Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
File:                     28f9e361-2a40-3533-ae86-3037006c7eda.roa (raw, json)
Hash identifier:          6GicqhwrbW2aN8pVx5FCTO8v2QUq5+siNZu78T7dVqQ=
Subject key identifier:   89:08:C4:C5:A6:48:2A:96:4E:F9:58:2E:55:59:FF:03:A0:61:8E:3A
Certificate issuer:       /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial:       010D0C9F43285845B69E95ECF3F4912FBDB199E0
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
Signing time:             Tue 30 Apr 2024 03:42:43 +0000
ROA not before:           Tue 30 Apr 2024 03:42:43 +0000
ROA not after:            Mon 29 Jul 2024 03:42:43 +0000
asID:                     25914
IP address blocks:        65.49.152.0/21 maxlen: 21
                          108.160.88.0/24 maxlen: 24
                          132.147.240.0/20 maxlen: 20
                          65.49.152.0/22 maxlen: 22
                          65.49.156.0/22 maxlen: 22
                          108.160.80.0/24 maxlen: 24
                          108.160.84.0/22 maxlen: 22
                          2607:2900::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:9e:95:ec:f3:f4:91:2f:bd:b1:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
        Validity
            Not Before: Apr 30 03:42:43 2024 GMT
            Not After : Jul 29 03:42:43 2024 GMT
        Subject: CN=742e0495-c301-440d-990a-a25c2a2ab7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:16:28:f0:8e:a8:64:54:64:6c:b7:85:84:
                    27:69:bc:bd:46:40:96:93:f2:5c:95:61:7b:a2:27:
                    65:77:64:90:23:72:ca:d5:00:fc:71:a9:76:56:5a:
                    e4:b0:91:14:30:be:1c:be:10:3e:73:94:3b:b0:00:
                    f0:eb:01:b3:83:07:87:1a:f6:e8:e8:7b:28:af:76:
                    28:d0:0b:60:c1:31:79:d9:9b:4c:89:55:da:9b:0f:
                    94:c7:e5:d3:83:11:db:8f:83:87:16:0e:33:fd:21:
                    60:3f:9e:e0:d4:0a:9d:eb:f7:9a:5e:0b:d0:da:f5:
                    ad:6b:eb:29:6d:f4:36:c7:42:5e:ce:de:15:07:26:
                    86:aa:fd:44:78:12:6f:af:33:f1:f1:04:17:c0:1e:
                    92:f0:97:36:3c:fd:5b:88:92:b3:c4:11:d1:6b:a0:
                    48:59:3e:3d:74:f3:73:5d:ef:36:22:ee:17:11:99:
                    a6:0a:cb:93:14:44:07:e5:b5:92:4b:0d:21:e3:e1:
                    ac:74:59:ac:26:3c:ed:c7:8e:33:84:ae:0d:16:d2:
                    84:bc:40:48:3f:2d:af:60:a5:5d:5f:44:f0:5f:ff:
                    08:95:7a:9b:8b:8f:44:82:21:88:3c:63:fb:9f:22:
                    86:fb:1f:8c:2e:58:6c:fa:5f:96:f0:41:1e:44:a5:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:08:C4:C5:A6:48:2A:96:4E:F9:58:2E:55:59:FF:03:A0:61:8E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.152.0/21
                  108.160.80.0/24
                  108.160.84.0-108.160.88.255
                  132.147.240.0/20
                IPv6:
                  2607:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:0f:c4:d7:0a:d0:39:ae:89:56:ee:ca:75:52:f1:bb:8b:
         bf:d9:98:89:11:da:9b:7b:55:36:3b:c6:a7:49:ad:34:af:ec:
         1d:3d:b4:b6:a7:02:67:4e:d9:5c:a1:24:0a:84:0a:fe:e8:2b:
         51:36:dc:2a:a7:b8:44:64:6e:e7:06:7e:bc:f2:3f:60:ba:05:
         9a:59:18:5f:fb:38:73:23:2e:33:ee:70:8c:1f:26:a7:01:39:
         30:61:40:a1:e5:17:e9:36:d1:db:f3:50:05:11:f3:aa:8f:05:
         3e:7f:37:23:e2:df:91:bf:74:de:22:96:cc:8a:6f:36:c9:1a:
         e1:20:0b:b6:31:d7:ce:01:d8:92:ce:4a:83:85:c3:1b:c9:ad:
         f1:10:67:d1:19:a4:2a:cb:15:9d:02:db:74:28:2e:8b:fb:f7:
         2d:43:47:14:45:8b:8d:22:9b:2c:8c:f3:b1:ae:02:09:2d:67:
         83:25:c5:99:f5:6a:3b:88:e8:9c:ec:dc:f5:09:19:b5:8a:91:
         25:c2:d7:bc:61:ed:db:42:0f:9a:47:0e:32:2c:a2:6a:37:fe:
         2b:08:d2:4d:9b:d2:ca:a7:c3:bb:ea:1c:86:0a:cd:21:c6:62:
         04:31:14:25:02:a2:24:04:ee:50:6c:96:82:94:7a:55:1a:c0:
         f4:66:47:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:54:56 2024 by rpki-client on console-fra.rpki-client.org