Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa
File:                     f6cd7213-c676-3703-a01d-0a957230f88b.roa (raw, json)
Hash identifier:          c+V6bWamAP0d9qbfF6DgHVtLiEtEyoQWhLzDjmwV6rE=
Subject key identifier:   D7:75:B5:0E:42:F9:15:BD:B6:97:62:7F:35:1C:9B:06:E9:E7:01:DD
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F432858454272C254996094BEF9422300
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     394977
IP address blocks:        184.75.160.0/20 maxlen: 24
                          199.48.104.0/22 maxlen: 24
                          74.114.8.0/21 maxlen: 24
                          209.204.240.0/20 maxlen: 24
                          139.138.224.0/19 maxlen: 24
                          2620:132:f000::/36 maxlen: 48
                          2620:102:8000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c2:54:99:60:94:be:f9:42:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=1073c953-5dd8-4a1d-ac24-7d4c6b16d5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:ae:72:00:b0:7d:25:a9:b8:45:a1:53:83:
                    70:80:75:9b:7a:b2:4f:70:76:b9:15:0f:9f:c6:10:
                    da:9e:bb:f8:2f:ba:ec:88:9d:9d:bc:6b:2b:b6:17:
                    3e:97:b4:ef:ce:51:a0:50:4a:ad:a0:9f:e7:a0:a2:
                    02:d1:b8:2e:c8:0f:95:56:40:59:64:de:66:a8:ea:
                    16:c7:e3:b9:85:68:52:c8:52:ea:5a:c9:71:10:60:
                    f2:f4:03:7a:82:3d:35:61:b0:9d:a9:a1:a6:45:80:
                    76:ba:0b:18:92:db:0f:2c:de:2d:38:95:fb:1f:eb:
                    07:23:80:e7:46:0e:23:36:2a:3b:3d:f9:c2:ce:f3:
                    c9:f4:45:9f:74:12:0c:43:c8:be:58:87:e1:a1:4a:
                    bc:63:2b:3d:5f:b1:c2:94:b8:a1:66:e2:2c:a7:9d:
                    4e:11:e2:5a:d8:74:61:28:d8:b8:83:b6:85:f5:93:
                    f5:93:ee:9c:3f:f3:5f:87:7e:0c:ce:da:30:d8:c8:
                    63:e2:87:f3:8d:9d:2f:36:42:de:be:d1:66:24:25:
                    09:52:71:1c:65:bf:6c:b6:4d:5a:26:73:dc:f3:25:
                    01:e6:5f:39:6c:9b:36:d1:da:f2:0f:66:e0:9d:76:
                    a6:66:d7:90:8c:24:d0:52:3a:c2:e9:f9:48:bb:17:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:B5:0E:42:F9:15:BD:B6:97:62:7F:35:1C:9B:06:E9:E7:01:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.8.0/21
                  139.138.224.0/19
                  184.75.160.0/20
                  199.48.104.0/22
                  209.204.240.0/20
                IPv6:
                  2620:102:8000::/44
                  2620:132:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:51:48:05:e8:ac:ad:d1:9e:fe:ed:ab:7d:89:32:d1:28:de:
         08:c9:3d:2f:b9:1c:8d:3c:28:10:24:90:e8:86:be:a8:c7:94:
         84:5c:b3:6b:a0:5b:7f:0b:a8:f7:1c:06:16:ae:d6:b7:bb:36:
         db:86:4f:d9:3f:a3:dc:55:56:74:00:43:95:b2:c1:4a:43:09:
         d8:6a:80:bd:4a:23:c6:b6:eb:61:db:e2:e6:e4:88:8c:e0:5b:
         41:ee:44:c9:b1:72:d0:f8:20:57:28:0c:c2:a9:d7:2c:18:d8:
         12:7b:94:a0:8d:5a:97:09:b6:7d:90:f2:4d:80:a7:9e:d2:cf:
         97:16:40:4d:66:9a:6c:e8:af:58:dc:bd:be:11:f6:6f:ba:50:
         10:62:6b:05:54:f1:ad:fc:45:18:63:57:41:d1:7e:88:bb:d4:
         94:f0:a5:f5:4b:df:82:64:5a:01:70:ef:9c:21:54:50:9e:a7:
         f3:f4:ff:4c:3e:d8:e2:06:c9:4f:ef:31:3f:72:b7:4e:d9:52:
         b2:0f:58:b6:ee:69:8f:bd:43:db:33:24:92:3f:96:23:ff:49:
         54:b6:39:2c:9e:60:15:38:96:17:62:c0:1f:75:3c:fa:4f:14:
         df:5c:a7:09:1a:59:90:df:da:2d:6a:d9:aa:08:c8:f1:cc:6e:
         e4:86:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:43 2024 by rpki-client on console-ams.rpki-client.org