Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
File:                     3220d0a5-cdd5-3f87-b685-9a7a62711425.roa (raw, json)
Hash identifier:          cQRC8Fqv5NdiKtAKLOABd5wo1LarQL3cA5L9PvMGgBY=
Subject key identifier:   F3:63:C1:68:ED:35:96:41:75:62:2F:5E:3D:EB:2B:F9:08:86:1B:73
Certificate issuer:       /CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
Certificate serial:       010D0C9F4328584596334B2EC71AA6DC72EC07D4
Authority key identifier: 1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     400302
IP address blocks:        170.205.60.0/24 maxlen: 24
                          170.205.61.0/24 maxlen: 24
                          170.205.60.0/23 maxlen: 23
                          170.205.62.0/23 maxlen: 23
                          170.205.62.0/24 maxlen: 24
                          170.205.63.0/24 maxlen: 24
                          170.205.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:4b:2e:c7:1a:a6:dc:72:ec:07:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=3b4a91a6-fe7b-473d-9962-0277b7c4af5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:eb:1c:83:07:36:f5:56:f7:8d:18:09:c8:
                    cb:6d:16:3c:0d:46:fa:5f:95:be:9f:b9:86:7e:5a:
                    21:84:44:6e:3a:a3:bd:44:8c:bb:f8:2d:6b:bc:15:
                    69:ff:00:5b:6f:fa:9a:de:ad:7e:4c:85:29:39:88:
                    cb:48:09:f2:13:2a:bb:0d:ca:a3:15:91:87:55:9d:
                    3a:3f:0f:84:ec:1e:04:a6:1f:c0:53:d2:6a:41:d3:
                    07:79:a5:6d:15:16:82:a2:c0:39:2b:5a:6b:17:9f:
                    28:1d:b5:eb:60:86:4a:b3:34:26:b9:18:f6:1a:80:
                    69:18:32:e8:71:39:53:70:95:ae:6d:95:26:38:8c:
                    be:03:a9:23:0d:04:8c:5a:94:81:30:a2:c0:20:25:
                    aa:e9:4d:62:ed:46:5d:04:38:99:f9:e0:ad:1e:12:
                    1f:8e:2e:39:9b:b7:52:ff:c2:5d:50:19:9b:54:d8:
                    0f:d7:27:c9:73:22:f1:4d:a6:f7:82:ae:6d:e5:7c:
                    64:40:50:1a:46:36:9d:a4:67:56:92:2a:b1:f5:9f:
                    bf:3b:f5:17:18:37:10:29:fd:8f:78:80:d2:ee:fb:
                    a3:02:7b:18:7e:cf:19:96:a9:84:ad:35:09:56:dc:
                    bb:5c:5e:f1:e0:71:9a:06:4c:64:6b:d5:78:3b:09:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:C1:68:ED:35:96:41:75:62:2F:5E:3D:EB:2B:F9:08:86:1B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.crl

            X509v3 Authority Key Identifier:
                keyid:1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:45:ee:72:27:9a:1b:5b:9c:ad:43:a3:30:fa:b2:e0:85:46:
         ce:ec:8e:18:3e:14:90:92:37:5f:79:be:a8:93:46:f1:9f:a0:
         d0:98:06:6d:44:74:34:39:49:46:0e:33:fd:e7:6f:b2:b0:6e:
         42:e8:a8:ef:d8:92:9b:ce:9a:16:5c:4e:61:ef:69:df:50:c2:
         19:af:ff:76:df:a0:8b:0d:bc:55:50:b2:65:67:cb:06:7c:f8:
         d9:02:94:2b:63:75:5e:7f:b3:88:e0:12:cf:a0:47:a3:4a:d4:
         8d:78:10:14:9e:18:47:b4:76:0b:91:4d:18:7c:23:22:bf:b6:
         e1:44:ca:19:00:ad:f2:3c:a0:5f:dd:71:3d:11:31:75:bd:6a:
         f0:25:50:b4:1b:1a:ea:5f:27:93:87:1f:e4:37:b9:82:1e:ec:
         42:62:f9:61:bb:78:dc:62:69:1a:8a:5b:83:71:cf:84:28:80:
         bd:83:d5:7f:74:91:83:f6:36:1f:ea:22:ee:3e:a8:4a:26:7f:
         61:86:42:f7:ff:2a:96:c2:d3:40:9e:83:e7:38:d1:76:c7:15:
         19:0b:a2:f8:6d:1d:ae:dc:9f:75:88:c5:55:43:00:1a:70:7a:
         12:33:d9:c2:0e:db:cb:85:fa:87:08:a1:23:21:cd:63:12:00:
         a8:db:5f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:21 2024 by rpki-client on console-ams.rpki-client.org