Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa
File:                     a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa (raw, json)
Hash identifier:          pECdiGm8Qg/S7pjh8aQEdOUUQiD4u1Fdu6VLEEaulYo=
Subject key identifier:   C5:63:AE:51:F8:86:AE:C1:70:1C:8A:AC:0D:16:83:F5:53:CA:4E:4B
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858454272BB8EF4F54CE793CDAF80
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     46261
IP address blocks:        172.102.204.0/24 maxlen: 24
                          172.102.202.0/24 maxlen: 24
                          172.102.199.0/24 maxlen: 24
                          172.102.198.0/24 maxlen: 24
                          172.102.217.0/24 maxlen: 24
                          172.102.214.0/24 maxlen: 24
                          172.102.212.0/24 maxlen: 24
                          172.102.209.0/24 maxlen: 24
                          172.102.208.0/24 maxlen: 24
                          172.102.220.0/24 maxlen: 24
                          172.102.197.0/24 maxlen: 24
                          172.102.196.0/24 maxlen: 24
                          172.102.194.0/24 maxlen: 24
                          172.102.193.0/24 maxlen: 24
                          172.102.192.0/24 maxlen: 24
                          172.102.195.0/24 maxlen: 24
                          172.102.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:bb:8e:f4:f5:4c:e7:93:cd:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=3fdb2399-4525-4501-9d8b-974c83de0021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:fc:9f:af:f6:a8:32:b0:b1:4b:49:a0:54:
                    4a:a4:70:e1:e0:c2:98:5b:8e:77:18:b2:46:ca:a3:
                    63:76:fd:53:41:c2:ab:f3:20:91:9f:c3:cc:04:8e:
                    1a:66:74:3f:ef:f1:96:50:13:80:61:05:49:69:97:
                    c9:b4:9c:db:23:ef:ca:86:32:f4:fb:14:b2:1c:58:
                    dd:85:8c:0a:8e:68:49:1a:ea:64:ec:ef:8f:be:b8:
                    ef:3c:e2:ed:4d:6f:33:42:9a:28:5a:da:9f:74:62:
                    d2:21:19:30:78:67:6d:54:ff:78:46:2b:f9:8c:36:
                    5d:1b:00:f4:f3:19:7e:23:a6:7a:5d:11:9a:98:ed:
                    27:30:bb:11:a1:eb:c6:84:fc:33:85:06:8f:f5:16:
                    d0:f3:46:56:c1:9f:29:9b:b8:c6:a6:8a:99:5f:22:
                    e8:a0:ad:b0:6f:f9:da:6f:0a:39:11:ba:dc:d6:16:
                    26:4d:42:9d:23:e6:2c:2d:82:bb:87:69:b7:63:83:
                    16:7c:5b:c0:6c:87:de:79:68:c7:c8:e7:84:89:16:
                    49:7e:c8:20:59:a0:77:10:05:be:5c:6e:3f:48:fe:
                    e5:a1:3c:cf:40:f7:45:23:f3:f5:a4:4b:41:90:1f:
                    1c:d0:59:e4:32:0d:b1:13:eb:7a:f1:4a:4c:34:ad:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:AE:51:F8:86:AE:C1:70:1C:8A:AC:0D:16:83:F5:53:CA:4E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.192.0/21
                  172.102.202.0/24
                  172.102.204.0/24
                  172.102.208.0/23
                  172.102.212.0/24
                  172.102.214.0/24
                  172.102.217.0/24
                  172.102.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:88:4a:24:ca:4b:b8:fc:35:d9:bd:61:b5:48:ec:5d:03:81:
         13:e4:40:80:00:f8:d7:d8:95:3a:db:5c:10:6a:0e:c7:ad:9b:
         56:cf:57:d8:74:cb:6c:e8:3b:27:cf:9b:8c:fb:14:35:c9:41:
         20:f5:fc:74:9a:74:cb:b7:dc:56:17:f9:3b:3c:ae:71:46:4d:
         80:d4:47:ac:5b:37:59:b2:40:c4:24:07:a2:6f:eb:87:7d:fc:
         bb:99:43:83:05:3d:76:48:3f:18:ca:40:6d:e3:68:f2:57:52:
         3e:2c:39:71:cc:ed:3f:68:02:20:db:67:d6:f6:56:31:f3:4f:
         d1:c5:a8:85:e4:3b:74:94:2c:da:54:e0:89:36:21:6c:45:51:
         88:61:71:a3:c1:62:2f:74:bc:5b:98:89:a2:f2:10:d5:2b:e5:
         cb:aa:48:cb:bd:dc:9e:2c:9b:fc:10:86:89:54:cc:1a:0a:bf:
         6b:23:62:12:47:2b:43:ec:8c:44:10:c7:16:07:b5:24:34:35:
         ab:c8:df:0e:32:33:d4:55:7e:db:f7:09:ea:75:80:7f:bb:fd:
         44:86:f4:1a:69:31:9d:7c:8f:b6:c4:83:fd:56:0a:37:ec:d9:
         6b:8b:df:df:de:b0:02:85:ac:ae:9d:85:0c:de:3d:5d:ab:e4:
         37:e4:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:00:45 2024 by rpki-client on console-fra.rpki-client.org