Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa
File:                     68d1a941-51ad-3750-8235-b215425c89f4.roa (raw, json)
Hash identifier:          Vt4ZqrjO0ZEAGwlfiIRWBcZCau/gzRVWmajg2cIPVfM=
Subject key identifier:   44:79:B1:45:1A:49:C6:33:64:76:76:90:3A:6A:C2:2C:37:45:FE:D0
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F43285845920324A47A479F5329158E00
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa
Signing time:             Wed 17 Apr 2024 01:00:24 +0000
ROA not before:           Wed 17 Apr 2024 01:00:24 +0000
ROA not after:            Tue 16 Jul 2024 01:00:24 +0000
asID:                     19905
IP address blocks:        167.245.245.0/24 maxlen: 24
                          167.245.243.0/24 maxlen: 24
                          167.245.24.0/22 maxlen: 22
                          167.245.20.0/22 maxlen: 22
                          167.245.36.0/22 maxlen: 22
                          167.245.32.0/22 maxlen: 22
                          167.245.28.0/22 maxlen: 22
                          167.245.247.0/24 maxlen: 24
                          167.245.62.0/23 maxlen: 23
                          167.245.56.0/22 maxlen: 22
                          167.245.54.0/23 maxlen: 23
                          167.245.104.0/22 maxlen: 22
                          167.245.88.0/22 maxlen: 22
                          167.245.64.0/20 maxlen: 20
                          167.245.92.0/22 maxlen: 22
                          167.245.12.0/22 maxlen: 22
                          167.245.160.0/19 maxlen: 19
                          167.245.16.0/22 maxlen: 22
                          167.245.139.0/24 maxlen: 24
                          167.245.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:92:03:24:a4:7a:47:9f:53:29:15:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Apr 17 01:00:24 2024 GMT
            Not After : Jul 16 01:00:24 2024 GMT
        Subject: CN=7667aa37-c5ca-431e-af51-d1698a32c179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:29:57:c7:df:e5:1a:6b:2b:86:b1:78:ad:
                    e2:e2:58:d0:22:90:a8:7e:12:7a:86:b8:19:66:31:
                    94:3a:b2:bb:d0:b3:a0:29:82:9c:2b:ad:a7:74:24:
                    d3:d1:8d:36:14:97:37:14:12:de:a4:1e:25:90:0d:
                    10:62:cb:b8:18:79:21:18:6b:fb:28:1a:0b:bf:c7:
                    05:38:68:69:bd:19:3f:8e:e0:c6:dc:31:fd:a8:48:
                    3b:22:c9:27:89:af:c8:fb:54:38:6a:f6:85:15:03:
                    59:13:36:bd:c4:5a:1d:07:e5:ae:32:8e:dc:ca:a9:
                    31:5a:24:e6:af:fa:6e:13:4e:0c:46:54:6a:09:b7:
                    98:74:5a:73:78:79:c0:36:06:42:36:aa:38:7f:18:
                    54:86:7a:c3:74:19:2f:89:3f:82:73:f8:43:2f:2c:
                    4c:17:07:13:48:04:35:2d:cf:41:d0:86:9e:ac:ae:
                    a4:cb:ed:cc:24:9e:03:c9:e7:17:1b:57:ed:09:7c:
                    c8:f4:31:00:d3:73:3d:1c:5c:3e:29:92:93:f2:84:
                    15:e0:24:6d:5a:2c:e4:50:20:a2:5b:8f:60:ec:fc:
                    53:ce:46:34:d7:16:3b:77:5b:50:b0:5d:6e:30:77:
                    80:5e:34:af:b6:c0:e9:5f:e9:37:1f:02:7b:85:6d:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:79:B1:45:1A:49:C6:33:64:76:76:90:3A:6A:C2:2C:37:45:FE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.8.0-167.245.39.255
                  167.245.54.0-167.245.59.255
                  167.245.62.0-167.245.79.255
                  167.245.88.0/21
                  167.245.104.0/22
                  167.245.139.0/24
                  167.245.160.0/19
                  167.245.243.0/24
                  167.245.245.0/24
                  167.245.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:96:66:b1:7b:52:9b:82:68:0b:13:6b:47:63:c4:0a:be:
         60:d8:06:55:c9:7b:82:e0:61:db:ce:66:9a:ed:12:db:18:de:
         4e:f0:67:7e:c3:86:20:d2:78:76:87:37:21:c3:3e:75:c7:fa:
         0b:73:5f:57:f6:ab:f3:d8:2e:57:b6:b1:30:95:d4:52:89:72:
         d8:3f:43:ff:ae:b9:15:6f:4f:70:b3:ec:a9:fb:1e:c0:c6:1a:
         e8:4b:d0:ba:b7:a5:c4:df:11:82:a4:be:10:ca:1a:66:b0:21:
         e3:00:c3:7d:7f:38:67:05:63:4a:53:ca:87:16:16:6f:68:20:
         77:bb:ff:e8:74:46:e3:15:57:04:8d:a4:1e:27:2d:cb:96:b2:
         40:4a:96:ae:8f:98:41:f2:88:b8:7b:36:63:8a:0d:de:fc:da:
         2c:ae:7a:9f:7f:2c:9b:a3:ae:8c:37:35:0f:eb:a7:e2:31:37:
         2d:1f:f5:1d:ab:0e:51:65:ac:4d:d4:35:2f:e7:39:78:73:6a:
         10:8d:45:9e:42:ec:31:12:80:8d:24:6d:a5:c0:2e:36:96:53:
         af:d0:f8:ee:67:8e:55:7a:8c:83:0e:97:d0:d1:50:20:b9:4c:
         61:18:03:cb:d0:36:87:4f:91:8f:65:0d:a6:9c:ac:dd:16:ec:
         a1:be:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:35 2024 by rpki-client on console-ams.rpki-client.org