Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa
File:                     4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa (raw, json)
Hash identifier:          4bEO6EVG+JNJG3eiabOvQ66NNY1E/XCXtza+Y0VTu90=
Subject key identifier:   21:CF:8F:3F:84:C7:3A:DD:73:E1:26:59:7A:4B:82:D3:F5:73:81:B4
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F4328584592032488D1DCFF41B42F7190
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa
Signing time:             Wed 17 Apr 2024 01:00:24 +0000
ROA not before:           Wed 17 Apr 2024 01:00:24 +0000
ROA not after:            Tue 16 Jul 2024 01:00:24 +0000
asID:                     19905
IP address blocks:        205.156.160.0/23 maxlen: 23
                          205.156.164.0/24 maxlen: 24
                          205.156.184.0/21 maxlen: 21
                          205.156.144.0/21 maxlen: 21
                          205.156.152.0/22 maxlen: 22
                          205.156.117.0/24 maxlen: 24
                          205.156.128.0/22 maxlen: 22
                          205.156.132.0/23 maxlen: 23
                          205.156.134.0/24 maxlen: 24
                          205.156.135.0/24 maxlen: 24
                          205.156.136.0/21 maxlen: 21
                          205.156.87.0/24 maxlen: 24
                          205.156.84.0/24 maxlen: 24
                          205.156.85.0/24 maxlen: 24
                          205.156.72.0/21 maxlen: 21
                          205.156.80.0/22 maxlen: 22
                          205.156.64.0/21 maxlen: 21
                          205.156.68.0/22 maxlen: 22
                          205.156.104.0/21 maxlen: 21
                          205.156.86.0/24 maxlen: 24
                          205.156.112.0/22 maxlen: 22
                          205.156.100.0/23 maxlen: 23
                          205.156.88.0/21 maxlen: 21
                          205.156.96.0/22 maxlen: 22
                          205.156.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:92:03:24:88:d1:dc:ff:41:b4:2f:71:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Apr 17 01:00:24 2024 GMT
            Not After : Jul 16 01:00:24 2024 GMT
        Subject: CN=415e871e-3b17-446f-ba77-66dfa33f54a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:15:8b:ae:21:8f:6c:1b:80:34:db:51:b2:
                    e7:9a:39:31:6b:7a:98:95:3b:c8:fc:24:8f:11:b1:
                    2b:0a:1e:86:bd:98:a9:aa:fe:1e:98:fa:dd:df:e3:
                    99:3a:0f:00:2c:34:1d:4f:36:70:48:bb:3c:18:d1:
                    73:77:dc:22:38:41:5d:60:b5:eb:e7:04:77:e4:4a:
                    3d:34:e0:99:66:10:f4:10:45:36:9b:4f:e5:24:74:
                    e3:9e:56:a4:1b:53:61:b7:c4:25:16:bd:46:06:15:
                    d1:b5:cd:c8:ec:da:9d:66:40:3a:ad:84:5b:c3:98:
                    1f:f2:fe:91:2a:ce:b4:01:b0:37:40:63:84:bc:8f:
                    30:e7:e7:4d:ab:27:58:81:48:d1:c2:d5:bc:af:ce:
                    28:e5:d5:0d:90:14:b4:7f:8f:53:bb:32:3d:eb:d5:
                    2d:9b:38:7a:93:7e:57:c9:cb:62:64:91:b1:6b:cc:
                    c7:f6:9e:b0:d3:60:78:ef:0a:8d:00:2d:e3:b8:a9:
                    a5:2f:dd:ff:dd:c5:fa:37:dd:fe:a1:cc:c8:76:cd:
                    38:ee:7b:38:60:04:22:94:fb:be:1e:2a:97:4d:ab:
                    af:74:d3:ac:f4:42:ea:f8:8f:aa:20:f2:22:ab:78:
                    66:42:2e:d7:3c:c9:91:f0:0a:5d:1e:76:89:fd:c4:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CF:8F:3F:84:C7:3A:DD:73:E1:26:59:7A:4B:82:D3:F5:73:81:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.64.0-205.156.101.255
                  205.156.104.0-205.156.115.255
                  205.156.117.0/24
                  205.156.128.0-205.156.155.255
                  205.156.160.0/23
                  205.156.164.0/24
                  205.156.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:73:a9:fe:0d:50:d7:c2:82:1c:b7:67:4e:9e:2d:76:0a:ef:
         ca:8b:3c:30:75:e3:0c:cc:c3:d3:43:2b:0e:ba:b6:86:4c:d1:
         37:e7:bf:9e:83:b4:aa:ae:c2:d6:f4:f5:24:af:cf:ce:bd:63:
         b2:c2:fa:a7:cf:f4:f9:a9:56:e2:25:40:88:24:7f:97:d2:8c:
         df:c9:35:da:48:db:e1:a3:4d:a5:6a:5e:a2:23:a8:12:2d:5b:
         cb:76:cf:e2:8a:44:22:d1:70:c7:5b:f9:0c:96:70:a9:97:7a:
         e0:3a:9d:b5:a5:d3:dd:30:84:73:f4:a5:a5:94:a8:91:f0:c9:
         26:39:d9:0a:c3:a6:ea:7e:90:14:36:3e:22:b7:71:dd:4e:bf:
         a7:61:43:93:fb:ba:83:71:70:eb:70:e9:82:26:45:38:5f:b2:
         d1:ea:e8:74:d7:f7:58:ce:35:a0:3e:bd:f9:77:0e:5e:ca:7d:
         ac:f3:0c:e0:e6:32:e2:3f:29:48:03:43:41:e7:98:38:82:b4:
         60:c9:dd:c1:30:72:59:32:b2:07:fa:89:04:04:0e:a4:cd:89:
         ba:43:94:0f:d2:2f:dd:41:12:2f:33:a1:e9:19:40:2d:78:8a:
         8d:9a:53:96:92:c0:4b:63:f6:0b:51:e5:40:d9:22:15:56:f8:
         9e:92:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:54:36 2024 by rpki-client on console-fra.rpki-client.org