Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa
File:                     5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa (raw, json)
Hash identifier:          hvbR1YxKX4tcZwM7kM9jt1HoK0p87Mtr8cvo6i9uEg4=
Subject key identifier:   D6:45:54:D2:E8:37:E7:71:98:1F:E9:E3:72:57:12:F0:65:3F:5D:81
Certificate issuer:       /CN=d0125580-9deb-4d15-b1e7-1a6f7958b187
Certificate serial:       010D0C9F4328584733B8AFD2232620D0D52CA2C0
Authority key identifier: 27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa
Signing time:             Fri 13 Sep 2024 15:58:18 +0000
ROA not before:           Fri 13 Sep 2024 15:58:18 +0000
ROA not after:            Thu 12 Dec 2024 16:58:18 +0000
asID:                     396317
IP address blocks:        104.193.40.0/22 maxlen: 22
                          104.193.40.0/24 maxlen: 24
                          104.193.40.0/27 maxlen: 27
                          104.193.40.32/27 maxlen: 27
                          104.193.40.64/27 maxlen: 27
                          104.193.40.96/27 maxlen: 27
                          104.193.40.128/27 maxlen: 27
                          104.193.40.160/27 maxlen: 27
                          104.193.40.192/27 maxlen: 27
                          104.193.40.224/27 maxlen: 27
                          104.193.41.0/24 maxlen: 27
                          104.193.42.0/23 maxlen: 23
                          172.110.136.0/22 maxlen: 22
                          2605:3c40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:b8:af:d2:23:26:20:d0:d5:2c:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0125580-9deb-4d15-b1e7-1a6f7958b187
        Validity
            Not Before: Sep 13 15:58:18 2024 GMT
            Not After : Dec 12 16:58:18 2024 GMT
        Subject: CN=24d7250e-e081-4478-ace7-c0a0586e96e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:69:86:44:34:c8:17:9a:d1:40:3b:04:a6:
                    be:33:41:40:0a:99:04:2b:3d:55:ba:20:84:e7:2e:
                    c8:e3:a7:0a:f3:1b:58:17:6d:37:d1:3e:15:e4:32:
                    06:f8:7d:41:47:6b:10:67:75:91:cd:73:ff:85:b0:
                    f9:f2:c3:19:0d:71:40:9a:47:03:ba:a3:49:e4:47:
                    57:5a:09:8e:f2:a7:7f:4b:4f:2f:2c:cc:f5:cd:17:
                    4e:30:d2:a0:ba:5d:c6:b0:0b:9c:e4:e9:6f:1e:28:
                    b5:48:e6:38:5b:e0:46:af:17:2d:25:96:bd:78:07:
                    76:ea:d7:c8:ee:49:eb:5b:13:1b:f7:b1:50:f8:d1:
                    cd:7b:5a:c2:07:33:73:2d:f3:c6:64:a7:4f:36:44:
                    5b:73:a5:63:4a:bd:6c:0c:98:1d:32:1b:84:d5:9d:
                    ed:fb:36:44:d5:a6:e0:12:ad:65:73:cc:ad:54:27:
                    11:c3:e6:35:e8:9e:42:2a:e0:44:54:d4:96:d2:d0:
                    ef:a0:00:70:dc:ab:2b:71:c1:24:a2:f9:46:90:4a:
                    f0:03:67:d9:a0:20:d1:8e:65:c6:6f:88:cb:6f:cc:
                    21:e3:b3:fc:3b:f3:6f:67:da:2d:ad:d5:3a:7d:fe:
                    d3:32:96:0a:0b:a5:90:ac:54:ff:48:be:e8:ad:78:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:54:D2:E8:37:E7:71:98:1F:E9:E3:72:57:12:F0:65:3F:5D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl

            X509v3 Authority Key Identifier:
                keyid:27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.40.0/22
                  172.110.136.0/22
                IPv6:
                  2605:3c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:87:b4:f1:2a:44:98:1b:4e:04:eb:d4:70:d7:6d:ff:31:d9:
         08:cf:5f:7c:51:dd:40:5d:30:4e:54:cd:9e:3f:d7:21:67:98:
         9d:7d:08:64:fd:4f:3f:d6:ec:cb:c7:f0:e1:e8:3e:87:a8:40:
         0b:ae:c5:07:69:e2:e6:99:b5:99:c8:3f:8e:1a:c7:b5:66:b7:
         23:dc:4e:e8:1a:18:0d:c0:10:31:8f:6f:e4:dc:39:f4:66:91:
         f1:0b:bb:f2:83:78:89:29:a5:ac:b0:6b:f6:e7:31:1a:73:ca:
         9b:0f:2e:8b:48:1b:eb:0d:58:32:0b:63:a3:c3:3e:94:28:9f:
         63:92:25:27:c2:1d:a5:ef:e0:e2:da:23:cc:dd:91:f1:32:ca:
         f8:d2:45:da:64:0a:77:69:08:19:d1:d8:fb:37:43:3e:63:05:
         7b:16:cb:37:f6:ef:09:4a:16:5f:5a:19:22:31:93:b0:72:a9:
         55:29:b7:45:c3:13:40:31:47:44:0d:6b:ea:76:8b:ee:f9:a4:
         fa:76:cd:b2:97:da:b2:46:4b:87:9c:3f:02:11:8f:45:f7:7d:
         1e:98:a4:7e:e0:93:85:7d:08:a2:67:50:37:07:c5:90:20:ca:
         df:b1:28:29:7f:ab:cd:a2:37:b7:4b:6b:60:6d:c6:07:3b:3f:
         50:07:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:13 2024 by rpki-client on console-fra.rpki-client.org