Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa
File:                     0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa (raw, json)
Hash identifier:          LA2S7y6Fg4jJUjxNM7+olikRtMAkKjh+zfUhO7HPUqI=
Subject key identifier:   36:03:A3:AB:A2:6B:30:F7:36:7D:E8:58:A5:FC:2D:CC:F0:CA:A5:8B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845025ACAA0F3BDD773A11894F0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     151397
IP address blocks:        128.1.12.0/24 maxlen: 24
                          128.1.15.0/24 maxlen: 24
                          128.1.13.0/24 maxlen: 24
                          2602:ffe4:c60::/48 maxlen: 48
                          2602:ffe4:c5f::/48 maxlen: 48
                          2602:ffe4:c61::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:ca:a0:f3:bd:d7:73:a1:18:94:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=6cf7147a-baa1-42e6-b462-fef538f3b0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:9a:4a:f3:74:42:ac:f8:73:8f:ea:6b:4f:
                    0f:49:a2:1a:2e:3f:b5:f9:ee:ff:7c:97:b6:1a:ff:
                    b4:18:08:34:e4:52:18:60:ff:ed:70:e2:fb:d7:63:
                    50:83:c2:72:4d:3d:9d:88:70:86:f7:80:16:69:9d:
                    a0:5a:64:93:c7:21:f1:1c:04:5a:f5:39:ac:4a:00:
                    0a:09:2a:e0:e6:a3:c8:6e:d3:cf:ee:ce:f4:b3:d2:
                    4b:74:f1:8c:e7:83:be:7e:fd:72:53:29:56:50:f0:
                    3d:76:b5:ff:88:8b:76:22:a7:86:5a:f6:0f:68:14:
                    58:7a:f7:8a:2b:43:2d:71:f1:2d:49:f7:eb:49:39:
                    fe:68:fd:0a:ae:b0:85:8c:ce:e5:f8:4b:54:97:7b:
                    1b:3b:5d:75:46:53:bb:ce:36:f6:25:c0:42:34:58:
                    de:21:b1:47:b4:29:f3:75:b2:83:42:16:6b:b3:88:
                    86:34:41:a9:e7:0f:74:14:07:30:52:91:c2:6e:96:
                    53:32:4a:e5:ba:e8:8d:30:fa:52:50:14:02:16:88:
                    13:83:2e:79:ec:55:e8:ba:46:84:91:6f:cc:3e:41:
                    99:49:02:bd:49:8a:0d:dc:59:8d:69:3b:11:93:fe:
                    99:4b:56:1f:7c:f6:d0:7a:62:f7:67:d9:a7:d6:e7:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:03:A3:AB:A2:6B:30:F7:36:7D:E8:58:A5:FC:2D:CC:F0:CA:A5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.12.0/23
                  128.1.15.0/24
                IPv6:
                  2602:ffe4:c5f::-2602:ffe4:c61:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:4b:c6:61:40:ed:b0:f3:f2:ca:21:fe:0f:47:ba:27:f5:
         d3:e1:cb:19:a7:58:ee:6c:98:e3:5a:0c:5c:be:35:e4:4c:22:
         1a:f0:66:7d:a5:b5:e6:69:e2:86:34:fe:72:14:3a:7b:0d:75:
         73:eb:b0:89:0d:df:ab:12:07:51:95:f3:49:db:57:9d:a2:50:
         83:57:a7:ff:90:6d:71:8b:2f:92:dc:8c:19:30:66:5f:6d:6c:
         7b:b5:b5:0f:08:01:6a:28:9f:30:a7:e9:7b:26:74:53:35:fc:
         9b:2b:4c:f1:b6:5f:f1:a2:9c:31:67:02:1b:fe:4f:b7:11:ff:
         34:3a:98:3b:7e:59:38:b1:4a:fd:27:6c:81:f2:f0:8c:0f:30:
         9f:eb:15:e7:4a:5b:93:58:1f:1b:f6:a0:83:0c:08:27:66:b9:
         1f:55:40:5c:a8:fe:e1:a3:39:fe:86:b3:87:ff:ad:1a:34:a6:
         1e:26:c0:4d:15:44:6c:e3:33:7f:15:a8:aa:e0:72:9c:1c:05:
         fa:fd:9e:91:25:91:08:9c:c1:72:ec:b1:75:32:79:0a:8b:aa:
         1b:a5:48:06:00:27:fc:e9:9d:80:9f:d5:5b:cc:ab:d6:05:a4:
         0a:4d:86:f7:2f:52:83:33:e3:ae:4e:57:dc:9c:08:bf:45:f7:
         6a:93:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:03:55 2024 by rpki-client on console-fra.rpki-client.org