Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa
File:                     be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa (raw, json)
Hash identifier:          1D/cBmo39N/czIlEBQ5ujRolNWajhk/TentoHP1OEnE=
Subject key identifier:   E7:42:C1:EC:70:66:6A:E4:43:31:54:FE:42:5A:42:DE:11:3B:B8:18
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584599A42561ECF887A19148D380
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa
Signing time:             Fri 19 Apr 2024 18:35:29 +0000
ROA not before:           Fri 19 Apr 2024 18:35:29 +0000
ROA not after:            Thu 18 Jul 2024 18:35:29 +0000
asID:                     7018
IP address blocks:        216.150.81.0/24 maxlen: 24
                          216.150.77.0/24 maxlen: 24
                          216.150.72.0/24 maxlen: 24
                          216.150.74.0/24 maxlen: 24
                          216.150.75.0/24 maxlen: 24
                          216.150.78.0/24 maxlen: 24
                          216.150.79.0/24 maxlen: 24
                          216.150.80.0/24 maxlen: 24
                          216.150.82.0/24 maxlen: 24
                          216.150.83.0/24 maxlen: 24
                          216.150.84.0/24 maxlen: 24
                          216.150.85.0/24 maxlen: 24
                          216.150.86.0/24 maxlen: 24
                          216.150.87.0/24 maxlen: 24
                          216.150.88.0/24 maxlen: 24
                          216.150.89.0/24 maxlen: 24
                          216.150.90.0/24 maxlen: 24
                          216.150.91.0/24 maxlen: 24
                          216.150.92.0/24 maxlen: 24
                          216.150.93.0/24 maxlen: 24
                          216.150.94.0/24 maxlen: 24
                          216.150.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:99:a4:25:61:ec:f8:87:a1:91:48:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Apr 19 18:35:29 2024 GMT
            Not After : Jul 18 18:35:29 2024 GMT
        Subject: CN=d4bb31e3-5f23-441a-93c8-57e1e75e1fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:08:65:7c:72:6c:7b:9c:51:cb:0e:71:e3:
                    63:e3:51:f9:75:8e:7a:52:f4:2b:fb:d9:bd:8b:f0:
                    5d:6c:b0:c1:8c:0e:7f:aa:60:ac:53:27:1e:29:09:
                    8a:9a:38:87:6a:e0:54:4b:35:e2:3a:27:78:10:36:
                    41:d9:45:83:f0:ae:6f:31:89:e3:8d:83:8f:94:b7:
                    cc:63:d2:c8:dd:1a:1e:bb:2a:f3:ea:59:78:04:95:
                    8b:f6:f9:68:93:54:28:fc:b7:98:7f:da:4f:52:39:
                    bf:e3:78:b3:5d:53:a3:12:50:a1:6c:16:dd:46:76:
                    93:c2:ec:f0:8e:6b:35:fb:b0:c5:c7:46:1b:60:83:
                    a7:fe:d1:3d:f3:eb:5c:69:05:1c:1f:bc:c1:5f:79:
                    49:30:ea:84:51:20:43:a4:21:20:49:5b:40:16:3a:
                    c8:f8:6d:20:6a:a0:74:fc:da:2a:78:a2:84:84:25:
                    55:9a:44:bc:56:ac:c1:e8:32:7a:fb:b5:48:fb:e3:
                    b2:2a:26:dd:dd:8a:0d:d2:d0:62:56:9b:5a:0b:3f:
                    2b:92:3e:15:90:c8:c3:2e:e6:ab:a5:79:1b:a5:b7:
                    a9:08:0c:37:68:75:3b:6f:e2:49:6e:87:2e:aa:47:
                    8c:68:b3:ed:26:b3:b4:82:72:71:8b:48:78:49:92:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:42:C1:EC:70:66:6A:E4:43:31:54:FE:42:5A:42:DE:11:3B:B8:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.72.0/24
                  216.150.74.0/23
                  216.150.77.0-216.150.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:05:ab:2a:64:10:50:ed:78:53:21:e3:02:08:f5:3e:7c:50:
         45:24:94:35:52:ae:f4:34:54:f1:ce:47:29:38:06:19:72:84:
         10:e3:38:fd:62:60:dd:a8:70:5a:54:3b:1c:9d:20:b8:f3:5e:
         c4:62:16:8e:ff:b3:bd:b8:94:76:eb:89:8e:07:12:79:b4:ea:
         b3:c5:cc:4d:da:0a:07:38:2e:e1:b3:0f:2f:35:e5:90:ff:8b:
         37:fc:11:75:f9:aa:de:81:5e:89:f5:6b:56:bf:bf:fc:36:79:
         b1:fe:39:75:9a:4e:02:c3:49:88:d2:54:28:d3:b2:75:c9:e9:
         63:b4:4e:90:ca:de:5c:42:cf:4e:e8:4c:50:11:9b:cf:a8:f8:
         46:8e:b4:d4:d9:cb:f1:bc:ea:3a:2a:a1:1e:e3:07:c4:f6:c9:
         df:3e:98:39:b4:aa:3e:9c:c8:32:3f:61:07:46:7d:1e:5f:c5:
         02:dc:72:2b:fc:41:4f:cd:69:67:9e:e7:cc:48:a4:8b:d0:fe:
         f5:bc:84:db:72:f2:76:14:99:d7:90:d0:7d:a2:22:11:c1:0e:
         db:4c:a2:18:4e:bd:3d:30:b6:90:a0:16:99:70:60:d9:33:85:
         61:a6:4d:cc:49:a4:14:12:d0:d4:6c:ec:de:dd:cc:e8:ab:49:
         94:81:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:04:50 2024 by rpki-client on console-fra.rpki-client.org