Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa
File:                     6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa (raw, json)
Hash identifier:          yntkAsvhptiZBNqc7eJRVO92krmw8Md73Axz0TN9CQ0=
Subject key identifier:   5D:69:C4:E1:20:7F:5D:D3:B3:4C:2A:1A:A0:67:E6:84:7B:10:44:94
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584596333F72FFCF6F45AAC4F7A0
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     203993
IP address blocks:        67.221.252.0/24 maxlen: 24
                          67.221.255.0/24 maxlen: 24
                          67.221.253.0/24 maxlen: 24
                          2607:fae0:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:3f:72:ff:cf:6f:45:aa:c4:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=d3562779-3e89-437c-934a-77c5f91475d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:83:f2:0e:8c:f1:61:33:a3:0e:b0:1f:e8:f2:
                    8b:07:f1:d5:b9:e7:c1:ff:e1:77:c4:1f:e0:32:f4:
                    c8:d9:1a:a0:94:53:a0:fe:db:eb:2a:c7:10:01:28:
                    0e:13:24:e5:58:65:9c:b6:33:ac:13:98:d2:fa:12:
                    c8:21:19:6f:bc:0f:16:98:46:3b:e7:ad:0a:2d:49:
                    16:88:d8:6b:76:2e:98:36:4e:24:d5:b4:3e:95:89:
                    92:a5:25:36:1e:b6:51:68:07:af:24:35:be:68:7e:
                    99:6e:b5:ca:1e:2c:e2:fd:e3:2c:18:58:c2:ec:ab:
                    19:fd:05:ca:73:93:6b:b7:84:17:b4:16:ea:1f:23:
                    c6:d6:71:05:e1:55:6e:3b:fa:95:ef:1c:b5:4c:b2:
                    b3:bb:de:89:dd:04:de:7c:eb:eb:89:a0:32:c5:04:
                    24:48:8c:71:59:1c:8b:16:2e:42:5e:46:6d:ad:96:
                    05:3c:54:c4:bc:2e:be:ca:e6:f7:4c:7b:a8:5d:ad:
                    fb:aa:80:8b:b2:c2:60:5d:38:3d:4e:5e:6f:fd:35:
                    e4:1b:de:6a:26:c9:ae:17:81:c2:ff:1e:74:61:70:
                    a1:e6:20:ea:d3:4c:4d:df:ab:de:3e:9d:6a:d5:4c:
                    f1:92:38:4e:9a:00:c8:24:8e:8a:99:aa:17:f1:1f:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:C4:E1:20:7F:5D:D3:B3:4C:2A:1A:A0:67:E6:84:7B:10:44:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.252.0/23
                  67.221.255.0/24
                IPv6:
                  2607:fae0:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:99:f7:0e:2c:fa:26:6e:0b:ff:80:28:92:fd:f5:cb:ac:3d:
         f0:32:ca:df:d2:a0:e6:92:88:cd:6e:cf:b6:9b:7d:42:3b:7a:
         20:78:c5:fb:5d:e2:11:d6:26:24:32:ce:0f:fa:95:ae:cb:f5:
         95:30:93:37:76:50:98:02:12:61:7a:82:cb:6d:9d:62:86:f1:
         6b:2a:75:e3:3a:12:e7:ee:f2:e6:f4:ca:85:3b:59:11:c6:b1:
         f5:88:34:d3:bd:43:d6:c5:c3:ed:88:d8:4d:e4:dd:ec:51:5f:
         ef:e8:0b:55:7f:b6:04:5f:2f:33:bb:73:04:90:fa:4d:cd:b3:
         3b:08:c5:95:4a:46:e9:06:97:34:a3:27:31:36:de:a7:50:17:
         34:e1:13:5f:69:a8:82:2c:3e:67:ab:4e:b0:9f:ab:db:1e:6b:
         02:c6:df:9c:df:2f:a7:f2:e9:52:ab:10:fc:1d:3d:cd:5e:45:
         d3:8b:50:89:6c:86:a7:fc:d1:1e:93:f2:f9:a6:5d:d1:64:84:
         88:b1:e7:13:a5:4f:6b:7a:72:f9:94:e4:dd:60:d3:ed:ce:25:
         bf:1c:2b:0d:a3:b8:dc:de:98:e6:25:d3:62:55:21:6c:cf:f7:
         50:94:5a:23:0d:5d:e6:a8:43:9e:30:70:9d:d7:94:75:27:e4:
         9c:60:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:51:45 2024 by rpki-client on console-fra.rpki-client.org