Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/368e42e8-4798-3891-9539-e7c34fd2c6cf.roa
File:                     368e42e8-4798-3891-9539-e7c34fd2c6cf.roa (raw, json)
Hash identifier:          TjyJCG0Tsek2Ggls53QUSqNvZbB3CRqmjK+KD93/iOQ=
Subject key identifier:   B5:C4:6A:3C:C0:39:DE:CD:91:D0:FB:09:DD:16:60:39:BC:0E:CC:99
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328583A0D0DCA6A93FE504FC8586B70
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/368e42e8-4798-3891-9539-e7c34fd2c6cf.roa
Signing time:             Tue 30 Jul 2019 04:00:00 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     21501
IP address blocks:        132.148.0.0/16 maxlen: 24
                          68.178.128.0/17 maxlen: 24
                          23.229.128.0/17 maxlen: 24
                          45.40.128.0/18 maxlen: 24
                          50.62.0.0/15 maxlen: 24
                          72.167.0.0/16 maxlen: 24
                          97.74.0.0/16 maxlen: 24
                          104.238.64.0/18 maxlen: 24
                          148.72.0.0/16 maxlen: 24
                          160.153.0.0/16 maxlen: 24
                          166.62.0.0/17 maxlen: 24
                          173.201.0.0/16 maxlen: 24
                          184.168.0.0/16 maxlen: 24
                          192.169.128.0/17 maxlen: 24
                          192.186.192.0/18 maxlen: 24
                          198.12.128.0/17 maxlen: 24
                          198.71.128.0/17 maxlen: 24
                          208.109.0.0/16 maxlen: 24
                          216.69.128.0/18 maxlen: 24
                          2607:f208:d000::/43 maxlen: 43
                          2607:f208:df00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:0d:0d:ca:6a:93:fe:50:4f:c8:58:6b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=9af28f68-542d-42df-ad51-9459ba1c751e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:7d:13:8d:25:76:38:c2:38:85:9e:d6:a8:
                    3b:ed:67:8e:9e:97:8d:60:b0:a0:ac:5f:44:fa:04:
                    a4:0a:85:54:ad:3b:3b:08:dd:c0:02:6d:6b:23:4d:
                    9a:b3:85:76:f3:8b:09:90:d9:a9:c7:6b:61:15:2b:
                    b8:6e:03:45:e2:36:44:c0:fa:c0:d7:ae:44:37:04:
                    a6:e0:7f:5c:f6:73:92:5d:22:12:6f:a9:b7:49:ad:
                    92:fa:db:72:98:c4:65:f6:da:bd:7c:34:1e:8c:a5:
                    3f:84:7a:6c:15:1c:97:e3:ff:0c:e4:88:6f:32:ae:
                    a0:dd:b7:ea:5e:75:81:35:28:77:09:17:51:4f:e8:
                    80:45:b6:f6:f4:13:04:f0:e7:c6:b6:15:81:12:66:
                    cc:f0:78:59:3f:2f:9b:a6:89:10:18:c3:7c:0d:b3:
                    7b:77:8e:45:e8:f5:b5:c2:a4:f0:ff:df:85:20:c3:
                    6f:31:5a:9f:40:97:49:60:28:3b:aa:09:d7:34:77:
                    5b:ac:8c:10:19:c4:6f:a5:c3:68:82:01:9e:9b:1e:
                    c1:0e:66:d8:9a:11:54:70:78:17:ce:f0:59:08:7f:
                    2e:b2:30:fb:de:73:e1:5a:5e:ee:8e:7e:b1:af:3c:
                    9a:aa:52:b4:ab:4e:62:13:bb:f5:d0:5f:d9:0d:d3:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C4:6A:3C:C0:39:DE:CD:91:D0:FB:09:DD:16:60:39:BC:0E:CC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/368e42e8-4798-3891-9539-e7c34fd2c6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.229.128.0/17
                  45.40.128.0/18
                  50.62.0.0/15
                  68.178.128.0/17
                  72.167.0.0/16
                  97.74.0.0/16
                  104.238.64.0/18
                  132.148.0.0/16
                  148.72.0.0/16
                  160.153.0.0/16
                  166.62.0.0/17
                  173.201.0.0/16
                  184.168.0.0/16
                  192.169.128.0/17
                  192.186.192.0/18
                  198.12.128.0/17
                  198.71.128.0/17
                  208.109.0.0/16
                  216.69.128.0/18
                IPv6:
                  2607:f208:d000::/43
                  2607:f208:df00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:e7:1c:da:e3:92:ac:99:c3:df:fe:67:87:45:69:14:57:
         f3:e8:ff:a9:60:e6:98:f0:8f:28:d0:d8:75:37:a3:82:3a:71:
         46:00:66:cf:f9:f0:64:1e:e8:75:c8:0a:13:2b:18:56:2a:e0:
         c9:a6:8f:97:a8:1d:db:5d:6f:91:8a:43:88:ac:b7:06:01:c0:
         9a:8a:00:91:bf:6f:20:df:b0:39:99:a0:4e:76:55:97:d6:0f:
         5a:74:9c:4d:d2:b9:ce:ca:3f:18:a7:28:24:53:a5:a0:cc:93:
         23:93:ee:f8:89:b1:ab:2c:d9:83:1b:cc:07:b8:d6:91:32:73:
         52:df:4f:aa:a0:fe:b2:57:97:9f:f0:1d:6b:e6:e7:3e:bf:61:
         5a:f7:cb:be:83:b9:8f:a7:ab:38:de:ad:01:2b:c2:56:6b:ac:
         8d:0b:d9:fa:b5:bf:f1:8e:0b:ed:ad:2a:c1:de:33:29:2c:55:
         06:50:5e:b9:25:3a:a3:97:51:8c:68:91:e6:05:0e:bc:96:0e:
         1b:83:62:c4:00:51:91:8a:b7:de:1c:be:da:34:d0:41:9c:4c:
         09:02:60:17:67:60:4c:af:58:0a:41:90:d1:57:fd:79:26:10:
         af:2f:68:81:d3:ec:40:07:be:db:a7:48:9a:47:23:d2:1c:13:
         a5:36:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:05 2024 by rpki-client on console-ams.rpki-client.org