Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/fda4f42a-a988-3d54-a0cd-34ffbc5b015e.roa
File:                     fda4f42a-a988-3d54-a0cd-34ffbc5b015e.roa (raw, json)
Hash identifier:          p/e5Jqfx/hcLNWFopIW9pWpOqh9LQxKOtXYmAVBnBHk=
Subject key identifier:   F4:87:BD:C7:3C:F8:74:82:5B:68:44:B7:56:9C:83:86:57:5E:B1:F9
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F43285845FAB3E7CDD166D44E009A2EA7
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/fda4f42a-a988-3d54-a0cd-34ffbc5b015e.roa
Signing time:             Fri 24 May 2024 13:00:34 +0000
ROA not before:           Fri 24 May 2024 13:00:34 +0000
ROA not after:            Thu 22 Aug 2024 13:00:34 +0000
asID:                     812
IP address blocks:        72.139.200.0/21 maxlen: 24
                          72.139.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:b3:e7:cd:d1:66:d4:4e:00:9a:2e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: May 24 13:00:34 2024 GMT
            Not After : Aug 22 13:00:34 2024 GMT
        Subject: CN=cfe5a2e0-8f4e-4582-99a3-897d2f179b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:7d:49:8a:3f:cc:ca:d1:4e:64:e8:b0:2c:
                    85:5b:44:a5:cb:26:3b:0c:2a:a8:1b:85:1a:68:dd:
                    6b:82:9e:e4:5d:93:09:3e:9c:b0:45:74:b3:1f:f3:
                    40:fa:d2:c8:56:11:62:0f:50:e7:ae:d0:9d:5a:5b:
                    62:50:aa:00:b4:e4:39:25:b0:45:89:76:a0:43:85:
                    40:c1:11:ff:d9:85:82:f5:9c:8e:3f:25:d5:a9:ce:
                    9e:c5:36:00:10:fe:a2:b5:35:bc:35:50:fd:c9:e2:
                    ef:31:11:07:91:3b:dc:a4:1e:e4:ef:50:0a:d0:7e:
                    57:d8:58:88:fd:85:62:f3:97:0e:c8:78:ff:2c:09:
                    41:56:df:f3:3c:5b:30:10:e8:ec:f1:4b:51:70:94:
                    ca:da:1e:6e:11:24:5d:7d:9f:92:75:d7:7f:13:c4:
                    4a:8a:0c:e7:e6:f2:01:24:e4:d7:03:78:5b:c9:af:
                    9d:01:64:22:71:9f:5a:dd:61:15:4b:f3:f1:ae:03:
                    1d:41:23:a9:01:df:5e:b8:28:64:50:37:e0:e8:3b:
                    5b:c2:39:1a:89:e7:01:84:17:f2:8c:26:b7:1d:ef:
                    b1:64:c1:67:97:57:13:12:19:60:a4:c8:9e:8e:f2:
                    e9:9d:3f:22:9d:84:5d:30:bb:6c:b4:8c:10:80:18:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:BD:C7:3C:F8:74:82:5B:68:44:B7:56:9C:83:86:57:5E:B1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/fda4f42a-a988-3d54-a0cd-34ffbc5b015e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.139.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:81:74:e2:3e:77:77:e9:bf:33:94:df:fe:6b:75:68:7d:
         66:07:2b:3c:5f:4b:e7:d2:04:17:a5:cf:38:9a:c0:7c:ea:91:
         16:51:22:d1:8d:62:8d:f5:7d:e5:b9:13:d9:e5:ea:08:e9:01:
         a4:e6:44:90:8f:b5:13:26:b4:f7:21:5b:67:f7:ed:39:a1:d9:
         5a:e9:a3:2d:7a:aa:81:78:e8:a7:65:73:46:4b:07:ba:8a:d4:
         8d:33:5e:13:2c:da:d5:83:23:5a:c7:79:46:cb:11:30:0d:d5:
         b0:7b:a3:03:32:81:da:90:89:a5:ac:3f:51:4b:35:c4:8d:0a:
         e9:b7:ce:6d:c7:d4:83:80:68:8f:d4:82:ba:07:4f:6c:fa:8d:
         59:06:80:31:f7:ca:19:0e:b7:b1:10:79:a1:51:d3:fd:38:bb:
         c8:69:c4:80:20:ea:21:dc:3d:fb:20:05:c5:d7:04:37:43:c0:
         ad:bb:62:40:03:00:9a:0d:37:85:7e:e9:ef:f4:05:03:d2:af:
         f2:cd:f4:36:43:c8:e1:e8:ab:ba:01:6c:f3:2b:36:d0:44:51:
         f5:03:31:ad:a8:85:40:33:26:82:7b:81:5a:c7:ce:26:a3:b0:
         7d:fa:3a:12:2e:12:ce:ed:50:40:22:b3:fc:1b:39:7f:dc:f3:
         7a:d3:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:15 2024 by rpki-client on console-ams.rpki-client.org