Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa
File:                     6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa (raw, json)
Hash identifier:          jS8MclFTz61Y5qcbC5FKfJmfktbpo/9vSVuzkDmUFnQ=
Subject key identifier:   14:C6:D2:01:22:23:45:9F:86:6A:07:A2:3B:FC:7A:ED:CA:49:70:1A
Certificate issuer:       /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial:       010D0C9F43285845ECBE7EF240B5BE84C38DDA80
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     137409
IP address blocks:        216.189.58.0/24 maxlen: 24
                          216.189.34.0/24 maxlen: 24
                          216.189.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:7e:f2:40:b5:be:84:c3:8d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=f5e74d64-f34f-45c9-9dfc-b2c413c68b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:de:80:66:e5:c6:5b:16:38:df:52:c0:8a:
                    00:5e:b7:26:30:10:10:23:25:1c:e0:9d:92:9e:5c:
                    55:ce:79:a7:63:a1:1d:07:2f:fe:c2:05:b0:8c:0b:
                    14:7a:b9:d8:3f:2e:1d:b3:55:44:eb:fb:f7:c7:62:
                    15:05:db:70:de:7b:9a:4b:4e:56:bd:6a:be:2a:af:
                    a3:da:8e:f4:47:09:a3:da:5b:3d:bb:e0:48:ae:fb:
                    87:c3:b6:79:d9:50:65:3f:13:58:ad:c0:52:9d:d7:
                    62:ab:6c:f4:db:74:b1:c5:16:44:a8:ee:8a:fa:3f:
                    ee:cd:6a:20:43:53:90:7d:b1:bc:f9:6a:06:ac:34:
                    31:71:e5:ba:7b:c3:c1:95:cf:e5:44:54:3c:b8:ca:
                    57:95:23:20:fb:26:4f:2b:fc:ae:05:43:61:62:f6:
                    47:45:07:d8:b3:92:a4:88:2f:b4:3c:80:c6:00:b0:
                    02:de:53:d0:a0:bc:83:d6:ec:25:38:1f:08:d2:29:
                    70:37:c6:c7:e4:00:2d:82:11:88:93:31:e9:76:67:
                    35:81:15:6c:5d:92:d7:8a:75:5e:7c:51:58:f4:8c:
                    11:95:fc:94:84:b1:8b:dd:cc:3d:09:4d:16:df:08:
                    e5:12:be:eb:b4:5a:44:44:dc:d1:71:6a:4a:8d:79:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C6:D2:01:22:23:45:9F:86:6A:07:A2:3B:FC:7A:ED:CA:49:70:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl

            X509v3 Authority Key Identifier:
                keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.189.34.0/24
                  216.189.58.0/24
                  216.189.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:6a:e9:4d:c2:c7:0b:46:c6:f4:0d:ad:79:f8:70:24:49:a1:
         60:e0:7d:f2:95:7d:4a:65:33:d8:78:d3:67:71:86:86:74:07:
         31:f1:cb:c9:9c:f9:62:45:70:f8:e3:9c:92:9f:c4:1b:41:67:
         b2:6c:9f:bb:e5:65:f2:7b:6c:dc:8a:0f:12:c0:0a:80:07:4a:
         bc:00:5a:4e:cc:a4:db:95:e8:ba:d9:09:d3:ea:e6:eb:26:32:
         5a:b7:95:b3:f0:7a:73:d9:cd:e8:86:31:ec:04:f8:cb:eb:6a:
         b7:ce:eb:cd:a6:88:2d:7b:49:de:c3:cf:99:a6:6c:a4:05:76:
         45:46:d7:bc:26:58:37:c2:48:38:c5:16:5f:c8:dd:f7:8b:bf:
         02:b2:40:3b:72:e2:41:58:d6:63:25:4e:22:2a:4a:8f:08:a2:
         a3:e3:b1:8a:80:a1:fc:85:f0:a6:cc:a1:f6:91:ff:f0:9d:99:
         03:92:ed:c3:6e:b1:e9:f1:a9:c0:f9:8b:4b:b7:3f:52:d4:bf:
         9a:9e:3c:ca:0d:0c:87:92:50:e0:07:e0:5a:00:3e:cf:83:58:
         03:49:11:cd:3a:42:4a:a5:fa:6a:28:ce:22:37:a1:4a:28:e0:
         d0:d8:d6:59:02:f1:f4:52:df:44:47:f1:de:63:ff:eb:6a:10:
         c0:bf:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 22:43:38 2024 by rpki-client on console-fra.rpki-client.org