Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/b6170ee8-4161-3ab7-9298-2c1387fe69e6.roa
File:                     b6170ee8-4161-3ab7-9298-2c1387fe69e6.roa (raw, json)
Hash identifier:          QPQT1Z6sCNbRRs2zlProbiQpq7s5HFciEKeTsn3jg/w=
Subject key identifier:   34:CC:FD:E7:D2:A2:FF:F7:BD:31:65:97:5C:0C:06:23:30:2C:3C:DB
Certificate issuer:       /CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
Certificate serial:       010D0C9F43285845068AC806D4E32146CC9EEC80
Authority key identifier: 25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/b6170ee8-4161-3ab7-9298-2c1387fe69e6.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     203177
IP address blocks:        66.129.176.0/20 maxlen: 20
                          67.226.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c8:06:d4:e3:21:46:cc:9e:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=79bc4766-8bff-4521-8400-5c07ba1dbeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:c8:69:7a:66:2c:81:0d:e4:75:c1:bb:64:
                    b5:77:7a:fe:15:40:89:23:e7:3d:4a:cf:2d:96:39:
                    43:a2:f4:40:af:99:08:92:03:0b:3f:3e:c5:a8:1d:
                    79:36:74:db:52:00:e3:7e:97:45:5b:f0:c2:89:15:
                    86:bc:cb:d0:c5:5f:d4:e0:0a:4b:48:15:72:aa:87:
                    e6:5b:67:eb:5d:37:da:87:fb:d6:66:a9:0c:f9:d2:
                    c1:ff:ce:e5:72:f6:2e:ca:68:70:6e:81:7c:ec:4d:
                    16:68:e5:3c:81:15:d2:8d:bc:66:8f:50:40:b2:42:
                    d7:80:4a:be:91:85:1f:94:03:52:1f:8d:1d:cf:cb:
                    6e:0b:cb:52:42:6a:a1:c9:2f:12:82:fd:f5:e3:d0:
                    70:d8:86:95:61:f5:4e:2d:30:cf:02:21:20:5e:f1:
                    42:dc:65:bb:ba:bc:91:7d:93:d7:5d:38:55:3d:47:
                    97:2f:d0:7c:77:b4:17:3b:3f:26:8b:7d:84:22:fe:
                    9c:f3:a7:1f:28:7c:e8:5f:19:c7:42:9e:7e:2b:f2:
                    8f:a0:d9:6d:50:42:53:b1:9a:a7:0d:70:c3:5a:3a:
                    da:3c:4e:a3:b5:06:94:a8:36:33:76:59:67:b6:f4:
                    c7:4d:2f:46:ed:ff:4d:08:b5:63:08:9e:02:23:0a:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CC:FD:E7:D2:A2:FF:F7:BD:31:65:97:5C:0C:06:23:30:2C:3C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/b6170ee8-4161-3ab7-9298-2c1387fe69e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.crl

            X509v3 Authority Key Identifier:
                keyid:25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.176.0/20
                  67.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ee:3c:a2:0f:7f:35:0e:b0:8e:79:7d:9a:dd:5b:5a:af:26:fb:
         e8:58:69:e4:d0:df:0f:f6:5b:a1:7a:8a:af:77:80:5d:32:a5:
         de:4e:d7:bd:5c:14:9a:40:a9:1a:eb:d1:e1:8f:13:03:9d:5c:
         bf:15:65:ff:ee:58:bc:f0:c3:4d:ef:a4:9b:26:0f:94:34:a3:
         96:5b:c9:ef:00:6a:c5:e9:1f:d7:d4:68:b9:90:bd:66:96:1e:
         0b:5b:35:1c:77:d3:7c:3f:4d:b0:52:da:fc:29:89:da:06:4c:
         5c:38:4f:4d:39:be:49:dc:f4:79:6d:2c:61:41:25:c9:61:f1:
         42:a0:dc:77:4b:82:4f:b5:8c:a8:a8:f2:f7:d6:94:8b:10:c2:
         b6:eb:e1:29:ad:b5:72:f5:be:99:fa:14:95:64:42:34:9f:54:
         22:c5:33:62:cc:07:83:aa:36:4b:70:cf:cc:c0:cb:c6:8e:e4:
         ca:1c:84:b4:b5:89:c0:a8:d0:ef:a7:94:ed:58:44:ff:66:98:
         45:c7:af:07:7f:a1:7e:6c:93:7c:ec:2a:90:2a:8e:7d:81:68:
         be:e1:aa:01:23:08:39:0c:ef:fe:8a:ba:9a:ec:39:37:90:ab:
         3c:17:99:70:32:7f:64:e0:0b:4d:90:9e:8d:36:74:18:7e:c0:
         4f:ec:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:56 2024 by rpki-client on console-ams.rpki-client.org