Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa
File:                     1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa (raw, json)
Hash identifier:          ydt8GyVEWzt63lYevT8I+lOvyM+CJ+cUa44P+9M6SO8=
Subject key identifier:   C4:47:B5:82:AF:50:0A:C5:18:A2:E1:94:3D:12:B5:88:C0:27:AB:84
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584589A328D5B2315C813AF4BA80
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     398646
IP address blocks:        209.160.96.0/22 maxlen: 24
                          204.10.89.0/24 maxlen: 24
                          45.41.212.0/22 maxlen: 24
                          23.130.96.0/23 maxlen: 24
                          162.253.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:28:d5:b2:31:5c:81:3a:f4:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=cb396f5c-5741-4c83-b680-a86d79895a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:51:43:21:ae:83:3f:75:ba:af:9e:98:a0:
                    01:10:59:3a:38:b1:38:56:78:97:12:43:12:8a:a6:
                    2a:1e:98:44:ce:7a:fd:51:5d:15:c7:fa:f9:bc:da:
                    19:3b:c3:61:d5:e5:68:23:59:81:07:e1:a0:57:f3:
                    f9:f1:a5:95:4a:1c:69:92:71:06:3c:b8:a5:c9:40:
                    e8:31:1c:fd:ce:2e:49:05:ad:38:ac:10:1a:0c:4d:
                    90:19:08:9f:c9:36:2f:64:da:50:d8:85:b1:74:f7:
                    d8:65:b0:dd:f3:a3:74:db:7a:42:ab:25:df:b1:5b:
                    52:19:e3:c6:bb:23:f5:17:2d:1b:b6:49:3e:c5:33:
                    be:3a:65:93:bc:2b:ad:ed:ee:07:49:6a:21:e4:90:
                    55:d9:29:db:51:38:44:db:a2:ac:7b:c0:aa:3d:fb:
                    c1:36:f0:91:f0:f0:11:68:89:c5:29:72:a8:34:22:
                    27:85:e8:91:fc:04:56:36:96:78:1f:b8:de:76:62:
                    a4:d0:61:61:5b:e6:20:dc:7f:a3:48:85:6a:d2:7b:
                    7f:1a:0a:52:e0:f4:84:e4:4f:de:d6:e8:2c:60:69:
                    df:2e:c0:02:e9:8d:a2:35:33:e1:e5:75:21:48:c7:
                    db:88:c8:87:c4:59:8b:57:16:f4:35:4e:01:00:20:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:47:B5:82:AF:50:0A:C5:18:A2:E1:94:3D:12:B5:88:C0:27:AB:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/1e70f425-c6a2-3f9e-a9d0-8ef8b0458c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.96.0/23
                  45.41.212.0/22
                  162.253.212.0/22
                  204.10.89.0/24
                  209.160.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:6c:4e:5e:cd:d8:3f:48:f6:9c:b3:32:c4:02:92:de:e6:
         a0:6e:78:6e:ea:72:ee:37:6a:4f:35:fa:b4:53:88:78:09:e2:
         7a:b2:6e:68:46:2c:eb:e4:ed:c2:85:84:04:f5:a3:c9:ee:a7:
         6e:e9:81:5a:df:f2:ac:41:30:d8:0b:02:d1:e5:94:a0:e9:7f:
         e4:33:27:0c:a5:8c:9a:8c:5d:cf:26:82:bf:41:81:d0:02:bb:
         7f:99:d0:e3:e3:cb:2d:2d:b1:b3:a3:8a:f2:ba:25:e2:dd:b2:
         df:76:cf:5a:2b:50:27:14:50:57:ed:d6:d4:50:47:a8:28:bc:
         bd:ce:da:c0:5b:7b:98:25:38:b8:b5:f1:eb:b4:fd:64:f0:74:
         b1:fb:e6:4e:c3:1e:be:66:d2:66:3c:7f:33:c0:38:07:ae:04:
         f3:53:3c:db:60:a2:aa:55:55:7c:68:ed:99:26:14:a4:04:3e:
         50:15:f8:bc:a9:e2:de:88:d2:b6:1c:31:bb:76:ed:51:19:9f:
         6d:1a:d7:ae:ea:0d:28:e8:21:4c:4d:21:33:bb:d4:24:e2:91:
         7e:ca:ee:c2:c1:ae:27:56:4e:bb:6b:3f:70:1a:02:d3:44:06:
         b0:00:25:0c:57:44:05:95:6a:91:db:34:c5:be:c8:b7:e6:14:
         c5:c9:3d:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 30 16:13:32 2024 by rpki-client on console-fra.rpki-client.org