Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa
File:                     a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa (raw, json)
Hash identifier:          UlGTLr3Hp2dtkHFRGSZ1PYdoqXzBYrZGLABx/Sx1YvE=
Subject key identifier:   78:E5:CB:84:12:49:BB:0B:D9:5A:94:DE:34:72:74:E0:84:6C:BF:F5
Certificate issuer:       /CN=f1221975-8406-433d-a21a-c10166c9278d
Certificate serial:       010D0C9F43285845BA7E2D3E0AD26C270E779800
Authority key identifier: CD:04:35:20:77:30:62:9F:DA:0E:AB:91:B9:89:89:C3:5F:D4:2B:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     29744
IP address blocks:        199.253.12.0/22 maxlen: 24
                          199.84.255.0/24 maxlen: 24
                          162.213.16.0/22 maxlen: 24
                          74.214.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2d:3e:0a:d2:6c:27:0e:77:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1221975-8406-433d-a21a-c10166c9278d
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=acde0f6e-3c91-42d5-b003-2397968074cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:32:ea:41:ab:ca:ad:37:42:10:59:0c:f4:
                    16:c7:ed:c0:2d:b1:47:57:4e:cb:71:5c:21:f0:af:
                    cf:97:2b:e2:40:57:db:32:43:d5:a8:c1:e9:5c:07:
                    28:b0:f1:9e:09:45:be:d0:6d:7b:29:c5:ba:27:b8:
                    10:9f:41:dd:8b:a0:ed:db:44:d0:3f:f9:d4:68:1d:
                    12:f0:24:b4:73:b5:66:e5:8e:0c:7b:e3:81:b3:b8:
                    bb:b6:f2:b8:1d:8a:ed:23:02:35:d5:51:2e:26:fb:
                    17:8a:1a:56:5b:27:19:d0:2e:9b:b9:9c:5e:19:2d:
                    d7:93:aa:e3:31:0e:de:81:c2:b9:f5:81:80:e5:33:
                    42:63:f2:6f:0d:b7:e3:19:e2:52:82:35:79:76:55:
                    a7:1c:75:a1:01:75:47:3c:d4:4e:95:61:6f:25:76:
                    98:8d:6b:13:fd:fd:56:33:aa:ff:c1:fe:68:1a:22:
                    6c:20:1e:0c:8e:52:d4:f0:97:01:25:8c:c6:ca:a0:
                    e8:2c:fc:55:ab:3b:ae:38:07:d7:7d:ed:a9:db:03:
                    f5:80:48:56:f9:b2:39:5e:6a:dc:6e:e6:cb:b4:cb:
                    a2:78:c8:84:74:d5:d8:c6:d1:80:16:e6:35:a2:a8:
                    c1:ce:11:a3:46:22:23:17:d1:81:8b:18:33:d1:bc:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E5:CB:84:12:49:BB:0B:D9:5A:94:DE:34:72:74:E0:84:6C:BF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.crl

            X509v3 Authority Key Identifier:
                keyid:CD:04:35:20:77:30:62:9F:DA:0E:AB:91:B9:89:89:C3:5F:D4:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.208.0/20
                  162.213.16.0/22
                  199.84.255.0/24
                  199.253.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:97:ab:c0:f1:e7:49:5d:66:0a:7f:8d:73:2d:79:85:80:90:
         24:0a:ca:5d:9a:ce:04:f5:6e:bf:7a:75:fd:c3:39:83:f6:c1:
         74:b5:bf:bb:c2:51:f0:d7:bb:e5:a5:0d:0d:96:ee:77:ae:8e:
         f9:1b:84:29:3f:7a:52:ee:8c:4b:60:c3:e1:90:8e:e9:41:54:
         eb:4f:01:4f:04:83:3b:19:82:07:5a:60:cf:32:42:b2:15:98:
         4f:07:ee:7e:1e:31:c3:a6:46:4e:af:86:60:f5:85:fa:b6:8b:
         80:ad:d1:d5:b2:b4:11:94:6b:30:11:fe:54:11:23:6f:fe:b4:
         ca:00:46:ba:3b:a7:e4:17:17:d8:9d:4c:7b:73:59:82:90:b5:
         0f:1a:66:0d:98:59:48:5a:7e:f6:e5:68:ce:3a:56:e6:dd:a3:
         04:3a:65:b1:b5:90:e8:59:6f:95:81:82:42:44:70:1c:78:bb:
         d0:3b:3b:28:86:15:ca:6c:e1:26:a5:6a:e0:c7:b8:d6:d6:51:
         61:3a:19:cf:1c:b8:11:36:2c:25:b9:c8:5e:f2:16:16:72:4f:
         9e:c9:40:a6:2e:e7:90:55:4d:da:72:17:11:a7:bc:87:81:24:
         5d:a6:11:c9:e5:77:ed:35:db:2c:0b:f8:0e:e8:cc:bb:f7:fe:
         8c:63:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 15:59:32 2024 by rpki-client on console-fra.rpki-client.org