Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File:                     60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier:          6dDsRUDZxi+YaHBA5PQV70eWOPsgDKJ9ToEYNCYnCiI=
Subject key identifier:   53:C5:D5:A9:1C:B6:E8:E4:F9:27:FD:3D:6E:4C:BC:23:18:8E:24:0E
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F43285845D503CD3AE9AD2DEBBBA1AB80
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     394745
IP address blocks:        170.75.160.0/20 maxlen: 20
                          172.81.176.0/21 maxlen: 21
                          2602:ffb6::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:cd:3a:e9:ad:2d:eb:bb:a1:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=f2f106de-5019-447e-9d34-1c02b480a3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:70:ea:52:91:2e:99:2c:63:b2:4b:c2:59:
                    b9:22:e3:8f:15:11:88:7b:65:3b:c5:82:52:8c:4f:
                    c6:9e:d5:c1:08:98:98:a3:14:fd:f7:db:61:87:b8:
                    9a:2f:cf:66:ac:98:68:b8:59:75:39:ca:da:60:4f:
                    eb:12:61:60:d8:db:f0:b8:d1:78:1f:7c:fe:06:88:
                    9b:fb:99:40:68:18:14:96:9f:b4:cd:ce:65:ce:40:
                    5a:58:2e:14:8a:5c:4a:f7:5b:95:07:bc:f1:59:54:
                    56:02:0f:ce:c9:45:6d:2b:a5:22:b9:3c:89:15:cc:
                    ea:7c:9d:14:f5:86:51:48:65:12:d0:c0:4c:3d:99:
                    af:31:e9:2d:2d:c0:d7:95:0a:fd:85:5d:43:0a:08:
                    bd:f4:3d:92:82:9d:96:d7:a5:14:4a:85:14:cf:ab:
                    6b:af:59:66:e9:a5:7b:03:c7:80:ab:ea:24:c9:c6:
                    f4:c6:68:94:51:a9:ea:ed:ba:4e:c9:59:bd:45:7e:
                    e1:ee:3b:4f:67:20:a0:a0:6d:fe:1b:1f:44:d6:ec:
                    0c:e1:b8:ee:d2:a2:8c:e8:a7:8b:9b:f3:ce:a0:6c:
                    e6:d1:19:7d:2d:bb:6f:79:a8:53:c0:5f:65:bb:f8:
                    a5:8c:5e:ce:5d:2f:63:d3:71:74:f4:cd:8b:72:49:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:D5:A9:1C:B6:E8:E4:F9:27:FD:3D:6E:4C:BC:23:18:8E:24:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.160.0/20
                  172.81.176.0/21
                IPv6:
                  2602:ffb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:bd:58:76:00:f1:fe:77:c9:9e:eb:db:69:31:01:d5:27:
         b8:fc:49:5c:d5:84:17:3b:5c:b9:9e:b2:b6:b9:21:c9:cb:9a:
         e9:ba:46:06:66:07:45:94:82:e7:e1:fd:fa:ba:f4:e8:2c:a3:
         d8:5d:b5:31:5e:98:cb:f0:e3:6b:b3:81:59:01:09:19:f0:4a:
         82:f3:75:90:54:03:20:55:5a:0e:b7:79:a0:c8:f9:4e:57:df:
         1e:b2:7f:fb:05:11:2d:2a:9a:5f:fe:2d:21:f3:4d:d3:47:53:
         33:88:c9:03:17:12:f6:4b:64:50:cc:20:e9:7a:25:c4:ae:a9:
         4f:a8:ac:50:ba:ec:ec:a7:5e:c4:63:2a:08:01:19:f7:d2:31:
         2f:ee:df:11:23:3b:4d:fd:90:b5:11:13:29:38:f2:4f:ff:32:
         56:f4:c1:20:31:73:77:de:8f:44:1e:0c:3c:e2:94:7d:ca:7f:
         74:68:39:7d:da:35:09:b4:25:be:44:f9:3f:40:2e:0e:02:c8:
         78:dc:a3:52:86:3b:52:21:1a:84:1f:ab:b0:53:8c:7a:0d:04:
         ff:02:8d:33:78:c0:ad:89:ec:3d:ea:41:af:cf:6d:db:94:77:
         d4:c4:44:a5:6f:48:c5:35:0d:d2:59:df:df:a9:7c:f2:cc:83:
         aa:af:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:34 2024 by rpki-client on console-fra.rpki-client.org