Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
File:                     85176132-47c9-32a1-9e04-6dadc4f6fc23.roa (raw, json)
Hash identifier:          o7s7PKFvEU5PoQqo75QNELvjoNgqPTVP3zGq80QtiAQ=
Subject key identifier:   67:D6:D7:91:C2:D7:63:2B:6B:BD:4F:25:32:15:A8:86:64:CE:EB:85
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F4328584558C83C363A639078A08BCAA0
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     36001
IP address blocks:        172.98.220.0/22 maxlen: 22
                          216.127.192.0/19 maxlen: 19
                          206.126.208.0/20 maxlen: 20
                          199.167.212.0/22 maxlen: 22
                          192.200.136.0/21 maxlen: 21
                          173.242.80.0/20 maxlen: 20
                          162.210.60.0/22 maxlen: 22
                          134.195.20.0/22 maxlen: 22
                          209.103.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:3c:36:3a:63:90:78:a0:8b:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=8f24f6ac-c1c3-489c-96e2-047c84b480bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:5c:fb:84:8b:5a:31:6e:7b:dd:53:3d:67:
                    fe:55:e0:a6:7f:72:96:94:d0:cb:c2:31:f7:65:c5:
                    49:7a:57:d3:65:11:86:b0:a6:ac:93:68:de:3a:d5:
                    fd:83:0c:51:8b:d5:40:dd:9d:03:43:99:9a:3f:00:
                    71:7f:77:2e:03:90:da:d2:68:d8:51:56:f3:5e:c0:
                    4f:03:16:d3:a6:9b:9f:ba:29:62:85:56:b7:b9:11:
                    ab:e2:90:7e:43:ad:36:43:51:cb:7b:59:a1:d6:7e:
                    9d:f6:ea:24:8d:ad:ee:4c:33:99:71:20:f2:1d:79:
                    e8:cb:7f:00:29:c2:6d:ba:01:43:51:59:d7:0b:5c:
                    b0:81:66:3c:49:aa:52:8a:11:74:f0:2b:3f:d3:80:
                    38:c7:65:37:4d:7d:83:8c:62:b1:46:25:be:9a:52:
                    88:4f:45:2f:42:7b:c2:93:a3:66:50:fa:d3:f6:e2:
                    b0:96:a3:88:8c:f0:a6:53:fc:c8:af:be:85:6d:df:
                    3c:95:17:25:a7:be:de:83:3d:8a:dc:23:6f:2d:32:
                    a4:ee:e5:32:ba:19:08:f7:0a:c9:db:16:4d:0a:b2:
                    0e:41:40:13:97:da:9f:bb:04:27:29:50:6d:16:6a:
                    93:e7:be:c0:14:bb:f7:b7:59:67:cd:61:27:91:51:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D6:D7:91:C2:D7:63:2B:6B:BD:4F:25:32:15:A8:86:64:CE:EB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.20.0/22
                  162.210.60.0/22
                  172.98.220.0/22
                  173.242.80.0/20
                  192.200.136.0/21
                  199.167.212.0/22
                  206.126.208.0/20
                  209.103.224.0/19
                  216.127.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:dd:03:e3:b6:55:94:a9:8c:1c:d3:f9:46:af:3c:24:97:48:
         63:1c:32:14:19:eb:5a:0f:55:85:5a:1c:ef:70:d0:c8:ee:41:
         86:a3:d3:35:53:04:19:53:12:37:5d:d4:60:5a:0b:25:9d:37:
         35:87:2c:b5:6d:95:06:17:2e:de:56:a1:de:af:f8:d8:a6:18:
         dc:3a:fb:45:ca:f7:de:f4:73:94:c8:b7:43:4f:8c:3c:26:8e:
         f5:80:62:f9:58:ba:d4:32:62:65:de:f2:b6:92:02:00:22:9e:
         4d:d4:f8:dd:17:22:53:6c:95:d0:6e:d2:72:79:f7:66:6f:0b:
         a5:a9:a1:92:cf:fa:7a:48:7f:b5:3f:2a:db:fa:46:21:fa:32:
         51:5b:d0:2b:88:32:34:e4:bd:19:e0:03:b9:83:15:9d:9e:81:
         ca:de:f4:c8:14:df:43:72:df:d7:a0:b9:98:e3:9d:51:cd:73:
         2c:51:01:cf:ab:d0:db:ab:9f:97:75:95:4e:d3:6c:c9:85:62:
         b5:4e:90:6a:e7:c9:36:ce:cc:bb:06:3f:7c:31:57:b1:ef:37:
         5b:f1:a9:8b:d1:6e:01:3d:c4:d0:bb:6d:84:d6:3b:d2:02:fc:
         95:8b:a7:26:13:83:f4:86:5f:62:bc:fb:2c:89:7f:9e:65:11:
         81:d8:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:33:05 2024 by rpki-client on console-fra.rpki-client.org