Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
File:                     09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa (raw, json)
Hash identifier:          V3w31ZmWnl5sPEr11xKyNahPEqpm+Smd34KTZi7CVKM=
Subject key identifier:   86:29:B1:03:9A:CB:56:0F:8E:DE:C4:11:06:9E:4C:FD:CB:36:11:B7
Certificate issuer:       /CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
Certificate serial:       010D0C9F4328584558C83F4733B5851428C871C0
Authority key identifier: D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     20419
IP address blocks:        208.92.0.0/21 maxlen: 21
                          199.96.112.0/22 maxlen: 22
                          199.21.152.0/21 maxlen: 21
                          192.132.8.0/24 maxlen: 24
                          66.133.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:3f:47:33:b5:85:14:28:c8:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=d2e38cfc-ad53-44ed-8df9-12f5b1c4b705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:dc:10:f7:6a:aa:fd:0c:86:ea:4a:5a:23:
                    f5:bd:be:30:55:13:33:84:3c:af:f7:b7:c3:20:6f:
                    fc:36:e1:14:27:04:ae:d8:dd:2f:32:44:72:12:56:
                    1a:0f:10:22:6b:91:25:05:17:da:52:b5:f4:21:6b:
                    e9:38:77:a5:27:da:02:db:86:01:7c:28:01:42:31:
                    16:6f:ad:a4:2a:fa:6e:76:31:e9:01:22:3e:8e:de:
                    9c:cf:6e:88:a7:04:a6:b4:06:97:7e:72:bc:ad:9a:
                    a7:45:8a:03:7a:06:e2:74:ef:f7:2f:f3:ab:b4:13:
                    5e:2f:6d:71:8f:bc:03:20:5e:60:0b:41:67:a1:c8:
                    59:19:ed:a1:6a:3a:a5:b9:8a:7a:c7:5b:b8:6a:75:
                    96:de:b9:fd:84:02:72:a6:f4:34:30:3f:44:9e:a8:
                    6a:22:5e:8e:cf:69:7e:cb:4b:64:00:d2:5c:0d:b9:
                    8d:a0:65:6f:67:61:a6:c9:e1:ae:7f:39:3a:27:06:
                    70:41:68:1d:bf:af:bd:8f:9e:51:49:77:4e:97:72:
                    e3:49:42:13:4b:9b:f8:0b:5e:4e:bb:0c:2a:c5:c2:
                    8b:a4:58:5e:26:53:86:08:63:20:ba:df:77:3a:eb:
                    b6:dd:b2:60:7d:c9:9e:a6:5d:99:65:90:37:c5:de:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:29:B1:03:9A:CB:56:0F:8E:DE:C4:11:06:9E:4C:FD:CB:36:11:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl

            X509v3 Authority Key Identifier:
                keyid:D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.133.64.0/21
                  192.132.8.0/24
                  199.21.152.0/21
                  199.96.112.0/22
                  208.92.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:f4:b0:ac:d1:17:df:ea:72:f4:04:ef:1e:bf:ed:95:91:
         1e:c4:62:b7:26:d5:61:d4:d7:55:b9:04:39:a2:2b:6e:0b:68:
         a6:6f:66:dd:23:4b:0d:10:74:ae:75:fc:17:e4:4d:0b:77:45:
         4a:6e:ea:73:e3:15:43:08:3a:6a:4b:42:4b:f0:5d:c5:ec:36:
         e1:dd:fb:16:05:63:8d:95:a6:bf:19:0a:b0:0c:a7:73:65:63:
         82:87:1e:0a:7a:e2:a7:18:b0:eb:97:4f:cd:88:65:ad:2c:29:
         3b:69:5b:f5:dd:73:ee:15:79:dd:93:c7:10:62:a5:e6:29:16:
         34:ed:f9:59:d2:0a:0c:56:b2:6e:97:27:40:6f:16:7b:51:73:
         57:85:db:3f:64:45:65:4d:15:01:84:62:e3:7e:47:23:e4:2e:
         2f:e1:89:2e:3a:87:85:23:ea:9b:ff:80:8f:76:4f:99:78:e9:
         4a:61:20:88:ac:99:ab:5c:02:f5:0b:49:37:13:2b:2e:39:21:
         41:32:ab:f4:b3:34:ae:80:51:cd:63:83:9e:54:c0:43:ae:2e:
         bb:38:2b:c4:dc:41:00:80:78:cf:28:b4:cf:5b:54:81:ea:06:
         09:fa:b2:5d:31:0c:6d:03:e5:fc:aa:bb:ff:81:f7:7c:36:64:
         af:9a:79:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 30 16:15:48 2024 by rpki-client on console-fra.rpki-client.org