c225c0-1b37-4781-9ac2-6fe6a9679e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:d2:f6:d5:68:a3:80:df:93:03:cb:c1:f9:
                    cf:cd:3d:06:15:a1:4f:2b:3b:e3:c8:b4:68:7b:a2:
                    07:96:46:d2:ec:76:13:5c:1a:85:3a:2a:0c:9f:27:
                    20:ee:63:11:ff:5f:bb:89:15:92:58:8d:fa:75:72:
                    a7:bb:a2:27:e2:b9:75:d0:04:42:33:13:53:e7:8f:
                    fb:88:66:02:32:6e:e8:2d:02:93:cc:4b:33:10:2e:
                    85:51:c4:8f:b3:c6:c2:a3:58:05:e7:5d:3a:fe:d9:
                    29:0d:36:61:41:e0:e0:06:f9:1c:5a:68:07:2b:3f:
                    fc:d9:01:12:1d:b0:b2:4f:05:75:f8:59:6d:c5:2f:
                    c9:77:37:82:3e:50:2a:de:24:c0:be:ea:9c:ac:b6:
                    96:e0:47:19:f8:e9:06:42:5a:4b:7b:09:d1:43:18:
                    d8:ad:cc:e3:a7:8b:c3:99:2c:b8:e7:c9:96:15:73:
                    be:f8:d7:76:6b:32:9c:35:8c:09:0c:ae:24:25:5a:
                    82:be:42:9b:10:5b:ed:99:4b:6b:8e:47:ea:25:90:
                    66:0d:85:05:ba:79:a1:e0:53:b1:31:58:9d:eb:83:
                    46:f0:78:22:3d:a3:62:ef:d2:90:f6:8b:e8:51:83:
                    90:57:4a:fd:58:84:4f:da:63:ca:66:8b:93:1a:96:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:FD:9A:6F:C5:4E:B5:07:AB:F2:E1:50:F1:ED:10:9E:10:AD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.192.0/18
                  64.207.128.0/18
                  70.32.64.0/18
                  72.10.32.0/19
                  72.47.192.0/18
                  205.186.128.0/18
                  216.70.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:83:52:11:2b:25:d8:29:ef:cb:5d:12:2c:ac:43:4c:1a:
         4e:6d:ce:e6:6d:6b:f2:52:69:4d:0f:a1:17:47:3a:09:9a:1b:
         b4:73:14:60:d7:1c:7d:46:32:00:ac:53:25:7e:c1:44:d8:63:
         a8:6e:35:a1:cb:2b:d5:0a:a8:c6:e6:09:f1:80:6e:9f:6f:f3:
         a5:e0:6f:55:55:89:f7:8d:5e:56:85:5e:d5:b9:9d:79:ed:6d:
         2c:36:06:f5:7d:c5:81:e5:9a:aa:2a:49:76:2c:a3:4b:77:48:
         69:7b:1f:68:e7:18:4e:9d:19:c8:35:07:34:9a:7d:4f:8f:ed:
         61:c9:2f:2d:5f:d8:c7:ed:49:56:bd:9a:fc:9c:a4:4b:bb:16:
         66:08:cc:d1:f1:01:7e:e7:0a:d6:cc:99:46:b1:ea:e7:3e:a5:
         0c:6a:e8:e1:c6:13:25:07:ed:a9:8d:9b:ed:13:ab:4a:3e:70:
         8c:e5:09:64:cb:e6:21:84:b2:59:2b:2f:c1:91:82:a7:ec:93:
         89:ad:cd:f1:ed:e9:7b:62:4a:b0:3c:73:8d:38:3f:42:c1:81:
         ff:b8:ca:04:d8:99:d1:98:ec:96:ee:22:d9:a9:29:82:56:59:
         42:fd:ca:29:ce:d0:f0:98:5e:bf:c2:ad:2c:49:86:aa:c7:ab:
         d0:32:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:35:52 2024 by rpki-client on console-ams.rpki-client.org