Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
File:                     c75bc20f-6532-3c41-9539-e3da4d4b642a.roa (raw, json)
Hash identifier:          lAZRYCHeyDkCDX6J+an+hj3NCASwoy9W7t/0uBEgbxQ=
Subject key identifier:   84:E5:15:97:D9:D6:5A:BC:3C:DB:45:62:2C:F2:45:EE:ED:A9:F2:52
Certificate issuer:       /CN=e41130c1-4af1-4678-90df-9d7c854ceb98
Certificate serial:       010D0C9F432858460CD94823049D2AEC39338980
Authority key identifier: DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
Signing time:             Fri 31 May 2024 01:00:24 +0000
ROA not before:           Fri 31 May 2024 01:00:24 +0000
ROA not after:            Thu 29 Aug 2024 01:00:24 +0000
asID:                     19431
IP address blocks:        158.51.236.0/22 maxlen: 24
                          2605:9340::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0c:d9:48:23:04:9d:2a:ec:39:33:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41130c1-4af1-4678-90df-9d7c854ceb98
        Validity
            Not Before: May 31 01:00:24 2024 GMT
            Not After : Aug 29 01:00:24 2024 GMT
        Subject: CN=da67f3e5-7389-46a3-8027-aa45fb0d9778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:4e:b4:48:76:9e:91:0e:d2:f2:71:b7:79:
                    d2:76:6b:58:7c:fc:15:55:d0:21:a5:ba:1c:e5:e7:
                    c0:ec:59:eb:7a:c1:b5:66:ae:db:32:ff:16:29:da:
                    29:4f:97:00:13:06:3f:9a:c2:dd:ff:52:73:34:82:
                    c9:e0:6a:84:8d:9a:b3:f1:36:82:7d:45:c0:29:07:
                    40:c4:b7:a1:30:d3:9c:f4:6f:17:43:88:76:21:d7:
                    4a:a1:9b:a4:93:18:3c:b7:d8:7f:eb:4d:a1:25:fa:
                    4c:cb:f5:52:41:e4:9a:cc:ce:39:75:e4:0f:f9:27:
                    33:47:b8:e7:28:44:6b:4d:f2:19:8d:44:28:aa:51:
                    51:c4:73:4b:4b:af:8c:b5:1b:dd:60:10:ab:b7:d0:
                    30:30:07:97:d0:af:04:c9:29:ac:c8:fd:9a:35:21:
                    4d:49:b4:cf:2b:c5:ae:28:13:c3:0e:aa:9a:fd:a6:
                    71:0c:f4:45:9a:49:8d:89:4a:14:2d:8a:13:a6:7a:
                    55:07:1b:9d:ff:d0:8a:6e:1a:c9:02:87:6c:fd:a1:
                    be:f3:42:1d:b0:50:62:63:d4:25:08:86:4c:a4:a3:
                    f6:01:73:28:b3:0d:17:4e:3f:c1:15:d6:0f:dd:b7:
                    60:8c:a3:69:74:3b:6a:6c:66:e1:ce:76:1f:56:65:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E5:15:97:D9:D6:5A:BC:3C:DB:45:62:2C:F2:45:EE:ED:A9:F2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl

            X509v3 Authority Key Identifier:
                keyid:DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.236.0/22
                IPv6:
                  2605:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1d:bb:06:03:9e:51:47:1d:69:54:d1:83:4b:67:e5:82:a7:
         a2:96:4c:0c:4a:91:d3:8d:5f:6f:81:60:d0:1b:d6:5d:ae:30:
         13:09:31:b6:16:ba:68:44:2a:5a:38:c4:05:b6:82:d3:16:a3:
         a4:e5:9c:fd:cd:b1:82:ec:b5:e9:5a:17:1f:69:2e:a1:db:df:
         f8:35:f2:69:b5:25:09:31:74:2a:3b:ad:b7:d9:f1:3f:52:2f:
         a1:50:b5:97:6e:34:0c:83:99:1a:23:5e:9d:97:33:0b:69:db:
         68:d4:1e:2f:5b:e4:5a:02:7b:9c:f6:96:5b:0d:d8:88:db:26:
         ca:22:77:5a:ce:8d:1f:cc:1e:9b:c0:f6:05:a0:47:a6:67:77:
         f0:80:62:55:7b:29:93:50:36:57:f7:fe:ad:3f:42:db:4e:4e:
         76:58:34:69:8b:38:5b:ed:e7:78:d3:1a:93:69:cd:3a:59:e4:
         54:1c:b0:b5:28:9a:5a:0d:be:a7:2c:b8:2d:bd:f6:38:ec:6f:
         26:f1:88:55:f2:2a:b2:d0:c6:4b:fb:da:1f:3b:4a:7f:af:38:
         97:2e:e4:17:e7:db:ba:35:4d:f3:3d:01:e0:76:7e:00:b6:26:
         2f:aa:8c:58:ac:5d:18:37:b2:77:8c:ac:56:36:17:05:95:06:
         06:49:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 17:47:04 2024 by rpki-client on console-ams.rpki-client.org