Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
File:                     dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa (raw, json)
Hash identifier:          6Dn2tNwgsyHH6X7LMYdz0uwfGKQ96BL7a6nkoT4XuVI=
Subject key identifier:   4D:31:4A:68:1F:1B:8C:92:A5:07:D3:65:D6:8E:3D:E5:30:0D:93:68
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F432858458C6DCF10EBEDC35767CDAD00
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     11904
IP address blocks:        198.167.240.0/21 maxlen: 21
                          198.167.246.0/23 maxlen: 23
                          198.167.245.0/24 maxlen: 24
                          198.167.244.0/22 maxlen: 22
                          198.167.242.0/23 maxlen: 23
                          198.167.240.0/23 maxlen: 23
                          198.167.240.0/22 maxlen: 22
                          198.167.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:cf:10:eb:ed:c3:57:67:cd:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=36a888b0-a2d5-4f77-a41b-32cde5d6bf81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:f1:b0:af:a9:0b:f2:71:f3:7b:b0:54:b8:
                    78:b2:a8:c9:14:64:3e:7e:03:b7:4c:bb:a6:f7:ba:
                    a1:9c:f1:78:42:8a:d8:c1:35:44:f3:b5:97:c1:35:
                    52:dc:32:4a:37:76:68:42:9f:07:90:9c:fb:bd:18:
                    24:0e:7f:59:33:27:52:d8:fb:75:16:86:0e:64:e9:
                    df:3d:f4:6a:91:84:8d:54:bf:5c:dc:be:72:4f:74:
                    a8:81:30:fc:18:24:eb:fe:69:ef:b8:3f:8f:47:c6:
                    2a:d4:9f:af:ff:7b:51:67:c7:22:a1:e0:8d:d0:d7:
                    c4:0f:71:e6:cc:5d:ad:2f:93:f4:0d:4b:88:18:21:
                    83:b0:5d:b0:bc:17:b7:3d:9a:6e:64:b4:e9:4a:8f:
                    ea:01:f1:61:eb:31:c4:85:6f:01:53:95:6d:11:f4:
                    97:ac:a8:2f:8a:ee:f5:b3:7a:c4:10:65:55:64:02:
                    d6:d1:f6:e9:be:73:e1:6d:6f:87:b5:bd:79:ed:36:
                    3f:3b:b1:2c:73:ec:58:b3:d0:f2:ea:59:d8:4d:d6:
                    17:12:54:be:be:ae:9f:e7:3f:1f:db:ae:61:c3:ec:
                    ea:99:bc:5c:9c:ac:87:06:6d:29:d4:6b:07:74:e7:
                    62:82:59:a0:e3:d7:30:27:6d:1b:86:a6:67:73:d9:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:31:4A:68:1F:1B:8C:92:A5:07:D3:65:D6:8E:3D:E5:30:0D:93:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:30:0a:84:90:27:57:44:8a:e1:39:6d:78:a4:76:9f:94:
         6b:ea:39:29:a3:c9:d4:74:71:c2:5a:30:8f:fc:72:05:aa:0a:
         63:b6:b1:0e:e3:e8:3e:ca:7e:8d:72:32:f7:cc:60:34:ab:ed:
         ce:7a:2e:3d:9c:c6:2c:5e:23:ee:7a:81:99:3a:55:5f:3c:10:
         6e:a2:cf:a0:ec:86:cc:c1:fb:c3:c4:2f:4b:aa:fb:2d:53:e5:
         4b:92:ca:0b:17:3d:6a:7b:21:cf:0d:5e:24:b1:8a:bc:48:30:
         23:bb:04:c1:0f:3b:af:68:bb:0a:96:90:a7:c7:3b:d9:e2:d3:
         0e:31:83:9f:f8:9f:ab:68:72:cd:22:2a:25:ab:ca:09:ea:5c:
         09:ba:dd:61:9e:17:4b:69:23:10:a3:da:6d:4b:f9:d3:cd:6f:
         72:26:af:b5:29:0b:44:6e:c1:b4:2e:0c:76:2a:77:ae:86:3e:
         8d:59:7b:f7:b9:21:dc:f0:33:c2:47:b0:04:85:16:83:1d:fc:
         0c:55:af:ac:34:8b:49:e9:97:a7:c9:eb:12:73:cc:d4:72:8d:
         4c:56:14:d5:43:87:ae:a6:79:aa:0f:0a:15:3a:ac:f2:a4:c6:
         32:fc:a3:6d:29:22:a0:dc:4b:6a:78:0b:4c:86:59:87:12:2a:
         a4:ae:72:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:04:49 2024 by rpki-client on console-fra.rpki-client.org