Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/f1964c90-a705-30d0-b1fb-98e41981c387.roa
File:                     f1964c90-a705-30d0-b1fb-98e41981c387.roa (raw, json)
Hash identifier:          1fIBCaH/3YBfcBPYVMGdp8c326ZeFAt3ziU1KOyoVc8=
Subject key identifier:   36:2C:96:20:47:29:EB:F5:3E:B9:4D:D8:73:BF:51:2F:5B:EC:79:9B
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584585732D9ECCE0D1559693B980
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/f1964c90-a705-30d0-b1fb-98e41981c387.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     397270
IP address blocks:        208.69.100.0/22 maxlen: 24
                          23.160.192.0/22 maxlen: 24
                          64.112.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2d:9e:cc:e0:d1:55:96:93:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=52dd29e1-56c7-4208-b0d1-6ba0f0e5d843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:0e:b3:1f:9a:22:0d:c1:ff:b5:a7:fd:87:
                    71:58:f5:c5:19:33:cc:e5:14:9d:5e:d9:18:1f:b7:
                    8b:ce:8f:a8:d8:31:92:9b:53:25:7b:2f:ec:39:f3:
                    0f:64:a7:bd:80:4e:5f:48:0d:6c:ec:28:52:7d:c9:
                    a4:21:c3:34:4f:29:6c:da:86:a9:36:cd:13:3e:a2:
                    95:3e:ef:23:5f:26:6d:4b:05:0d:07:c8:58:30:ff:
                    ee:2c:f5:5b:f9:a3:3b:63:9e:05:f2:58:a1:95:f1:
                    b2:e8:56:4b:13:c3:26:a3:47:cd:a1:cc:87:39:52:
                    91:c4:e5:3e:ed:85:c2:e5:62:27:bb:53:40:63:52:
                    79:ff:79:1c:17:ac:99:65:55:f6:82:38:3e:bf:51:
                    ae:53:f6:1a:e7:66:ca:3a:b9:ff:4a:99:2a:ca:1b:
                    2b:d2:90:66:d1:e4:8e:54:8e:a9:af:31:d3:fe:c4:
                    57:70:0f:f3:03:a8:b3:15:0e:59:6a:ac:95:96:c3:
                    60:e8:c6:4a:b4:2f:8d:45:1c:47:f4:ee:b4:dc:0f:
                    48:d0:93:82:c5:07:c3:db:fb:b9:7a:ee:81:bd:ee:
                    b1:cb:a6:17:0b:82:f6:37:57:4c:47:70:b0:24:b3:
                    71:9e:57:ae:7c:f7:0e:89:21:50:ff:ac:14:03:23:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2C:96:20:47:29:EB:F5:3E:B9:4D:D8:73:BF:51:2F:5B:EC:79:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/f1964c90-a705-30d0-b1fb-98e41981c387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.192.0/22
                  64.112.32.0/22
                  208.69.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:8b:d1:bd:a4:35:53:6b:b7:8e:e4:2c:dd:d2:03:c9:53:
         27:dc:a4:5d:97:12:86:96:8b:bf:f3:5f:34:04:a5:b8:b8:9f:
         23:18:b9:b1:90:7b:03:f9:65:4e:8e:1a:97:e7:21:6f:a6:96:
         61:3e:b9:b3:50:db:2c:e4:38:1c:f9:9a:19:40:2c:d7:55:87:
         ae:e3:2b:a9:a4:44:99:85:de:90:aa:0b:88:2d:fa:44:98:f8:
         e7:1a:c3:80:29:34:5f:83:a3:ae:ce:cc:70:8f:27:16:14:f0:
         ac:3a:70:1f:3a:88:c9:7a:4e:c8:ad:ef:e7:dc:2a:03:26:0f:
         8f:2d:e8:5f:43:37:26:c0:01:a3:63:fc:50:25:a9:9b:41:f0:
         af:fc:96:71:15:85:25:8e:da:d6:63:30:42:9f:94:35:f3:5e:
         20:32:fc:bb:5f:1f:75:9a:a8:48:e8:04:28:0d:0e:b1:2f:5c:
         06:9a:91:d3:69:8a:25:dd:01:8c:ca:a5:e3:46:1b:bc:31:34:
         df:b7:a2:1b:9c:37:b7:d9:9b:1a:9b:07:0a:3f:83:e8:1a:4a:
         b0:15:32:4f:50:12:1e:01:66:3d:1d:64:2a:b4:f6:1e:39:3e:
         79:ea:e6:ee:43:16:ff:e6:f9:81:e0:51:98:07:3a:74:cd:84:
         1d:05:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:15:53 2024 by rpki-client on console-ams.rpki-client.org