Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa
File:                     d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa (raw, json)
Hash identifier:          XbRMzUV4PK/PLzK1aX9lo7t450vTVZb+t85XKSZE8SM=
Subject key identifier:   64:2E:D8:CD:BE:EC:89:16:5C:FB:1B:38:5C:79:6E:3D:48:8C:EA:97
Certificate issuer:       /CN=1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee
Certificate serial:       010D0C9F432858453CDD5E8EB856ED43FF37B4A0
Authority key identifier: E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     4261
IP address blocks:        173.237.224.0/20 maxlen: 20
                          216.135.64.0/19 maxlen: 19
                          69.64.0.0/20 maxlen: 20
                          2605:8000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:5e:8e:b8:56:ed:43:ff:37:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=f987288e-2c04-44fc-b4ce-6ca7abecdaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:e4:8c:f1:d6:75:28:b2:b9:ca:57:26:a7:
                    ca:59:88:9b:40:83:42:61:ba:e0:b9:5d:c8:41:08:
                    7e:4a:4b:6b:ba:ab:7d:81:ef:14:be:e5:bd:97:b4:
                    cf:df:e1:ba:00:23:e1:88:a6:39:c2:fe:a5:5f:06:
                    c2:5e:fa:90:5d:a6:17:83:21:07:fb:44:3c:80:42:
                    36:84:f5:bb:42:f3:e8:0e:5d:f7:ec:21:62:11:21:
                    3b:95:f5:46:c9:ea:b2:96:33:22:4d:e7:de:73:99:
                    a7:81:ed:c2:19:bb:fa:76:e5:e6:90:ab:b2:87:1a:
                    65:67:36:19:26:d5:4f:47:17:cb:bf:9e:a7:cf:59:
                    ba:1d:56:21:b8:98:de:ee:fe:44:bd:b1:c0:c4:5c:
                    0f:72:0a:5c:71:fc:83:66:58:46:8c:fa:86:11:b6:
                    1a:61:68:7f:33:56:15:7b:b6:8d:47:4f:6a:7d:b2:
                    dc:5f:2c:ff:13:c7:11:87:6c:24:b0:4d:57:e8:2f:
                    0b:a9:b3:ff:2c:4e:59:fb:f4:63:43:a1:40:64:16:
                    5d:34:27:00:ac:e8:73:a8:52:2b:b8:ff:5d:0c:29:
                    6a:ec:0b:9d:f2:d8:19:fd:fb:c9:f9:5e:4f:ea:49:
                    4d:8c:60:9a:83:02:da:79:c5:9f:a9:c5:cb:f7:25:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:D8:CD:BE:EC:89:16:5C:FB:1B:38:5C:79:6E:3D:48:8C:EA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.crl

            X509v3 Authority Key Identifier:
                keyid:E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.0.0/20
                  173.237.224.0/20
                  216.135.64.0/19
                IPv6:
                  2605:8000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:0b:8a:83:fb:96:c1:bd:04:b2:42:53:e5:0a:69:99:1e:
         22:0d:8a:77:b9:78:ab:39:4a:e0:e1:3e:70:88:53:c4:51:68:
         05:40:4f:67:54:51:65:e8:b5:4b:93:bd:d0:68:d0:4a:a4:75:
         b2:e7:03:53:44:fb:d1:2a:a9:6f:a2:93:d6:b9:d4:63:85:e4:
         51:9d:d9:72:6f:05:b2:2d:9b:f8:2d:4b:b1:cb:4b:3a:71:5e:
         e7:e6:5e:2f:24:78:c3:f8:e6:ad:00:a8:08:87:f7:17:da:ed:
         29:39:f8:19:74:52:41:19:e0:4f:e2:83:c1:3e:6e:4e:02:17:
         3a:15:0e:24:98:db:61:17:99:48:0b:1d:dd:3e:03:38:1b:45:
         7a:75:ca:bb:8b:f1:52:22:09:e9:09:e0:97:1c:e2:7f:9b:86:
         8a:70:57:f0:68:d5:4c:ae:d6:91:bc:8b:f5:46:1f:67:26:20:
         f0:d8:58:95:13:56:c0:1b:7a:87:e5:29:97:be:ef:55:bd:6d:
         0e:89:f9:d1:c8:c7:e5:d9:ba:5c:9c:39:c2:df:69:a6:34:9b:
         38:a5:10:0c:32:fa:cd:fc:6e:a6:1f:6a:f9:ba:39:61:b7:26:
         9b:00:21:d7:ea:43:42:bc:69:38:3f:64:a3:0b:22:dd:5b:20:
         be:cf:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:37 2024 by rpki-client on console-fra.rpki-client.org