Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/69b4e73f-fb6d-3c07-8392-de84d793cec3.roa
File:                     69b4e73f-fb6d-3c07-8392-de84d793cec3.roa (raw, json)
Hash identifier:          Z24WR2yAmWWxnfczhbDHDkgJJqz8N+/OUwBi7ZPwHjw=
Subject key identifier:   4C:E8:C1:00:62:B8:37:A8:93:2F:C3:46:10:02:58:41:5F:4F:56:CB
Certificate issuer:       /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Certificate serial:       010D0C9F43285845B7B3892BC31FD5DF472D8FB0
Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/69b4e73f-fb6d-3c07-8392-de84d793cec3.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     53698
IP address blocks:        23.174.129.0/24 maxlen: 24
                          23.175.16.0/24 maxlen: 24
                          23.174.128.0/24 maxlen: 24
                          165.140.128.0/22 maxlen: 24
                          192.33.139.0/24 maxlen: 24
                          209.209.4.0/22 maxlen: 24
                          2604:6040::/36 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:89:2b:c3:1f:d5:df:47:2d:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=815a20e4-8764-4fca-bc49-194311a5726b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:94:ad:e5:5b:28:b6:13:88:0c:44:de:a9:
                    7d:9b:18:00:92:c4:c8:54:12:e3:21:58:a8:6a:86:
                    2a:48:55:39:98:cb:66:3b:4f:27:d0:7e:fe:28:e4:
                    f9:eb:d4:7c:c6:e5:e0:c9:d3:91:27:21:7f:50:dc:
                    7d:f0:82:fc:a6:e3:38:8a:2f:b6:0a:3c:cd:3e:9d:
                    be:f4:2d:7e:8c:59:7a:12:8a:6c:4f:2d:3f:b7:f9:
                    fc:06:2e:6c:10:e2:69:46:13:13:16:66:40:58:8b:
                    fc:64:6c:5c:c1:86:8c:54:f9:6f:06:c9:d9:3e:16:
                    41:ea:76:2a:0d:fb:4c:24:83:1c:d1:bb:b9:0d:13:
                    c7:3b:bd:4d:0f:3a:5f:14:20:ab:96:11:91:81:fa:
                    c7:1a:b4:5a:2a:83:8f:e3:ae:00:71:9f:fe:a4:83:
                    b0:54:c3:c2:da:11:3c:63:68:50:45:61:93:a5:52:
                    ab:15:4e:b3:a3:81:95:5c:21:1a:ef:5d:7a:00:b9:
                    e4:79:2d:25:c9:62:7d:3a:e0:55:ff:66:09:60:51:
                    5d:a4:79:ea:63:be:09:18:7a:30:40:10:37:5f:a7:
                    8d:92:c6:3e:6f:f4:32:6b:bc:23:22:7d:69:84:ec:
                    c0:31:f2:05:ee:e0:f5:4f:c8:79:2e:4d:e0:2f:2d:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:C1:00:62:B8:37:A8:93:2F:C3:46:10:02:58:41:5F:4F:56:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/69b4e73f-fb6d-3c07-8392-de84d793cec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.128.0/23
                  23.175.16.0/24
                  165.140.128.0/22
                  192.33.139.0/24
                  209.209.4.0/22
                IPv6:
                  2604:6040::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:69:96:e4:62:27:c1:14:71:7e:7f:5b:fe:29:2e:d4:2c:
         1e:94:c6:d4:81:cb:34:97:21:b7:66:5f:28:c4:26:ab:7c:22:
         1f:bb:c4:13:d9:11:2d:f0:7e:46:61:77:97:3c:fc:4c:e3:e5:
         30:5d:dc:44:67:08:6b:45:62:90:7c:83:3b:1e:21:c7:b4:4c:
         16:29:83:c0:a5:a7:72:31:ce:da:14:64:5a:95:59:1a:6e:1a:
         8a:3f:57:cd:30:84:5b:b5:07:8b:ef:aa:47:04:4f:09:8f:e5:
         eb:c6:4e:5f:22:92:2f:3c:07:8a:4c:53:b9:6d:25:04:7b:60:
         27:71:65:2d:c5:2c:30:3c:67:66:f0:f0:81:4c:8a:15:cf:09:
         90:69:88:f1:53:35:18:70:3d:55:be:65:57:97:74:23:4e:b6:
         7a:5f:8a:8a:0a:e9:0b:89:b6:86:03:99:e8:96:a5:76:52:7b:
         e9:19:1b:69:50:6a:8a:9d:d2:cb:ec:44:06:c9:86:fa:d5:bf:
         29:13:c1:c3:3c:3b:df:30:17:02:9b:d7:07:7c:0d:4f:22:d6:
         d5:bf:1d:f8:7f:fa:b3:33:e4:41:35:08:9e:2d:0c:6d:ec:f9:
         9a:99:c4:37:7c:5d:d3:d7:93:4a:bf:82:c9:ac:0d:39:e7:78:
         04:2e:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:48 2024 by rpki-client on console-fra.rpki-client.org