Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
File:                     c185bc49-3533-373b-bbc3-00f946055c50.roa (raw, json)
Hash identifier:          7Cloj5YEfc4aVCMangqnsZNY8/rVUkbiPjCeIVt8w3s=
Subject key identifier:   0B:EA:31:36:45:66:AA:BC:F8:CC:BC:07:62:80:A7:91:E9:EA:D6:EF
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584589A3242E28B3B4E92F3E4380
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     22606
IP address blocks:        66.231.80.0/20 maxlen: 24
                          68.232.192.0/20 maxlen: 24
                          136.147.176.0/20 maxlen: 24
                          199.122.120.0/21 maxlen: 24
                          198.245.80.0/20 maxlen: 24
                          136.147.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:24:2e:28:b3:b4:e9:2f:3e:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=68a5f669-2c78-4d19-9c4a-be449cc3ef03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:21:ad:bc:dd:09:58:ff:b9:8a:99:65:12:
                    36:1b:e8:3e:26:d6:06:5d:05:20:68:d7:72:28:80:
                    db:56:04:fb:c7:20:74:57:e2:92:bd:ff:1c:b2:fc:
                    ab:ac:d7:94:79:88:e1:33:11:1a:fa:db:11:5a:8e:
                    fc:a1:2e:1e:28:54:a1:41:b1:1b:55:56:04:b0:00:
                    61:1a:02:29:0f:1c:1a:05:95:e6:3f:13:2e:b2:28:
                    f3:1b:92:d9:df:1e:a9:2c:9b:bf:ca:9b:17:d6:78:
                    2d:d2:6b:c4:66:1f:be:e4:d3:ad:b8:6b:52:ad:61:
                    09:7a:5c:4d:20:9d:b3:b7:cd:7e:aa:67:95:71:29:
                    d1:2a:51:b8:91:a1:83:e3:0b:cb:a4:ba:40:d6:fb:
                    2b:ab:59:2b:d2:6b:72:2e:e5:99:31:f7:7f:09:d1:
                    dc:88:c8:7e:1c:fc:8d:98:cc:53:9e:2e:5f:6b:bc:
                    7c:f9:03:85:87:91:15:d7:76:6f:22:90:be:8e:6a:
                    84:21:f9:cc:37:de:61:2f:3d:00:97:52:b2:ec:7f:
                    a8:be:3c:8e:c2:9f:8c:c7:a7:16:1c:4f:2c:a8:d9:
                    eb:34:2d:e2:a8:24:37:5a:8a:f7:98:20:2c:30:62:
                    8f:52:ca:d1:53:43:de:18:84:c3:1b:94:78:9a:e3:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EA:31:36:45:66:AA:BC:F8:CC:BC:07:62:80:A7:91:E9:EA:D6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.80.0/20
                  68.232.192.0/20
                  136.147.128.0/20
                  136.147.176.0/20
                  198.245.80.0/20
                  199.122.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d7:c2:d8:b3:8d:44:aa:e8:90:34:e0:60:42:1b:9a:7a:b2:
         50:b0:a5:2c:6e:34:2c:e2:96:ef:b5:48:93:4c:2b:d2:8f:62:
         e5:33:b7:e0:f2:7d:2f:7b:17:60:91:77:4d:0e:f2:f1:01:be:
         dc:04:ed:f4:60:57:78:c1:ad:19:62:8a:6f:f8:a7:8e:e1:ee:
         2b:45:bc:2e:7b:21:40:f2:17:e1:97:73:56:1e:16:ca:c7:25:
         a9:1c:41:28:03:47:b9:77:0a:8b:2a:21:69:04:02:2f:1d:56:
         46:42:53:4b:07:82:08:57:c2:ef:49:13:28:a1:ea:0e:f1:05:
         7d:5c:b6:43:61:1f:fe:9c:bf:c2:c8:ee:57:d2:94:09:42:ce:
         08:37:a3:5c:92:43:6e:c9:8b:5a:11:1a:9e:82:20:47:85:71:
         5f:03:5e:55:39:fc:8a:cc:95:49:cb:f7:52:d6:7f:da:46:40:
         86:12:50:41:43:b1:5e:b3:c7:9a:6e:ba:c1:2e:f4:c8:d9:55:
         9c:42:21:18:2e:cd:50:2c:57:20:88:7d:2f:02:76:0a:73:26:
         98:a6:64:47:4d:f6:65:5c:22:74:05:87:f9:82:5e:52:a5:6c:
         51:44:5c:66:7a:9c:cb:3b:c5:55:5b:c0:47:c1:49:9f:51:3a:
         7a:4a:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:49:03 2024 by rpki-client on console-ams.rpki-client.org