Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
File:                     ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json)
Hash identifier:          WJwDksdIMSYfOWbEwRSBoq07si0zol9N5fyK/uRxxYk=
Subject key identifier:   5F:A0:66:CC:AF:6F:57:07:A3:EC:FF:1F:55:8C:D6:08:FA:72:31:64
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F4328584589A3173E77366D29B0FCD480
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     21693
IP address blocks:        192.234.140.0/24 maxlen: 24
                          192.234.139.0/24 maxlen: 24
                          198.179.155.0/24 maxlen: 24
                          198.179.154.0/24 maxlen: 24
                          192.234.137.0/24 maxlen: 24
                          170.152.0.0/16 maxlen: 24
                          192.234.136.0/24 maxlen: 24
                          198.179.156.0/24 maxlen: 24
                          192.234.138.0/24 maxlen: 24
                          198.179.151.0/24 maxlen: 24
                          198.179.153.0/24 maxlen: 24
                          198.179.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:17:3e:77:36:6d:29:b0:fc:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=627956ee-5330-4288-a473-bd9e297683e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:22:2d:dd:c5:cd:42:51:f1:3f:1d:89:1e:
                    54:f1:f2:24:de:06:ab:5a:a7:fa:84:8c:1c:92:e5:
                    f7:b0:fa:71:01:c8:2b:9f:e6:ed:30:3e:f6:d9:ac:
                    1a:90:22:82:45:b1:b8:ec:e4:c6:b1:0b:61:e6:89:
                    54:10:7d:25:04:87:c8:f9:17:6a:de:a7:67:10:3a:
                    3d:f0:22:05:d5:1a:6f:40:0c:37:b1:0f:16:da:d2:
                    c2:cd:3f:04:94:0a:3d:91:6c:c6:c5:15:91:c1:bd:
                    e6:73:1b:19:3a:b5:dc:11:d1:99:57:3b:e0:0d:d6:
                    d6:07:26:fb:dc:cd:3f:77:70:f6:ca:c8:9c:ed:17:
                    e9:17:47:ba:cb:d1:84:0e:d5:ef:6c:87:77:de:ac:
                    ff:01:93:b0:8d:7f:fc:7a:30:a5:b7:bc:48:13:50:
                    b1:a7:95:d4:9a:79:99:e8:07:63:6a:23:06:5b:34:
                    73:69:24:13:33:ce:05:aa:0d:5b:ed:c2:1e:eb:a7:
                    5d:43:c3:b9:45:b9:55:03:d8:50:34:5b:10:ee:18:
                    e6:44:4f:d4:f4:25:aa:8a:05:84:24:62:f8:6d:c4:
                    0c:66:a6:21:e5:a5:25:1a:b7:b0:cf:82:f8:26:2f:
                    a2:c9:05:31:fc:42:a6:7c:fd:c8:69:77:dd:bc:af:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A0:66:CC:AF:6F:57:07:A3:EC:FF:1F:55:8C:D6:08:FA:72:31:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.152.0.0/16
                  192.234.136.0-192.234.140.255
                  198.179.151.0-198.179.156.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:af:81:ac:47:81:fb:0a:ac:81:e2:78:50:a4:d7:e5:84:
         bd:01:a6:50:d9:9b:c0:8e:2e:79:90:85:ee:48:9d:fc:e6:7a:
         b9:be:d2:f2:18:d0:96:45:ee:e2:97:82:09:77:72:79:f2:5c:
         50:31:bd:ec:2c:2c:44:9b:ba:5d:2d:9f:b3:07:85:ea:70:99:
         53:74:63:ee:28:2e:a1:e7:11:68:4e:76:19:39:b2:5d:c0:d4:
         bc:c5:d6:3b:e7:59:9f:7e:8b:b4:8d:ed:e8:bc:05:6f:86:7c:
         cf:6d:d4:d0:c6:d3:0e:d3:11:70:b2:e9:e1:82:1f:af:49:66:
         54:c8:07:9a:87:ee:41:69:0b:13:2d:f9:e6:22:0f:7a:1b:9a:
         fa:a4:d1:a6:c0:69:32:b8:bf:02:27:8d:e3:5e:08:d8:3b:9a:
         9b:1d:b7:8a:c9:2a:8d:fb:49:0d:06:d2:c8:85:5d:db:e3:96:
         2a:df:41:64:c6:f0:ad:2a:5b:fc:80:56:77:44:a8:b3:bd:cc:
         e8:09:00:18:0b:f7:cf:5f:b8:f1:c0:1d:50:db:d9:68:02:53:
         37:96:66:f0:19:fe:22:0b:ef:7c:86:e7:62:00:21:54:e4:4d:
         e4:d3:9d:67:c2:49:f5:1c:de:d9:12:4d:f8:75:2c:8b:d5:ad:
         69:67:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:51:06 2024 by rpki-client on console-fra.rpki-client.org