Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
File:                     d63d2c69-1581-3042-9e40-e504ec9f86b2.roa (raw, json)
Hash identifier:          RTr0o5BrJlTHGtJbJdKbd7WaDdvdIgtJFDVE+/wTaXQ=
Subject key identifier:   71:94:35:77:86:96:17:D4:77:41:4C:ED:15:FF:11:01:21:70:52:26
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F43285845777DC2D07EAA57BF8DF63180
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     15128
IP address blocks:        209.163.64.0/19 maxlen: 24
                          104.250.64.0/19 maxlen: 24
                          192.235.128.0/17 maxlen: 24
                          147.194.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c2:d0:7e:aa:57:bf:8d:f6:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=9d4d62fc-f469-4bd3-a40b-6b4b4ed2d107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:06:5a:d6:0f:43:6f:96:af:90:b3:0c:94:
                    c8:74:db:17:d0:1b:61:42:82:95:4b:0a:9a:a2:28:
                    48:9b:b1:18:6e:07:26:56:bd:e1:35:7b:a4:6a:25:
                    6a:99:c6:d3:06:7d:8e:f9:90:78:ca:b7:ca:ab:bb:
                    d3:c0:7b:83:60:a2:ad:8f:31:04:95:a1:98:82:91:
                    ff:c9:ff:f7:1d:11:eb:fa:1b:30:91:95:cb:0e:8c:
                    9e:e9:f5:bf:16:7e:0d:2b:8f:21:0f:2c:f4:b4:40:
                    df:09:46:8c:96:ae:2a:d0:e0:da:75:1c:94:a6:b6:
                    09:93:64:fd:17:16:dd:d7:be:04:f3:f7:e0:f8:d5:
                    f6:09:58:c1:c7:b2:f0:bf:12:3e:f8:ff:98:36:0f:
                    b7:8b:60:d1:08:ed:a4:e5:4c:92:79:d9:de:e3:fe:
                    d8:e9:c8:bb:36:3b:1b:11:ed:89:97:01:20:5b:7e:
                    dc:72:2f:c1:7a:8c:a0:20:f1:d4:47:09:aa:e0:15:
                    6b:e8:87:fd:ca:f8:c4:be:c5:5c:9e:25:42:63:91:
                    0a:d3:09:22:0a:93:99:df:c5:00:a1:1b:c4:b6:81:
                    37:bc:49:4b:b8:6d:73:bf:5e:a6:72:d7:ea:27:47:
                    d0:fa:84:13:70:90:e0:86:e0:cb:21:4f:11:a7:81:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:94:35:77:86:96:17:D4:77:41:4C:ED:15:FF:11:01:21:70:52:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.64.0/19
                  147.194.0.0/16
                  192.235.128.0/17
                  209.163.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:46:70:af:d8:1a:31:91:f5:55:51:88:69:2a:7a:03:65:96:
         da:98:b8:21:03:93:2e:e9:1c:25:b3:54:66:c8:ec:31:85:cb:
         c1:ba:4d:71:27:c0:fc:b3:61:65:d7:dc:d2:96:37:4d:64:b8:
         64:68:ab:27:3c:fe:cd:70:4d:74:6f:87:fd:5e:3e:89:4a:45:
         64:c3:08:de:bb:3d:57:5a:69:b8:30:1a:99:fc:5e:ea:ed:48:
         ec:50:41:f1:34:93:a1:2d:e4:e2:dc:bd:14:44:55:e9:f6:11:
         a6:21:4c:68:a0:df:72:76:c2:a2:54:4b:1c:b3:f9:74:23:0c:
         4e:89:ab:b9:55:9c:57:00:e4:98:4e:b6:8f:07:c8:54:41:fb:
         9e:59:95:5b:c1:7a:de:b5:8e:d0:0d:1b:04:c0:1f:e3:16:4a:
         24:ee:60:53:bc:27:64:c5:d7:88:0a:57:98:df:16:a2:34:6a:
         b3:ec:10:0c:07:d9:87:be:76:a2:ee:59:66:c3:2e:c0:2b:b8:
         40:38:65:66:31:63:bc:db:15:fb:e5:3f:53:97:cf:a2:90:72:
         d1:99:7c:41:d3:7a:62:3c:0c:57:a5:6a:66:a7:e9:bc:d7:19:
         c9:94:5f:6c:17:16:a9:26:95:88:08:1b:65:aa:06:85:e2:52:
         d4:50:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:21 2024 by rpki-client on console-fra.rpki-client.org