Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
File:                     5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa (raw, json)
Hash identifier:          wEGT/oON33aEIzNvZ+lXWVDfg6wwdnMcc7b4qK8XIkU=
Subject key identifier:   8B:F6:FE:CB:21:06:DA:67:69:6C:9B:09:4E:55:61:CE:4E:04:42:EA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845777DDC9181B2C5307E7F2CC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     21859
IP address blocks:        172.81.120.0/21 maxlen: 24
                          169.197.96.0/19 maxlen: 24
                          128.1.0.0/16 maxlen: 24
                          192.254.80.0/20 maxlen: 24
                          128.1.42.0/24 maxlen: 24
                          172.96.112.0/20 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          128.14.0.0/16 maxlen: 24
                          104.254.112.0/21 maxlen: 24
                          107.155.0.0/18 maxlen: 24
                          104.218.160.0/21 maxlen: 24
                          162.221.192.0/21 maxlen: 24
                          65.255.32.0/20 maxlen: 24
                          162.221.4.0/22 maxlen: 24
                          107.150.113.0/24 maxlen: 24
                          199.91.72.0/22 maxlen: 24
                          23.91.96.0/20 maxlen: 24
                          23.236.112.0/20 maxlen: 24
                          45.43.32.0/19 maxlen: 24
                          45.40.48.0/20 maxlen: 24
                          23.251.96.0/19 maxlen: 24
                          199.245.56.0/21 maxlen: 24
                          23.248.160.0/19 maxlen: 24
                          199.190.44.0/22 maxlen: 24
                          45.43.59.0/24 maxlen: 24
                          209.177.80.0/20 maxlen: 24
                          69.28.48.0/20 maxlen: 24
                          208.81.200.0/22 maxlen: 24
                          23.236.96.0/20 maxlen: 24
                          107.151.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:dc:91:81:b2:c5:30:7e:7f:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=e414cfb9-679f-4044-92f9-3ddd969aff57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:1a:b5:89:d8:f7:b4:6f:e3:aa:1f:9e:90:
                    f4:47:b6:45:ee:c7:91:b6:60:f6:a2:ee:ef:95:1e:
                    71:9c:4f:2e:5d:3f:88:b9:c0:d5:e5:8f:fc:86:a1:
                    5a:fd:e9:28:32:cd:d5:ab:a4:12:0b:ec:f0:75:72:
                    e5:ea:6f:73:72:61:70:44:fb:79:dd:42:c2:ca:59:
                    7d:59:68:a5:2e:0c:54:76:0c:6e:9b:98:d7:f3:57:
                    3f:83:29:cf:ed:00:ea:b2:9a:a0:2a:f1:33:b0:02:
                    66:49:3b:be:9e:6d:02:5e:f1:82:a8:0e:16:3b:88:
                    b3:49:a3:75:17:6e:47:9c:2a:25:a7:76:5e:23:69:
                    11:e9:ba:ae:9c:84:39:28:2f:75:fc:8d:f1:23:97:
                    da:9a:29:3d:f0:0f:86:3f:5c:ca:12:68:d2:d0:e3:
                    d0:0a:0c:41:52:36:93:95:51:34:3d:0c:92:39:ed:
                    72:d7:45:f6:0b:ec:8e:81:4d:13:8b:d2:65:d0:7a:
                    0b:86:7e:4e:87:87:de:77:f7:db:d5:62:49:b8:72:
                    93:b5:02:5f:28:c9:07:5e:97:64:97:53:55:b5:d2:
                    15:3f:36:ee:a4:cf:58:da:32:32:73:3b:2b:c8:09:
                    b9:bd:8d:30:2c:d1:2d:30:18:d1:42:c5:42:84:4d:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:FE:CB:21:06:DA:67:69:6C:9B:09:4E:55:61:CE:4E:04:42:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0/20
                  23.236.96.0/19
                  23.248.160.0/19
                  23.251.96.0/19
                  45.40.48.0/20
                  45.43.32.0/19
                  65.255.32.0/20
                  69.28.48.0/20
                  104.218.160.0/21
                  104.254.112.0/21
                  107.150.96.0/19
                  107.151.128.0/18
                  107.155.0.0/18
                  128.1.0.0/16
                  128.14.0.0/16
                  162.221.4.0/22
                  162.221.192.0/21
                  169.197.96.0/19
                  172.81.120.0/21
                  172.96.112.0/20
                  192.254.80.0/20
                  199.91.72.0/22
                  199.190.44.0/22
                  199.245.56.0/21
                  208.81.200.0/22
                  209.177.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b7:a4:b6:52:98:6a:74:65:ed:41:7d:fb:7b:c0:2f:7f:e5:
         13:3d:46:22:03:4a:10:6d:16:5a:f7:79:8d:34:23:17:13:e9:
         cb:29:c5:44:6a:a3:5f:0c:74:a4:07:39:c2:31:d3:12:a6:30:
         55:34:10:4c:99:f6:7b:6c:aa:3c:fa:79:55:41:64:8e:42:e7:
         9e:7d:92:fb:ce:9c:1e:65:50:35:eb:21:2d:eb:ec:15:39:58:
         f5:03:60:70:49:8b:e3:5c:84:83:e1:48:cd:81:e3:3b:cd:5c:
         4b:7b:01:f1:0b:42:5d:da:d2:97:9b:00:86:5f:17:2c:54:db:
         d2:1a:33:24:bc:88:a4:46:70:b4:10:30:8f:03:45:ae:ab:9e:
         41:2c:13:24:69:3c:ab:08:94:73:03:25:54:ae:55:1e:fa:f1:
         4e:f4:63:df:8d:6b:9a:8c:d3:9b:ae:d6:b0:b0:fc:0c:07:f5:
         ea:ce:7e:23:86:b8:39:de:f6:1f:0a:c0:40:bc:e7:e5:6b:fe:
         94:e5:4a:6c:47:e9:b8:d5:32:15:58:fa:67:e5:5c:a7:e4:57:
         e2:99:79:75:c2:1d:7d:34:6b:d1:a0:aa:25:4e:76:d7:3c:7c:
         0c:96:7f:9f:14:51:7d:0d:0a:a6:0a:4d:c6:39:82:b0:51:e5:
         93:e8:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:16:23 2024 by rpki-client on console-fra.rpki-client.org