Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
File:                     ec532543-9dd6-3bcf-bdea-82dd95098083.roa (raw, json)
Hash identifier:          Z/AC3FT4d6Ztw2VgQOJZ3Zz5zUyrqtu9TNropzpe4H4=
Subject key identifier:   0E:95:9E:76:49:E5:F8:D8:68:7F:7C:51:38:75:D7:F0:93:0E:E0:70
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F432858457A486C7DB0114BE4A3264400
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     46375
IP address blocks:        173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          209.204.128.0/18 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6c:7d:b0:11:4b:e4:a3:26:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=c037cdeb-baf6-4442-b0ca-7ac7fe28953f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:97:5b:60:9e:5c:a3:2e:92:71:ba:1a:dc:
                    5c:47:0a:b8:0b:ef:c6:e3:0a:fd:9b:5a:75:e5:27:
                    08:e4:a3:1e:25:30:f9:72:31:f0:1c:6f:36:59:32:
                    97:9f:fd:b6:92:47:6f:26:66:ec:2a:73:1d:05:57:
                    fb:02:a6:72:c1:4e:a9:67:ff:4a:5c:c0:6f:d6:7d:
                    4f:33:bf:a7:70:f1:df:79:67:3e:d7:52:3c:30:28:
                    90:a8:a5:6e:47:59:d8:b4:a7:57:0f:bd:2e:dd:54:
                    d1:b2:bd:af:07:2c:f0:ee:e7:7b:66:31:bc:9c:5a:
                    2d:5a:3f:a2:91:d3:29:e8:e7:15:8c:54:6f:83:6e:
                    1b:04:30:49:33:33:68:f9:ba:c4:f0:a3:24:a9:79:
                    0d:43:b1:74:dc:7b:12:64:c3:4f:5a:55:81:4e:7b:
                    37:6e:e4:54:87:55:3e:60:a7:b7:4f:9b:60:f7:2c:
                    cc:97:b2:4f:36:ec:95:c9:a4:e2:29:e3:a7:9c:96:
                    74:e8:22:b7:bb:ab:bd:5c:86:85:50:aa:7c:c6:16:
                    53:41:4d:78:d2:bd:a1:e2:90:22:f9:94:3a:93:24:
                    f3:a8:53:a8:ae:7a:1a:70:67:c6:3d:52:4b:71:37:
                    0f:3a:1c:dd:26:09:cf:d8:67:b9:7d:5c:eb:3f:a3:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:95:9E:76:49:E5:F8:D8:68:7F:7C:51:38:75:D7:F0:93:0E:E0:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:63:65:dd:dd:c0:ae:7d:3b:93:fd:c2:3c:43:6e:7a:5d:a7:
         33:bb:13:98:7f:04:b4:99:2d:99:7d:66:39:88:c0:be:6a:a6:
         90:b6:aa:a9:ad:9d:1f:6b:fc:3e:6a:3d:68:c5:96:07:6b:57:
         c5:7f:fb:9d:c5:a6:82:fb:61:ca:1b:23:a9:23:a9:ba:a6:ac:
         c5:5a:a4:07:af:ff:6e:8c:74:f2:55:37:3d:6a:f9:af:33:be:
         76:f2:a6:72:84:99:8e:37:ca:9f:60:a1:cf:56:21:d7:a9:65:
         47:d0:1b:42:80:4d:a4:88:6f:7b:9f:2f:fb:77:11:2e:ab:08:
         6a:1f:dc:87:4e:6a:48:5b:24:b9:69:af:68:8d:0a:dc:ef:4b:
         98:d9:c4:93:3b:1d:3a:bd:63:7f:6c:9f:c8:c3:76:d9:73:75:
         b4:b8:14:d1:c7:1a:20:9e:78:69:86:28:f0:1b:f9:25:03:49:
         a1:56:cd:55:3d:08:20:ec:ed:15:37:30:8f:9f:4c:d3:8c:8d:
         1c:ef:6f:87:5f:f9:af:47:34:8c:43:94:40:0a:c7:97:e1:0a:
         f0:7b:6d:fe:3a:24:66:78:7e:26:85:26:94:65:5c:9e:79:04:
         5d:8d:37:23:bd:a3:a4:76:c2:8a:55:10:0b:db:25:01:48:e0:
         37:00:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:12:54 2024 by rpki-client on console-ams.rpki-client.org