Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa
File:                     90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (raw, json)
Hash identifier:          yZCPDJbNqpH6ha9S4gZFZSu1RGWbfB0e8eZn3DscDMs=
Subject key identifier:   77:AE:AF:AF:43:38:4F:B3:65:C2:91:6F:DA:6A:39:26:08:28:AA:46
Certificate issuer:       /CN=3d21f741-fd91-4158-8853-7388dab3b3e3
Certificate serial:       010D0C9F43285845AF53728899956AB3F44FF780
Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     53274
IP address blocks:        199.168.205.0/24 maxlen: 24
                          199.168.206.0/24 maxlen: 24
                          199.168.200.0/22 maxlen: 24
                          199.168.204.0/24 maxlen: 24
                          162.255.168.0/22 maxlen: 24
                          204.48.56.0/23 maxlen: 24
                          204.48.58.0/23 maxlen: 24
                          199.168.207.0/24 maxlen: 24
                          2602:ff8f::/40 maxlen: 41
                          2602:ff8f:fff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:72:88:99:95:6a:b3:f4:4f:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=f7bac0b0-fa2c-4dba-b4e1-b35a569a92c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:d6:fc:2a:54:f3:e7:73:e0:4d:da:ae:60:
                    c8:6e:70:2d:04:ea:fd:e6:5d:2b:0f:99:19:23:3b:
                    1d:ed:30:67:53:91:cc:57:68:f1:59:b5:12:13:f1:
                    98:dc:76:63:74:21:6b:63:69:6f:b5:a9:ee:f4:cf:
                    40:de:c4:c0:16:db:32:73:52:22:a1:e2:95:5c:a8:
                    95:d2:fc:b9:63:5c:c8:b3:b7:83:d4:2d:11:6b:a9:
                    16:a2:88:f7:9b:c1:51:5a:bf:02:0f:55:4a:86:9a:
                    4b:35:75:d3:48:f6:ae:be:a7:9c:80:2b:ff:e8:56:
                    e4:c1:92:23:89:04:f5:06:c1:11:6c:f4:84:61:e6:
                    dc:c2:ec:4f:b2:79:bb:26:37:ca:72:e2:f7:6c:82:
                    c5:8d:d1:3f:3c:02:f4:36:3b:e5:7b:9b:80:87:30:
                    e2:d0:63:87:9c:6b:38:d5:32:6d:8f:ec:91:b1:e2:
                    c8:c8:0b:13:98:d8:a2:e7:81:53:f0:d3:55:ae:1d:
                    90:2e:f3:f6:e0:6c:77:c8:3d:ac:6b:53:ed:e3:bb:
                    44:31:da:ae:ff:20:c9:94:46:a4:9d:a8:b5:76:96:
                    f4:ee:d9:d6:6e:40:3f:a6:93:30:8b:fd:76:06:34:
                    3d:96:48:5c:21:64:ce:b4:56:4f:1c:d9:af:4c:0b:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:AF:AF:43:38:4F:B3:65:C2:91:6F:DA:6A:39:26:08:28:AA:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.168.0/22
                  199.168.200.0/21
                  204.48.56.0/22
                IPv6:
                  2602:ff8f::/40
                  2602:ff8f:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:26:61:94:1a:99:45:d5:3a:d0:6e:ef:83:ab:80:95:59:7f:
         60:1e:ee:75:4e:bc:6a:f3:cb:2d:55:86:c2:b9:b5:33:c3:1e:
         25:2e:6b:6c:2c:b7:37:ee:bc:b1:d2:b0:70:8a:70:cf:f1:63:
         c8:ff:a2:47:31:e4:4f:15:c9:57:65:2a:ed:b0:29:c9:fa:b6:
         32:07:55:cb:15:48:c3:0c:e6:92:21:f9:76:78:f5:d7:26:f9:
         cc:55:cf:e6:a1:62:19:00:ea:64:59:49:a1:98:c3:bd:37:ed:
         5c:d7:a3:1c:ae:2a:cd:99:6e:86:2a:c2:ab:ef:41:2a:b4:54:
         85:05:c8:c0:01:16:82:d7:67:e4:e2:f0:19:d7:aa:c2:ef:66:
         08:97:6f:c1:de:fb:a0:d7:3c:c0:69:1f:c7:96:dd:f9:30:54:
         70:be:49:6e:fb:97:a4:02:c5:17:99:3e:39:30:c1:d1:f7:62:
         87:9d:f2:a4:dc:7a:eb:4e:8e:cc:51:3c:ea:95:e2:5a:51:5c:
         80:ec:f1:ce:28:84:7a:12:19:70:79:83:96:5a:92:0c:fd:62:
         7a:0a:1d:ac:90:2b:79:ef:2c:c8:91:1c:f1:c8:26:af:26:8a:
         7a:b3:8c:ca:e4:dd:7b:13:40:f9:d9:cf:e7:a4:a1:e2:10:ff:
         86:70:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:53:48 2024 by rpki-client on console-fra.rpki-client.org