Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa
File:                     7172e1bb-e029-3c30-be5b-34e5b3610c59.roa (raw, json)
Hash identifier:          xySruW4Xytrf4T8tek6eQlaAbioDSrN945FLEbSEnaU=
Subject key identifier:   0B:C5:60:AF:ED:EE:EA:44:CA:8D:93:2E:92:25:31:EF:8B:D6:5E:17
Certificate issuer:       /CN=576b0633-e844-4e36-85eb-6148d6321883
Certificate serial:       010D0C9F4328584608A9615ACD6A674928181240
Authority key identifier: 2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa
Signing time:             Wed 29 May 2024 13:00:34 +0000
ROA not before:           Wed 29 May 2024 13:00:34 +0000
ROA not after:            Tue 27 Aug 2024 13:00:34 +0000
asID:                     36012
IP address blocks:        74.51.16.0/20 maxlen: 24
                          139.60.24.0/21 maxlen: 24
                          162.244.36.0/22 maxlen: 24
                          162.247.40.0/21 maxlen: 24
                          66.178.160.0/20 maxlen: 24
                          69.9.128.0/19 maxlen: 24
                          216.115.0.0/20 maxlen: 24
                          2606:c800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:a9:61:5a:cd:6a:67:49:28:18:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b0633-e844-4e36-85eb-6148d6321883
        Validity
            Not Before: May 29 13:00:34 2024 GMT
            Not After : Aug 27 13:00:34 2024 GMT
        Subject: CN=2ba13369-06b1-4edc-b69b-0d438597ee4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1f:55:10:a2:75:09:b7:5c:99:33:a6:a2:24:
                    ca:ca:58:a7:52:cb:fd:25:0f:6c:40:02:a8:ca:91:
                    d0:7e:5b:74:b5:6e:98:69:2c:6f:8d:6f:a1:d1:38:
                    98:d0:b6:b5:11:cd:64:02:10:60:3c:0b:c8:21:28:
                    5a:e4:2e:56:57:bd:84:7c:d1:12:24:ef:87:37:34:
                    6d:50:48:bd:96:a9:09:1d:4a:c2:df:de:37:49:0c:
                    d2:a9:3f:54:18:27:69:59:59:ca:06:89:3e:cf:44:
                    b7:cb:0a:88:85:f5:a2:26:f5:6b:f3:22:3f:e0:be:
                    2b:65:fc:06:d4:1b:df:f5:67:79:1a:76:6a:b1:b7:
                    bd:fa:1e:10:e3:98:50:85:70:4a:f1:cc:e4:46:70:
                    20:86:53:61:d0:6e:02:73:d4:9f:61:3f:95:9d:11:
                    18:a9:43:24:28:19:6e:4f:74:c6:59:23:55:1c:b4:
                    84:7f:a1:6a:89:2f:64:51:52:5c:ff:d5:4a:ec:2f:
                    8c:3a:8b:15:5f:32:94:a2:73:35:d1:40:71:af:79:
                    d1:e7:ff:b8:a4:de:a9:ed:78:6b:3b:fd:ac:ca:19:
                    63:44:d6:2f:02:59:71:c7:eb:2d:23:99:00:67:f7:
                    ff:02:1f:2e:a4:ef:8e:3c:c3:1e:07:e2:a4:03:f8:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C5:60:AF:ED:EE:EA:44:CA:8D:93:2E:92:25:31:EF:8B:D6:5E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/7172e1bb-e029-3c30-be5b-34e5b3610c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883/576b0633-e844-4e36-85eb-6148d6321883.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B5:DC:55:36:57:AB:C4:81:78:33:46:60:49:85:D9:BD:71:1B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576b0633-e844-4e36-85eb-6148d6321883.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.160.0/20
                  69.9.128.0/19
                  74.51.16.0/20
                  139.60.24.0/21
                  162.244.36.0/22
                  162.247.40.0/21
                  216.115.0.0/20
                IPv6:
                  2606:c800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:da:74:2c:e7:19:60:58:82:a4:49:7f:9e:44:78:16:da:
         35:58:d8:85:d0:26:51:96:da:9e:d8:34:cc:26:82:7b:18:3a:
         f3:df:71:91:b2:66:3f:25:18:47:b7:26:c7:97:a9:48:f5:df:
         a0:a3:86:0b:39:ba:b3:d3:77:2c:be:ff:ed:5c:74:dc:c1:fe:
         5b:d8:fd:5f:6c:98:8c:d1:e1:42:72:84:0a:79:98:48:2f:c5:
         dc:10:24:25:e0:68:8f:33:a3:47:ec:77:79:01:7f:5e:9f:48:
         8d:da:09:09:9b:f3:b9:5b:92:6e:87:d8:10:e7:5c:fa:78:c0:
         2f:0a:36:2f:df:4b:ca:d4:69:7d:94:cd:5c:53:bf:e4:35:cd:
         f2:64:87:d8:fd:65:1a:19:c9:81:ae:a4:6d:67:a9:f8:40:f2:
         29:dd:33:2e:c3:7d:4b:36:3f:af:09:d4:7c:99:cf:49:fa:9f:
         6b:d0:21:a7:29:74:bd:e7:98:0e:37:53:6a:16:0f:33:21:e6:
         e2:b9:a1:da:01:97:34:24:aa:0f:13:4a:f6:e5:f1:3f:cd:86:
         b1:c5:12:7e:42:2f:c8:22:ad:3b:59:a3:21:83:54:5f:96:aa:
         eb:62:cd:36:c9:12:90:66:4c:31:af:33:62:b0:db:ed:b2:17:
         e8:af:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:11 2024 by rpki-client on console-fra.rpki-client.org