Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/4499818c-8cc6-3d80-8388-c8d455da417c.roa
File:                     4499818c-8cc6-3d80-8388-c8d455da417c.roa (raw, json)
Hash identifier:          UKjTmFbbT+QiVvV81wCwSdt7tlptCn2qRe8BpluiAJk=
Subject key identifier:   70:76:BD:E8:94:D1:CB:9E:E2:A3:20:0A:DE:F4:23:2C:1C:0E:14:35
Certificate issuer:       /CN=9401ced7-d880-490d-9b0d-7674db71191c
Certificate serial:       010D0C9F4328584598FE05E41B3039204DBEC880
Authority key identifier: A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/4499818c-8cc6-3d80-8388-c8d455da417c.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     12231
IP address blocks:        24.144.0.0/18 maxlen: 24
                          96.31.208.0/20 maxlen: 24
                          66.158.176.0/20 maxlen: 24
                          199.59.100.0/22 maxlen: 24
                          2605:a340::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:05:e4:1b:30:39:20:4d:be:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9401ced7-d880-490d-9b0d-7674db71191c
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=b756c112-f510-4119-a762-80f59a8996cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:c6:33:30:46:86:ba:89:b9:6f:18:6a:4b:
                    cd:46:d0:b1:cb:84:46:16:e8:5f:a8:8b:b5:62:f2:
                    fb:5c:1b:35:4d:24:30:33:ad:98:65:39:30:33:f4:
                    45:4b:d0:98:76:dd:43:da:04:3e:c4:a6:1c:93:4a:
                    76:f1:11:c5:be:d9:ba:79:47:61:a0:32:8f:a5:eb:
                    43:00:ae:10:05:90:4a:86:15:0d:a4:3b:13:ca:c4:
                    78:5b:12:23:e3:9a:00:c3:df:89:6f:d0:98:1c:6b:
                    f4:5a:9f:df:34:69:97:09:95:ee:57:d0:7a:83:b1:
                    1d:9c:81:fa:e3:82:80:0b:bb:ad:0d:53:c6:37:d5:
                    47:67:db:8f:5b:11:e7:4e:5b:c0:3f:b2:32:4b:67:
                    d3:2d:bb:ac:47:c3:52:40:b0:57:f9:3a:91:08:e8:
                    e2:1e:a4:c7:e1:0a:c9:35:6d:bd:11:5a:b2:be:5b:
                    ec:d1:69:57:51:a3:63:ee:53:ae:88:d8:dc:32:bb:
                    18:31:bf:ed:50:2a:03:85:d1:03:f1:6c:92:36:50:
                    69:e3:9b:01:4c:cb:37:27:7b:78:30:65:62:52:4a:
                    bc:41:57:75:83:56:d4:59:44:62:76:2e:c9:85:c3:
                    64:dc:5c:33:99:04:b8:1f:3c:7b:0c:a1:9b:6e:9d:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:76:BD:E8:94:D1:CB:9E:E2:A3:20:0A:DE:F4:23:2C:1C:0E:14:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/4499818c-8cc6-3d80-8388-c8d455da417c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c/9401ced7-d880-490d-9b0d-7674db71191c.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:25:E4:3A:68:15:FE:27:73:FB:79:2B:DA:62:0E:F3:85:FD:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9401ced7-d880-490d-9b0d-7674db71191c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.144.0.0/18
                  66.158.176.0/20
                  96.31.208.0/20
                  199.59.100.0/22
                IPv6:
                  2605:a340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:52:a2:38:ef:4c:68:9d:83:bd:3e:a2:79:50:c9:7c:d4:
         c1:9d:06:80:45:9c:a4:59:78:3c:aa:f5:7f:d7:0c:98:43:74:
         0b:29:d8:b5:72:d8:b8:39:64:b4:9c:90:a3:f7:37:ba:7b:ae:
         82:90:66:e1:e7:97:0f:43:62:91:2b:6e:ca:dd:e5:80:1a:a7:
         27:80:20:e8:27:3d:25:52:14:b4:b8:10:f4:8b:db:25:17:c9:
         bb:73:7f:e8:52:5a:ab:35:78:10:0a:92:0d:1a:d6:73:77:94:
         09:02:4b:42:16:64:6e:c7:87:4d:71:7a:83:a2:38:72:89:01:
         6c:ef:84:36:3e:9a:e9:f2:c6:be:eb:39:b6:81:1f:93:15:95:
         10:22:5c:14:04:7c:4d:f7:c0:cf:9b:95:2f:6e:5a:69:cc:07:
         4f:b8:95:16:5d:a7:38:ae:61:fa:d1:28:36:cf:a6:45:c6:20:
         f0:91:af:84:90:a5:87:93:0d:35:d6:ca:45:55:0a:b5:75:e7:
         fe:78:46:0d:72:5b:91:0b:5d:8b:e7:5d:1f:c2:73:0d:c4:0e:
         84:49:06:e7:47:94:cd:e5:8e:53:bf:ed:d5:0e:24:56:d8:2f:
         7e:bb:f2:10:4a:c1:81:d0:60:f7:5b:1d:ef:1b:3c:8f:92:bd:
         17:78:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:13:56 2024 by rpki-client on console-fra.rpki-client.org