Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa
File:                     8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa (raw, json)
Hash identifier:          mQMt3DfWSwYkCmY4xnXvmw1lBKfMkgchL2xE+XsP3vs=
Subject key identifier:   6F:2A:20:4C:39:36:4B:A2:14:2C:EB:6E:E5:F3:00:A1:DC:9A:7B:69
Certificate issuer:       /CN=4d86c782-c9fe-4446-9e6e-7812e6590960
Certificate serial:       010D0C9F432858456F1DB14AF8184CC3D266EFC0
Authority key identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     62989
IP address blocks:        192.150.225.0/24 maxlen: 24
                          192.231.220.0/24 maxlen: 24
                          192.153.123.0/24 maxlen: 24
                          144.80.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b1:4a:f8:18:4c:c3:d2:66:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d86c782-c9fe-4446-9e6e-7812e6590960
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=9182f778-e83d-43f2-a0b1-72f1f9a1cdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:8c:fd:b0:71:90:d6:16:33:7b:1a:3f:20:
                    22:e7:7f:01:cf:5a:b3:68:7e:45:35:32:95:93:e6:
                    8f:e1:71:5e:fb:c2:6b:92:d5:b9:d9:f1:56:bc:3d:
                    0e:ee:8e:e7:be:a3:28:4f:03:a1:68:5f:4f:36:b6:
                    60:f4:42:73:5a:87:90:43:6c:88:11:4e:ef:80:a3:
                    35:44:06:ff:e6:a2:4f:e9:65:f7:1c:8d:3a:42:c0:
                    11:a2:36:05:95:66:35:10:3c:81:59:4a:4b:41:9e:
                    1a:f5:9b:16:00:69:c0:a7:9d:b3:1d:0d:df:0b:a3:
                    c8:1a:d6:53:3f:f7:e4:8d:7b:60:ef:2c:a6:31:62:
                    d4:07:7f:25:f3:05:54:0c:e1:80:ef:0c:ac:c9:79:
                    fe:3a:53:83:0f:ee:e7:a0:17:9c:dd:e8:a5:1c:fa:
                    16:2b:89:d8:1b:7f:ac:f4:0f:33:e9:18:15:9b:85:
                    a6:d4:71:e5:c2:84:c4:8c:41:1e:31:f2:be:41:7d:
                    e4:f8:14:f7:51:3a:24:5d:cc:49:60:92:2f:93:55:
                    71:5e:77:43:f5:d4:1b:23:7c:c0:4f:98:47:d6:e8:
                    6a:83:93:98:e2:d8:18:e3:a7:0d:4e:4d:40:cc:68:
                    54:fc:c2:03:5e:cb:7e:24:28:6e:ad:70:33:14:f3:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2A:20:4C:39:36:4B:A2:14:2C:EB:6E:E5:F3:00:A1:DC:9A:7B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.crl

            X509v3 Authority Key Identifier:
                keyid:E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.80.0.0/16
                  192.150.225.0/24
                  192.153.123.0/24
                  192.231.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:73:83:88:2b:0c:65:d7:ce:c4:4e:fb:72:14:1d:93:1c:5c:
         a2:7a:f5:29:98:0b:13:28:a7:6c:33:86:5b:27:b6:21:b4:16:
         9a:a5:2a:1d:2b:3b:ef:69:4f:a6:69:47:1a:87:91:12:c0:bf:
         2a:fd:10:39:70:d3:9a:b2:6d:79:3a:79:75:d5:36:4f:d5:1f:
         a5:12:ae:2a:c5:89:df:82:6c:e1:38:21:1b:cb:85:7b:3a:0d:
         e0:20:e7:45:bc:46:2b:ec:8a:03:a6:c5:9e:60:69:a5:2e:c5:
         91:67:03:5c:5a:f7:bc:c7:31:88:3b:5d:51:44:2d:4b:67:55:
         f7:60:f5:86:db:43:16:9b:93:88:d0:79:59:51:bc:6e:e8:70:
         dd:39:bb:bf:19:22:30:11:6e:fa:b1:36:dc:85:01:d6:5b:6d:
         cf:7f:9e:d8:b9:06:9f:57:ad:dd:da:9b:5c:70:e8:c3:07:1f:
         eb:62:bc:28:5d:ad:7b:f6:01:2b:cf:3a:29:9b:20:1a:64:e7:
         f8:d2:6b:f2:b9:39:d5:17:7f:f4:52:8f:e7:95:6c:24:1c:c4:
         3a:e5:98:27:cb:c3:ad:f2:e4:fa:76:2e:0b:ca:4b:23:02:b9:
         f0:fe:e6:a0:0b:db:ab:4f:b8:1d:0c:00:5c:67:2a:26:ef:f3:
         71:fb:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:39 2024 by rpki-client on console-fra.rpki-client.org