Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
File:                     5805723c-746c-3198-a633-1c5ff07a902b.roa (raw, json)
Hash identifier:          EUD9Xdb7sYlsePdIPBdjgAFfL769JXdBDJiPk1SsVW0=
Subject key identifier:   0E:43:61:DA:23:DA:4E:B7:E6:29:50:FF:8F:96:79:08:4D:9E:8D:4D
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845777DE0097635323AED7CA700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     4766
IP address blocks:        128.1.76.0/24 maxlen: 24
                          128.1.36.0/24 maxlen: 24
                          107.155.28.0/24 maxlen: 24
                          23.248.161.0/24 maxlen: 24
                          23.248.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e0:09:76:35:32:3a:ed:7c:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=44acf93e-aeb7-4fa4-a756-b2eb7c928c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:89:dc:b3:b6:a4:c8:4b:bc:b1:6e:f5:e3:
                    64:a3:f6:ae:69:46:f8:9e:69:01:e2:e8:63:a0:25:
                    36:00:55:c4:9c:2a:07:03:df:23:c2:e4:2a:34:9b:
                    a3:35:ca:15:c0:1e:8c:8c:b2:4d:22:56:c3:4d:71:
                    3c:61:22:41:fb:22:c8:0c:9b:58:a6:56:a5:ce:b5:
                    bf:09:25:1b:00:81:9a:9c:69:e5:e9:01:b3:30:16:
                    7a:4c:a2:4b:ab:c1:53:8e:76:62:8d:c1:0f:00:44:
                    ad:e0:cb:91:c1:76:e7:fc:db:18:d9:f5:85:dc:08:
                    3c:ba:51:a7:ec:44:1d:6f:da:ba:ed:4c:40:df:81:
                    a1:ba:b1:2e:e6:20:45:e2:15:04:b7:96:0f:24:59:
                    eb:d2:87:d7:c9:23:84:c8:c9:f3:9e:aa:33:dc:7e:
                    7b:9f:d7:3d:47:0b:6a:63:3d:eb:1b:10:63:32:ec:
                    49:77:70:35:d5:26:ed:49:e5:91:ce:e5:bc:b6:6f:
                    33:b7:8b:72:69:0c:6e:31:9e:e6:1f:c2:bd:09:c7:
                    c3:8c:cb:9d:cf:e3:8c:14:60:62:8c:a7:c1:e4:85:
                    44:d6:18:bc:a3:04:b3:5a:35:df:b5:34:1d:4b:60:
                    57:23:c9:a4:40:b6:de:83:af:c1:79:41:93:a1:b9:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:43:61:DA:23:DA:4E:B7:E6:29:50:FF:8F:96:79:08:4D:9E:8D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.248.160.0/23
                  107.155.28.0/24
                  128.1.36.0/24
                  128.1.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:bc:60:45:73:ca:94:7b:22:79:9a:73:7d:f0:6c:95:9b:
         c5:c7:cd:96:7c:5a:54:25:e7:9a:a5:d2:c6:bd:eb:2d:cc:57:
         4f:c2:88:43:e6:db:39:68:be:0b:26:34:0a:11:18:eb:af:44:
         40:cb:27:85:d8:0e:f2:8e:77:d3:b1:d3:e7:00:a2:bc:b7:6b:
         35:c1:9d:de:12:9a:58:98:f0:f3:27:1b:3a:29:02:ad:2e:af:
         62:66:9b:4c:9e:ef:ca:48:2c:cd:da:e0:64:1c:52:25:1c:0a:
         71:41:eb:d8:bc:32:2e:ed:11:65:75:78:ab:f2:99:4c:eb:88:
         34:56:5c:ee:6c:8b:f6:22:a5:31:9c:59:a0:c2:e2:77:c0:91:
         bc:4f:d7:d0:40:35:8a:07:5e:6a:8c:e9:e5:af:3b:6f:d7:a6:
         f2:84:dc:22:b8:47:7e:ef:57:24:a1:58:fd:32:8d:b5:5f:cc:
         f9:6e:bd:ff:b2:89:bb:b1:84:04:b9:aa:33:41:e3:f3:57:1c:
         83:34:8a:2d:68:7a:99:18:8a:22:2c:25:68:e1:98:be:56:2f:
         63:d6:10:71:1f:fe:f6:ff:c9:95:93:4c:c5:3e:4e:9c:98:03:
         d0:f8:58:d9:92:db:cf:5c:b1:04:62:47:82:c0:c6:74:73:05:
         a1:6d:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:32:53 2024 by rpki-client on console-fra.rpki-client.org