Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
File:                     30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa (raw, json)
Hash identifier:          /POC/QogKzgfrqmQdZle2pIY8mhfOIui3vOzOnjgiBw=
Subject key identifier:   E9:EA:33:F1:F8:37:D7:DF:A6:56:1D:90:FB:4F:3D:D2:F1:47:D5:91
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845777DDCB7FE8E244FB328C980
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     135377
IP address blocks:        107.155.43.0/24 maxlen: 24
                          107.155.45.0/24 maxlen: 24
                          107.155.48.0/24 maxlen: 24
                          107.155.50.0/24 maxlen: 24
                          107.155.55.0/24 maxlen: 24
                          23.91.100.0/23 maxlen: 24
                          23.236.126.0/24 maxlen: 24
                          23.91.96.0/22 maxlen: 24
                          23.248.184.0/23 maxlen: 24
                          128.1.40.0/21 maxlen: 24
                          128.1.48.0/23 maxlen: 24
                          128.1.79.0/24 maxlen: 24
                          128.1.131.0/24 maxlen: 24
                          128.1.132.0/22 maxlen: 24
                          128.1.136.0/23 maxlen: 24
                          128.1.138.0/24 maxlen: 24
                          107.155.56.0/24 maxlen: 24
                          107.155.60.0/24 maxlen: 24
                          128.1.38.0/23 maxlen: 24
                          104.218.164.0/22 maxlen: 24
                          172.96.124.0/24 maxlen: 24
                          45.43.52.0/22 maxlen: 24
                          107.150.126.0/23 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          45.43.56.0/21 maxlen: 24
                          45.40.56.0/23 maxlen: 24
                          128.14.224.0/20 maxlen: 24
                          169.197.113.0/24 maxlen: 24
                          104.218.162.0/23 maxlen: 24
                          45.43.36.0/23 maxlen: 24
                          107.155.15.0/24 maxlen: 24
                          23.248.162.0/23 maxlen: 24
                          23.248.174.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:dc:b7:fe:8e:24:4f:b3:28:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=81fc8166-1631-45db-a7dc-994ecd53382f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:03:d3:7e:c7:c2:a7:c8:f0:26:b9:fe:6c:b6:
                    07:b0:fa:2a:1f:3d:a5:ad:a8:c2:d7:d6:93:00:ea:
                    2b:51:ee:89:a4:7c:72:76:aa:52:09:94:08:9a:5a:
                    2e:e2:28:09:28:6f:d8:97:d0:aa:a1:77:e2:f9:3b:
                    d7:5e:f3:de:9b:fd:3a:c9:66:98:d2:b5:7e:ec:0f:
                    7a:8e:40:ba:83:24:51:3c:e3:e5:ef:09:82:78:02:
                    c4:08:61:64:4b:aa:3f:c9:41:85:00:88:c5:fa:0f:
                    01:49:67:db:2b:94:86:32:c3:5c:7e:90:a6:7d:a7:
                    e1:a5:da:76:21:37:a9:81:a9:c5:ea:3c:af:4f:cc:
                    4f:f9:e1:62:03:0b:b1:68:11:f6:17:97:94:0f:db:
                    b2:1e:74:5c:d4:34:2d:85:7b:d9:ec:14:ca:1c:28:
                    68:8c:ab:05:8f:63:70:d8:5a:51:30:6e:7c:f5:f3:
                    8b:c3:c0:64:9f:c5:1f:ff:62:11:75:be:22:ed:e8:
                    e8:f4:0c:60:8c:98:e3:45:db:86:80:8e:b6:8f:29:
                    73:09:4d:69:f5:61:69:1c:86:84:ae:bd:49:31:94:
                    0f:c8:d9:07:80:5b:77:75:8c:49:7e:16:ce:2f:3e:
                    b8:77:5b:01:ce:e1:1d:95:60:85:6d:9b:83:1f:05:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:33:F1:F8:37:D7:DF:A6:56:1D:90:FB:4F:3D:D2:F1:47:D5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0-23.91.101.255
                  23.236.126.0/24
                  23.248.162.0/23
                  23.248.174.0/23
                  23.248.184.0/23
                  45.40.56.0/23
                  45.43.36.0/23
                  45.43.52.0-45.43.63.255
                  104.218.162.0-104.218.167.255
                  107.150.96.0/19
                  107.155.15.0/24
                  107.155.43.0/24
                  107.155.45.0/24
                  107.155.48.0/24
                  107.155.50.0/24
                  107.155.55.0-107.155.56.255
                  107.155.60.0/24
                  128.1.38.0-128.1.49.255
                  128.1.79.0/24
                  128.1.131.0-128.1.138.255
                  128.14.224.0/20
                  169.197.113.0/24
                  172.96.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:94:e6:f8:39:a0:32:bc:d0:11:06:f3:cb:b6:e9:cf:31:
         49:1a:f2:a2:e8:56:62:3f:b8:37:28:5a:04:3b:f5:df:99:45:
         68:b0:1e:20:ed:88:cd:24:b2:a9:51:16:4a:b3:f8:98:56:6c:
         29:9a:3f:13:4d:2c:a0:ca:f5:33:36:ab:d1:4d:11:04:75:2c:
         1e:7b:b1:12:57:8f:ad:8f:44:e8:90:ec:d0:7a:39:88:71:29:
         31:71:44:76:8c:df:ad:f7:79:94:09:db:5d:b0:8c:26:06:9b:
         81:07:c5:60:20:eb:b6:67:01:23:f8:32:33:77:d5:b1:ec:e6:
         5b:78:59:ec:fc:5c:83:48:a9:ff:9a:54:04:f9:9a:06:7a:f5:
         31:83:bf:5b:82:60:c6:2b:dd:b0:4a:14:6a:ff:2f:38:5f:be:
         36:91:2a:fc:13:db:03:58:50:a5:61:20:c3:e9:ec:69:29:da:
         21:d7:cc:10:e1:24:53:f4:57:57:13:51:ed:c5:31:c2:35:12:
         66:7b:36:87:20:87:06:1d:c1:ee:4f:4c:d1:be:26:9d:f9:ae:
         af:d4:74:f2:72:6c:78:94:9c:c2:a3:81:74:42:3a:d0:57:f8:
         0c:a9:2a:6d:53:f2:87:1e:a2:39:c2:26:29:20:a3:4f:a8:07:
         7a:e8:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:51:15 2024 by rpki-client on console-ams.rpki-client.org