Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/983bd8a0-ea7b-3b24-be05-637a2e00c454.roa
File:                     983bd8a0-ea7b-3b24-be05-637a2e00c454.roa (raw, json)
Hash identifier:          nEynvcDR2u7A2/o1lInlBaqJt11DUCokFZzaQpDLjPA=
Subject key identifier:   74:42:4F:2D:3F:53:F9:30:A6:4C:C1:9C:84:71:B9:54:33:C8:F8:A9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8C060DD99978B05729C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/983bd8a0-ea7b-3b24-be05-637a2e00c454.roa
Signing time:             Thu 25 Apr 2024 22:43:55 +0000
ROA not before:           Thu 25 Apr 2024 22:43:55 +0000
ROA not after:            Wed 24 Jul 2024 22:43:55 +0000
asID:                     204957
IP address blocks:        142.252.4.0/24 maxlen: 24
                          142.252.8.0/24 maxlen: 24
                          142.252.24.0/24 maxlen: 24
                          142.252.25.0/24 maxlen: 24
                          142.252.43.0/24 maxlen: 24
                          142.252.59.0/24 maxlen: 24
                          142.252.91.0/24 maxlen: 24
                          142.252.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8c:06:0d:d9:99:78:b0:57:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:55 2024 GMT
            Not After : Jul 24 22:43:55 2024 GMT
        Subject: CN=adb08084-95cb-40c4-985f-496b0321b321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:20:92:ad:33:be:e6:ba:c5:42:21:f7:68:
                    0d:97:ec:c3:95:54:8c:35:07:0d:e7:38:ab:a1:2a:
                    1d:03:ee:26:36:2f:65:0c:16:5b:6d:6e:cc:55:f5:
                    d1:6e:69:e5:f0:77:b3:13:f0:28:75:1b:d0:fa:c7:
                    6c:8d:8c:91:f2:34:2b:5e:ec:ae:79:b0:a6:e2:2b:
                    df:af:2d:1b:dc:cf:87:80:dd:7e:0a:c4:be:3d:41:
                    d3:7d:39:1b:f9:98:d3:7f:4f:2d:a8:85:91:07:38:
                    7b:e2:61:9a:a1:bd:e9:0f:6c:19:f8:bd:9b:c1:47:
                    c9:d8:14:ea:b3:03:5e:b1:90:25:8b:b8:8e:d5:c8:
                    2f:1d:13:19:84:a1:4b:dc:ae:d8:19:10:3a:78:cf:
                    94:7f:c7:fe:52:5f:a7:df:d2:07:29:2d:7a:30:59:
                    d4:68:c1:e2:00:1c:95:b7:20:c5:0f:1d:47:ac:67:
                    b7:e6:f6:f6:02:e9:e5:94:3d:08:ff:aa:c3:89:c5:
                    84:64:b3:90:0c:1c:3f:a0:81:ae:e4:01:55:c4:03:
                    a4:a7:4f:6e:ed:cd:0e:f8:51:1e:b9:36:2b:19:43:
                    fa:f0:1b:60:8d:98:0e:fd:b7:42:e5:69:f2:cf:37:
                    18:57:5c:98:e3:cf:1b:c1:75:cc:a7:1a:a0:2c:db:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:4F:2D:3F:53:F9:30:A6:4C:C1:9C:84:71:B9:54:33:C8:F8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/983bd8a0-ea7b-3b24-be05-637a2e00c454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.4.0/24
                  142.252.8.0/24
                  142.252.24.0/23
                  142.252.43.0/24
                  142.252.59.0/24
                  142.252.91.0/24
                  142.252.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:ab:6b:c7:dd:87:9d:51:ba:5a:d5:60:20:12:50:70:60:
         d9:24:bc:a2:14:6e:6d:d1:ca:65:3a:03:84:7c:c1:d5:fa:81:
         d1:10:c0:8a:16:b0:09:d4:90:e9:44:0a:a3:f3:3f:9e:57:57:
         ff:08:ce:c1:d3:f5:17:aa:c4:51:57:cf:11:5a:bd:38:89:35:
         be:ee:ea:7a:7e:a8:ce:c2:72:25:be:21:e2:4e:ea:30:0e:7e:
         17:fd:d0:76:59:bf:3c:56:e1:bf:49:24:90:ad:f1:a3:66:28:
         b6:49:da:1e:c6:c9:9e:04:83:bb:13:7e:c5:7d:0d:86:f2:88:
         b5:04:b9:f2:20:9a:a9:1e:b9:43:dd:58:37:8f:9c:50:d3:93:
         25:d6:e7:2d:a4:e2:e9:1c:14:6b:65:62:18:34:d5:56:8b:fe:
         9e:5d:ef:c3:66:36:8c:9e:f0:a7:9b:19:d3:7e:60:99:bf:4a:
         65:af:df:b3:31:53:04:68:35:b7:21:38:98:f6:cf:05:40:d5:
         60:d6:17:5a:a5:0b:fb:f3:3d:83:8d:ea:4f:4b:b2:31:9d:b3:
         7c:bc:a6:32:a0:8f:08:25:2f:89:0c:d5:fd:4d:17:dc:89:33:
         f3:9a:c7:44:1e:e0:35:37:ed:bc:11:7e:5c:95:62:31:c0:c9:
         90:7d:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:36:01 2024 by rpki-client on console-ams.rpki-client.org