Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
File:                     a61681db-9c2d-39f4-ae56-91f2600f6136.roa (raw, json)
Hash identifier:          e/FK00vEyjIAz1sYxkvBoYAjYbKRZBgt2dfUfyMzjiM=
Subject key identifier:   A3:BA:68:C0:59:98:18:73:76:26:E5:A2:AF:C0:CE:41:5A:F3:BA:28
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46CAE358F6E153C685183D0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 01 Aug 2023 11:40:18 +0000
asID:                     262287
IP address blocks:        209.20.133.0/24 maxlen: 24
                          198.145.67.0/24 maxlen: 24
                          209.20.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:ae:35:8f:6e:15:3c:68:51:83:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug  1 11:40:18 2023 GMT
        Subject: CN=a98ecdce-5feb-4647-bcfc-fa731a98c747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:24:88:53:cf:04:db:a6:96:4a:14:a3:01:
                    34:d1:78:e9:a2:2e:89:d6:c9:2a:5a:22:d6:ac:fb:
                    ca:95:17:da:80:e9:98:e7:db:a7:a3:2d:52:08:2b:
                    b2:8b:cc:b0:67:c5:25:48:f6:72:78:ba:24:1b:d6:
                    06:05:95:3b:fb:3b:57:39:d3:68:66:33:c1:0c:50:
                    70:6a:4c:ea:9f:db:33:1d:4b:1f:ee:df:f7:a4:9f:
                    53:7f:96:75:81:2d:76:5c:2f:80:fb:88:cd:eb:0a:
                    3b:fe:85:84:17:09:08:ad:2d:3d:5e:84:c0:06:81:
                    38:5b:b6:35:8f:b8:ad:12:c7:9e:74:3d:7d:e1:b0:
                    a9:13:5e:9d:f0:58:ae:b3:22:b9:c2:7c:df:85:dc:
                    ab:ac:d2:64:09:a9:0e:2d:e2:48:3f:bb:b2:7b:dd:
                    69:8c:ac:2c:f8:bd:c1:75:1e:5b:04:e2:2b:e3:2a:
                    49:78:28:6a:a5:97:aa:04:b1:14:7d:81:4f:4b:ca:
                    d3:0f:44:3e:93:34:4b:2c:22:69:f7:52:2b:eb:2b:
                    93:9c:74:c9:e0:ef:d6:39:4a:e3:d7:2f:03:a8:1a:
                    e9:1f:0b:ad:73:79:d9:0b:84:33:28:d3:95:0b:54:
                    1e:fb:c3:09:18:1e:7f:e8:08:e3:59:63:de:7c:f5:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BA:68:C0:59:98:18:73:76:26:E5:A2:AF:C0:CE:41:5A:F3:BA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.67.0/24
                  209.20.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:00:2a:d4:3d:3d:3c:a8:23:41:64:ec:15:5e:0e:24:12:8b:
         d6:16:f8:de:7c:d3:ae:6c:4f:c9:99:11:66:11:1e:e0:3d:8c:
         1a:2b:14:db:84:69:4e:bb:92:80:f1:af:04:be:52:0e:e4:6c:
         8e:69:1b:b1:45:36:22:e6:45:9a:12:71:b9:30:91:c2:20:f3:
         58:cd:f5:26:44:9a:84:3d:e9:17:19:3f:82:7d:c7:3d:e1:b1:
         47:21:54:ee:d6:95:a4:6b:4a:0b:0e:00:4a:16:9a:e7:4d:d1:
         2e:f2:4b:0a:b9:6c:d8:6f:21:26:7c:d2:68:ac:4d:92:88:b5:
         40:2f:99:68:8f:4a:89:36:85:e0:75:e1:8b:e6:cc:49:33:16:
         2a:8c:22:1b:81:76:5b:ff:19:f0:d7:35:bb:72:99:64:30:65:
         4e:37:d1:fa:2a:5c:83:3d:86:1d:82:35:ce:31:02:21:78:bd:
         36:75:54:3e:39:c8:73:0f:e5:03:fe:fa:ae:e7:c4:77:c3:54:
         8c:61:34:04:44:06:b2:69:6d:0a:5e:7f:20:44:8f:f2:37:94:
         6c:29:16:a3:55:63:4b:1d:97:ec:92:dc:f9:a2:4c:45:82:66:
         72:e8:20:70:03:c1:bd:1c:85:59:6f:74:53:73:00:ab:73:9b:
         91:07:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:46 2023 by rpki-client on console-fra.rpki-client.org