Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e9d7b167-a319-3a74-9de5-2447984532a6.roa
File:                     e9d7b167-a319-3a74-9de5-2447984532a6.roa (raw, json)
Hash identifier:          xWruF1qEF9phxcUaY+wN0XyX0VIO3oR8aFt1dsL+L9Q=
Subject key identifier:   24:39:87:BF:F5:15:4A:81:9A:42:75:6C:B4:40:1D:8D:69:03:34:CC
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F43285844E3A53D5419A8F5029241D100
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e9d7b167-a319-3a74-9de5-2447984532a6.roa
Signing time:             Wed 14 Feb 2024 14:00:30 +0000
ROA not before:           Wed 14 Feb 2024 14:00:30 +0000
ROA not after:            Tue 14 May 2024 13:00:30 +0000
asID:                     400618
IP address blocks:        104.251.224.0/20 maxlen: 24
                          172.81.96.0/20 maxlen: 24
                          23.249.16.0/20 maxlen: 24
                          104.143.32.0/20 maxlen: 24
                          198.176.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:a5:3d:54:19:a8:f5:02:92:41:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Feb 14 14:00:30 2024 GMT
            Not After : May 14 13:00:30 2024 GMT
        Subject: CN=94620cd4-5c2a-4e33-b734-0f58a773f05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:9a:d4:b0:b9:a5:cc:b8:b7:be:f8:87:d5:
                    2a:76:95:f0:a8:5b:87:70:b2:70:77:c5:fe:d9:c4:
                    50:b4:44:03:d7:79:9a:65:f1:9b:3f:14:e1:2f:5a:
                    05:1c:f0:41:e5:68:7e:a8:16:8a:ca:6b:41:03:58:
                    73:c7:e0:f4:c3:6e:4e:90:9c:32:44:3a:c5:78:2e:
                    c6:5e:30:a8:dd:01:2d:89:8a:bb:e3:64:26:a7:24:
                    c0:8f:2d:5e:23:0a:bc:d9:12:49:3d:f5:61:c7:2c:
                    65:49:f1:ad:64:31:2a:a9:55:95:2a:4d:c2:fe:5e:
                    00:2d:53:06:cc:3b:85:f9:38:d8:f4:2a:bc:ea:90:
                    cd:49:38:43:f6:1d:d4:8c:7d:b1:fa:1e:7c:ee:39:
                    a4:a9:62:55:ce:86:21:34:ab:2f:05:a8:c5:fa:20:
                    24:a6:77:0c:7a:67:26:8a:d7:24:b8:8f:c2:f0:ea:
                    05:37:73:0d:2c:7e:68:26:2b:1e:32:a8:9c:3e:80:
                    97:5f:b6:29:76:f8:07:f5:1b:c8:fb:d7:43:2f:90:
                    f1:81:41:8c:0c:13:d3:b8:84:1d:bc:37:fb:f7:bf:
                    33:1a:93:ce:57:c8:43:80:b4:c6:11:69:49:b5:d5:
                    27:80:48:47:ce:25:bd:53:b6:af:71:fe:27:e8:10:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:87:BF:F5:15:4A:81:9A:42:75:6C:B4:40:1D:8D:69:03:34:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e9d7b167-a319-3a74-9de5-2447984532a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.16.0/20
                  104.143.32.0/20
                  104.251.224.0/20
                  172.81.96.0/20
                  198.176.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:46:2a:cc:c6:b2:03:76:50:15:9b:13:f0:d8:6f:15:11:
         21:6d:1c:41:58:ac:4e:53:97:67:91:ee:18:c5:0c:2f:cb:cc:
         05:c9:73:f9:f8:95:26:66:d5:1c:5c:c4:40:b2:93:82:aa:29:
         57:10:a1:07:48:15:dd:33:a6:59:c2:55:e9:f6:6d:34:69:75:
         23:0e:f2:3a:00:b9:3d:6f:bc:80:70:39:7f:a5:df:a1:fe:cb:
         b3:30:50:79:6d:d2:c3:8f:51:4e:75:fb:01:70:7d:39:63:cc:
         bd:f3:60:37:69:4d:e7:05:5a:ce:c9:b3:5e:21:63:3e:7f:2e:
         4b:7e:ca:92:2e:aa:ac:eb:9d:50:ae:af:ce:a5:92:3f:92:e6:
         c6:ab:ac:d2:79:41:48:7b:aa:11:23:3e:58:90:46:92:5b:da:
         1d:52:a3:e9:98:71:a4:d8:d3:cc:79:6f:be:df:98:7a:4c:3c:
         b1:e8:03:b3:01:ab:84:78:37:7d:3d:91:7e:64:36:db:5d:94:
         54:57:e7:17:12:d7:06:53:15:e5:89:6b:cf:97:6c:96:0c:28:
         b0:ed:a1:a9:12:5a:a5:89:b3:f8:f5:43:d0:da:c6:4d:e2:32:
         d0:c6:06:a4:bf:52:14:a3:e2:96:29:06:b5:60:74:96:6f:5c:
         6f:25:c2:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 14:54:35 2024 by rpki-client on console-fra.rpki-client.org