Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b39d48de-cdbc-367d-a5bf-db343e4bd856.roa
File:                     b39d48de-cdbc-367d-a5bf-db343e4bd856.roa (raw, json)
Hash identifier:          Huk9qZSuH5x7X6PKgaoydSwOfJLTmMcKlRZL4/06vNM=
Subject key identifier:   50:90:CE:67:6F:A6:8F:DC:1B:9F:0D:71:37:07:CA:A6:F4:AB:32:D2
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46D0013BA9A13FFC9783830
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b39d48de-cdbc-367d-a5bf-db343e4bd856.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 13 Jun 2023 18:18:30 +0000
asID:                     1239
IP address blocks:        198.145.96.0/20 maxlen: 20
                          198.145.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:00:13:ba:9a:13:ff:c9:78:38:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 13 18:18:30 2023 GMT
        Subject: CN=f8da29ac-5045-433c-966e-ad6d78aa7b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:0f:93:8f:35:ae:6a:06:59:a4:eb:2c:9c:
                    3e:b8:89:32:b6:44:d7:ad:cb:5b:d7:8b:72:f6:c0:
                    c3:05:a4:5c:fb:29:07:1a:82:b0:ee:0b:da:ba:30:
                    a4:29:18:ec:44:14:99:3e:b7:17:6a:ed:86:0a:e2:
                    d3:db:1b:d7:d4:55:a3:d5:5a:50:f4:97:31:91:7b:
                    f4:15:4a:3d:cc:2c:50:34:e3:34:1f:22:49:87:bf:
                    02:75:4c:29:e1:0b:32:e1:04:28:d0:90:27:ce:8d:
                    bb:bc:4a:63:29:26:7d:25:8f:a2:a7:c1:9b:44:9b:
                    a7:a0:57:fc:b9:d1:e6:e0:23:ab:e1:47:69:53:77:
                    73:a4:9e:91:68:d2:81:cf:de:6e:80:4b:a8:95:5f:
                    8b:91:25:da:e3:c0:59:03:ce:b8:75:7a:e1:be:eb:
                    0a:85:76:7a:f1:49:91:3d:9c:4c:d4:15:ce:d1:3c:
                    b2:3a:2f:00:30:d0:5c:af:2a:d0:d8:f3:25:67:09:
                    b9:27:c2:8f:ff:5a:15:98:78:8e:75:78:9a:85:e8:
                    c6:ba:b3:3a:4c:7c:18:b9:10:90:ef:41:16:fa:26:
                    f8:73:3c:36:c2:51:2a:07:23:2c:91:5b:84:56:9b:
                    25:e2:8c:af:66:d6:ad:f2:87:cb:7c:aa:64:69:21:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:CE:67:6F:A6:8F:DC:1B:9F:0D:71:37:07:CA:A6:F4:AB:32:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b39d48de-cdbc-367d-a5bf-db343e4bd856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.72.0/21
                  198.145.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:6b:f1:19:11:d3:2f:c1:96:69:fc:61:8c:a4:15:2d:e4:31:
         ee:59:59:65:4c:2d:73:da:ce:6f:7d:46:74:e9:59:98:34:ce:
         d9:e6:f1:8d:44:e4:45:c0:f9:a0:85:a7:a1:9e:16:29:c2:17:
         e6:56:c2:86:43:f3:ff:f5:64:68:0c:83:2a:97:47:a4:43:f4:
         55:af:82:2a:9e:b8:39:15:12:57:f4:80:9f:ab:4c:0d:1d:73:
         79:8d:bf:a7:a8:0d:97:08:7b:d2:e3:1c:74:a6:1d:60:c0:9c:
         e7:09:70:3a:47:bd:5f:cc:3b:ec:53:61:c3:17:7b:62:26:1c:
         50:5f:4c:4c:af:85:6a:65:26:1f:95:21:fa:57:47:29:51:7b:
         4d:6e:84:19:81:f1:f2:41:df:8b:e7:47:a1:27:87:79:cb:d1:
         cf:d4:5c:02:44:25:28:87:9a:27:d5:fa:a6:f3:a7:38:c5:f5:
         dc:3d:58:6a:e7:03:d7:37:47:0e:72:8d:cb:a5:88:5e:c5:99:
         3e:cf:7a:0b:99:c8:cb:17:22:5e:92:6d:fe:5b:bd:1e:a8:dc:
         ae:b4:bf:cf:8e:ef:ba:4a:4e:96:36:08:3c:7d:d2:cf:2f:11:
         1e:2e:ce:d6:48:30:be:d7:89:03:63:b8:e6:93:ec:7b:5c:df:
         52:a5:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:46 2023 by rpki-client on console-fra.rpki-client.org