Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
File:                     1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa (raw, json)
Hash identifier:          PEQt0mXyiExc57gQ89o6bsrjfsaSI3zbPw/Q+Xl+Lkw=
Subject key identifier:   05:A0:60:A7:4A:46:49:AF:32:25:AC:21:4D:9B:8B:5E:40:8D:39:58
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F43285845131AE079056DA6298A76E7E0
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     46261
IP address blocks:        162.219.24.0/21 maxlen: 32
                          162.223.28.0/22 maxlen: 32
                          162.210.36.0/22 maxlen: 32
                          162.217.172.0/22 maxlen: 32
                          170.75.144.0/20 maxlen: 32
                          199.101.96.0/21 maxlen: 32
                          144.208.91.0/24 maxlen: 32
                          64.187.224.0/20 maxlen: 32
                          104.166.64.0/19 maxlen: 32
                          45.43.192.0/19 maxlen: 32
                          23.190.80.0/21 maxlen: 32
                          104.247.192.0/19 maxlen: 32
                          104.153.80.0/22 maxlen: 32
                          107.161.112.0/20 maxlen: 32
                          216.115.184.0/22 maxlen: 32
                          162.244.132.0/22 maxlen: 32
                          160.202.64.0/18 maxlen: 32
                          137.83.79.0/24 maxlen: 32
                          172.82.128.0/18 maxlen: 32
                          199.233.232.0/21 maxlen: 32
                          162.248.208.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e0:79:05:6d:a6:29:8a:76:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=b17d6eab-3ed5-4cbe-9eec-2cfc13fe69a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:ee:37:9d:17:d5:80:ef:90:97:67:ad:6c:
                    79:2f:cf:f5:17:18:dc:47:54:71:56:2b:52:95:76:
                    a1:04:55:f3:ff:60:1d:dc:a6:65:b3:c1:dc:df:90:
                    46:2c:60:bb:c3:4d:2e:99:88:e7:3e:42:8a:7f:0c:
                    68:eb:b1:6a:f0:84:e0:76:95:73:57:4a:a7:2a:73:
                    23:dd:a5:50:f2:54:3b:5a:73:09:c9:2a:2a:a8:38:
                    eb:28:ee:47:81:8c:cb:a6:8e:46:90:dc:16:8c:4c:
                    cf:56:3f:c2:51:a9:64:b7:a5:7b:e8:f3:fa:fe:06:
                    e3:dd:96:83:22:c4:c7:60:3f:aa:1c:23:7e:1a:cb:
                    f6:42:d2:02:67:a7:71:57:3c:d0:37:9f:a8:de:31:
                    ce:03:7b:58:c0:93:a4:8f:77:e8:2e:49:7b:ef:a2:
                    72:b5:c7:97:d0:16:19:59:1d:10:5d:61:1f:75:19:
                    0e:ae:a3:0c:68:8b:da:9c:f3:52:73:35:ee:46:4a:
                    70:e5:e6:4a:92:df:64:6f:56:29:a0:3e:71:9e:de:
                    46:f0:86:1c:0d:ec:28:22:83:43:08:b8:ee:ad:4a:
                    89:88:2f:8b:d1:90:3c:4e:14:84:a0:f7:57:78:7f:
                    d5:27:1a:cc:04:f6:75:19:e1:f7:69:7a:85:f9:b1:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A0:60:A7:4A:46:49:AF:32:25:AC:21:4D:9B:8B:5E:40:8D:39:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.80.0/21
                  45.43.192.0/19
                  64.187.224.0/20
                  104.153.80.0/22
                  104.166.64.0/19
                  104.247.192.0/19
                  107.161.112.0/20
                  137.83.79.0/24
                  144.208.91.0/24
                  160.202.64.0/18
                  162.210.36.0/22
                  162.217.172.0/22
                  162.219.24.0/21
                  162.223.28.0/22
                  162.244.132.0/22
                  162.248.208.0/21
                  170.75.144.0/20
                  172.82.128.0/18
                  199.101.96.0/21
                  199.233.232.0/21
                  216.115.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:17:4e:62:c9:51:9e:69:db:14:23:0b:b4:f4:c7:bc:bb:
         40:38:c1:e8:b9:fb:91:aa:e0:48:f7:36:95:b0:d1:5b:58:af:
         f4:59:d2:9e:f3:3c:fe:77:03:99:56:bc:fe:64:85:26:cc:d5:
         59:f1:c7:be:a6:20:e6:b5:93:bb:0b:15:40:5b:5b:d4:80:9d:
         b5:4b:f5:9a:2d:05:df:e8:df:b6:4c:44:10:0d:d5:63:0c:07:
         ad:12:92:20:ec:76:96:1a:d0:ac:67:b0:8b:12:b8:d3:2d:d2:
         05:91:bd:65:fc:6e:59:4d:26:73:24:79:87:d2:f9:6a:cf:e6:
         65:2f:1a:53:33:8a:c7:8a:69:0f:1f:6e:cb:8f:24:c7:7c:c2:
         f5:53:28:53:07:de:31:31:7c:65:a6:03:5f:7d:a3:f1:06:a4:
         4f:15:46:66:74:ca:6d:42:82:12:bc:28:19:ec:fd:c8:8a:70:
         aa:8a:4f:92:7e:f4:72:14:57:1d:2e:a3:ed:b5:a9:7a:4f:bc:
         8a:c3:33:ae:98:cc:ad:e5:83:f9:03:2e:36:5a:0c:ca:9b:a0:
         ac:9e:d0:0b:90:e0:a7:19:76:ea:39:45:2a:8e:55:88:48:05:
         08:2d:f5:f7:6f:5d:48:ae:58:2a:3e:d5:a5:75:20:ae:e8:58:
         cd:6a:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:03:33 2024 by rpki-client on console-ams.rpki-client.org