Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa
File:                     4c84f840-5512-38ea-ab51-9bcc058dfef4.roa (raw, json)
Hash identifier:          DFYsW1YnhRWhcOV4ULna0wz+BeMjldYuAliG9r3/KcI=
Subject key identifier:   40:F1:01:C5:B2:D7:B2:05:43:48:62:88:3B:2C:61:0F:2B:B5:D5:D0
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F432858457A488A60E56821A88D95C200
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     64236
IP address blocks:        172.96.8.0/21 maxlen: 24
                          192.188.88.0/24 maxlen: 24
                          162.251.120.0/22 maxlen: 24
                          204.10.160.0/22 maxlen: 24
                          142.147.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8a:60:e5:68:21:a8:8d:95:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=81ac5dbf-48cd-46fa-9305-99cf737653d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:64:d4:a6:65:fd:9a:72:0a:28:84:80:ec:
                    ed:a0:20:2b:b1:19:a5:2f:9a:97:51:d2:af:a2:8d:
                    53:07:5f:66:c0:95:d5:b1:f4:b8:c1:49:3d:64:34:
                    53:57:60:33:e1:9e:84:15:21:f4:5a:dc:a5:d2:c3:
                    c9:db:89:8a:ee:e4:93:f3:e3:cc:89:65:bd:34:77:
                    74:7a:64:39:04:4d:99:e5:d6:66:74:c6:1a:aa:b7:
                    b7:d2:90:4c:c1:c1:bf:d5:c3:1c:53:19:bf:1a:18:
                    0c:1d:90:6c:f4:7e:17:cf:74:40:ae:e5:6f:f2:25:
                    e4:14:36:d5:c9:05:93:ca:25:0d:ec:cb:d9:d9:c8:
                    c1:f9:fa:21:d5:bb:0b:ec:5b:2c:c7:ab:20:13:58:
                    e2:c7:92:64:36:39:76:1f:fe:95:88:b4:3c:92:b6:
                    43:85:0f:39:af:0c:51:50:93:30:4f:5f:f6:ea:e2:
                    92:c3:da:92:2b:d5:54:72:8b:a9:73:d3:b3:02:a8:
                    78:68:e7:00:ab:d3:22:9c:75:2e:ce:87:77:64:9a:
                    3e:22:8b:bc:35:d4:67:d6:e2:7c:3d:e3:fc:1d:bc:
                    51:d2:51:c0:e2:71:85:f9:75:62:92:e2:bb:d0:97:
                    6a:2a:fb:96:b9:7b:73:75:02:37:98:50:55:da:06:
                    4b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F1:01:C5:B2:D7:B2:05:43:48:62:88:3B:2C:61:0F:2B:B5:D5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.96.0/22
                  162.251.120.0/22
                  172.96.8.0/21
                  192.188.88.0/24
                  204.10.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:12:8d:53:3f:6b:a2:82:1e:0e:e3:0b:b5:26:6c:d2:e3:c2:
         0e:39:f1:54:47:19:93:d7:51:e6:3b:13:1b:66:27:38:6f:48:
         ce:5f:8d:c5:bc:9b:e7:53:a0:3d:5f:5e:a6:ec:5b:b7:95:f5:
         4d:c5:29:9b:19:1f:df:8b:45:1c:2b:af:08:d1:75:d8:39:c7:
         0d:f9:f4:e5:35:4a:b1:01:c8:3c:ad:1a:54:55:52:fd:12:4e:
         47:e8:67:8b:ef:aa:ad:01:93:dc:64:78:c8:2a:53:65:87:3b:
         c1:2e:8b:eb:cf:cb:4b:f5:3a:4a:fc:9c:bb:6e:a4:3d:33:cc:
         02:5a:9a:d9:63:ab:a1:fc:09:44:ea:b6:50:9e:2e:93:4a:7c:
         7e:ef:41:f6:5a:ff:0e:fd:d9:dc:34:9c:08:9e:10:bb:1e:56:
         6f:9b:fe:91:b8:41:ae:5b:66:54:25:f6:6c:de:8d:6a:2b:67:
         d5:29:b7:a2:2a:f2:d1:a7:0f:24:15:4f:55:35:fe:8b:ba:34:
         07:08:28:4c:42:a4:e0:ab:a3:fb:d1:3d:12:c1:bd:d4:95:3d:
         e7:06:9a:dc:a9:c8:0d:6c:18:b8:72:00:57:b2:76:15:64:a6:
         14:ff:23:a0:4b:5b:f3:81:71:58:65:19:1d:b1:99:ea:45:23:
         5c:1b:e4:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 26 01:35:29 2024 by rpki-client on console-fra.rpki-client.org