Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6e846c90-7fac-31c0-ab83-4ad4d1762053.roa
File:                     6e846c90-7fac-31c0-ab83-4ad4d1762053.roa (raw, json)
Hash identifier:          vTFhaAbknEupwEjLmg4T3lYlDgGmjUpOFUL0+6P0ERk=
Subject key identifier:   75:CD:BC:03:0F:44:52:80:0C:2E:78:C3:CC:29:2A:98:EC:AC:7A:D7
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584548081EC0438FABFFAF87D700
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6e846c90-7fac-31c0-ab83-4ad4d1762053.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     13335
IP address blocks:        169.196.222.0/23 maxlen: 23
                          169.196.220.0/23 maxlen: 23
                          169.196.248.0/21 maxlen: 21
                          169.196.240.0/21 maxlen: 21
                          169.196.176.0/20 maxlen: 20
                          169.196.160.0/20 maxlen: 20
                          169.196.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1e:c0:43:8f:ab:ff:af:87:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=2a5055e5-fe30-4a2c-aeb8-074e186d177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e0:dd:af:96:88:9a:74:5f:36:4b:fa:a8:ad:
                    e7:77:28:14:84:f6:1a:ad:02:6c:55:f0:ce:82:10:
                    f7:64:c3:64:2a:98:35:b9:7c:4a:be:c6:bf:34:53:
                    82:5e:3d:87:70:04:57:4b:b8:82:eb:b4:25:ed:10:
                    c6:a9:ae:fd:34:2f:d3:36:5b:51:59:2f:af:9d:97:
                    a4:bd:58:56:b7:c8:6f:67:21:57:2b:88:92:f6:4d:
                    36:27:6a:ed:6c:93:ac:51:f5:1b:10:31:1e:db:ba:
                    92:7e:3c:1a:0f:8a:fe:6e:43:a3:31:bb:bc:55:db:
                    bd:91:cf:b9:11:33:c0:a9:f3:8e:61:f8:18:45:9f:
                    0f:32:a5:d6:77:74:b0:81:38:ad:ab:91:43:5b:87:
                    95:b6:bb:27:aa:a3:80:a9:d4:e7:78:e2:57:04:ee:
                    b8:62:bc:85:79:3e:eb:32:51:86:58:a1:6f:1a:be:
                    4e:cb:98:84:97:07:65:4e:90:2c:cc:3e:23:7d:3c:
                    44:21:c7:56:26:62:59:67:5b:a1:23:02:77:ee:6b:
                    04:9f:ff:a7:e4:71:a0:68:df:76:8a:e1:e2:a0:de:
                    38:64:52:9e:09:e6:81:1b:f8:db:00:7e:83:a4:e9:
                    4f:86:d6:e4:15:12:3f:86:9a:b4:47:21:7c:57:16:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:BC:03:0F:44:52:80:0C:2E:78:C3:CC:29:2A:98:EC:AC:7A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6e846c90-7fac-31c0-ab83-4ad4d1762053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.160.0/19
                  169.196.220.0-169.196.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:38:2e:34:ee:2c:87:d0:d4:bb:51:62:11:f3:d5:2c:09:8d:
         7a:cb:56:84:69:f6:68:50:bd:1f:c2:f6:76:69:13:f4:15:31:
         34:f4:2a:7b:c5:46:12:c5:4d:10:d2:f6:9f:d8:7e:bd:3d:20:
         d0:1b:da:66:55:f5:7f:52:48:76:6b:fe:db:76:5a:62:fa:41:
         df:43:4e:30:66:57:97:09:f5:e6:f3:2d:b8:73:2b:40:fb:8d:
         dd:ee:70:bd:4f:d1:65:f8:b7:b2:28:44:2d:81:20:05:8c:16:
         84:cc:13:a2:fd:ee:be:62:2d:d0:6e:db:bb:74:76:c8:0a:1d:
         0e:21:15:ba:c7:0a:7c:04:23:0d:e3:b2:f1:ea:9f:53:64:d5:
         14:ac:6f:5a:42:0b:3c:ea:09:5e:bd:4d:ad:ae:d0:b8:06:29:
         10:92:a5:95:e5:0f:6c:72:76:f4:a7:e3:48:de:5c:f8:d5:14:
         b9:72:aa:78:4d:7c:88:d1:50:20:21:f6:02:2a:0c:68:ca:22:
         08:3d:8b:8f:06:4a:3a:fa:1e:af:52:b8:76:54:1d:9c:7e:52:
         7b:56:c2:ef:d6:da:7e:2b:b6:3b:05:41:dc:6b:3b:b7:ce:23:
         2c:52:9c:c4:92:82:f7:7f:c0:11:4c:d8:ad:64:15:b4:0f:8b:
         7b:53:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:04:39 2024 by rpki-client on console-fra.rpki-client.org