Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa
File:                     8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa (raw, json)
Hash identifier:          Gsj44K9v+fhQrmC4gigtoJk0BabStejJ9l/dBbnV8tQ=
Subject key identifier:   34:58:52:3D:57:0F:94:E8:0E:DF:C1:D0:87:79:22:C0:65:57:D8:33
Certificate issuer:       /CN=9378d90b-f478-4096-895a-85c3852d542f
Certificate serial:       010D0C9F4328584529528C551AD932A2BAF17600
Authority key identifier: B3:0F:19:68:E0:98:95:34:09:70:51:9D:2F:04:CC:87:A6:1F:05:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     62512
IP address blocks:        162.252.204.0/22 maxlen: 22
                          162.252.204.0/23 maxlen: 23
                          162.252.206.0/23 maxlen: 23
                          162.252.204.0/24 maxlen: 24
                          162.252.206.0/24 maxlen: 24
                          162.252.207.0/24 maxlen: 24
                          162.252.205.0/24 maxlen: 24
                          2602:ff3a:2::/48 maxlen: 48
                          2602:ff3a::/36 maxlen: 36
                          2602:ff3a:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/9378d90b-f478-4096-895a-85c3852d542f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/9378d90b-f478-4096-895a-85c3852d542f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8c:55:1a:d9:32:a2:ba:f1:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9378d90b-f478-4096-895a-85c3852d542f
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=f22bb3e4-2722-4e96-8f59-a8a65a8307b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:29:46:99:e5:75:2a:47:14:7e:dd:12:77:71:
                    5f:35:48:87:82:91:f8:7f:7e:73:cb:db:2f:99:83:
                    ff:03:4b:25:75:c8:09:65:18:11:36:39:ba:94:51:
                    5e:62:76:e9:2e:05:f8:20:be:68:2a:37:81:78:ff:
                    06:4b:e3:35:2e:0c:26:de:7f:3a:4b:b4:24:23:4d:
                    e0:f6:7f:ab:38:23:78:be:5d:4f:b0:c4:75:ab:7b:
                    5e:4f:9a:f6:ba:f5:41:23:27:03:6c:39:06:29:6e:
                    60:9c:f3:c3:a0:ee:3d:27:a4:62:17:b1:41:ad:78:
                    96:60:34:9f:ac:a4:83:9a:65:a1:44:14:d9:8f:33:
                    cb:c5:1b:34:51:b6:4a:31:e8:bc:f2:6b:a5:b6:67:
                    d4:d1:30:32:3a:d3:a7:05:f1:09:fb:75:0d:8c:b3:
                    ea:32:df:dd:9f:96:69:ee:5d:6e:b7:af:ea:e6:d3:
                    6d:07:08:c2:0a:f0:c6:da:d9:46:18:2d:7e:06:c5:
                    46:29:d3:0d:f1:d8:84:98:ec:e9:83:1d:9d:14:43:
                    de:4d:59:30:9c:d4:57:f8:41:75:5b:d0:04:4c:33:
                    4d:a5:ab:3d:ac:8d:96:94:a6:3b:c4:25:c1:60:ce:
                    8a:a0:be:70:ff:5a:36:45:8f:58:86:eb:dc:20:1d:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:58:52:3D:57:0F:94:E8:0E:DF:C1:D0:87:79:22:C0:65:57:D8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/9378d90b-f478-4096-895a-85c3852d542f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:0F:19:68:E0:98:95:34:09:70:51:9D:2F:04:CC:87:A6:1F:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.204.0/22
                IPv6:
                  2602:ff3a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:44:58:0a:a8:11:f6:6c:67:e5:9f:7d:5c:2c:75:58:c9:
         67:74:08:2b:95:d3:20:90:b1:02:53:13:9c:00:88:b1:7e:6b:
         1f:56:d2:a2:ed:2f:cd:9e:f5:f5:98:41:bb:5c:93:85:4c:23:
         7e:d2:33:b7:d9:fd:2e:dc:c5:ca:14:f9:99:e1:5b:88:4b:bc:
         b1:53:4a:cb:e3:ae:d1:d8:bf:5e:30:fa:2b:17:2e:62:26:9b:
         88:7e:d4:1b:0c:84:bb:ed:e8:58:46:62:5f:a2:58:d5:15:10:
         f7:1d:2f:4c:f6:92:e7:7d:2f:26:70:2c:5b:ef:3f:14:30:90:
         9c:3e:05:89:16:e2:6a:96:b6:f8:34:0e:9d:30:18:22:f4:e9:
         bd:39:8c:a2:f4:6c:85:ab:c4:5f:03:df:64:be:fd:96:51:f6:
         68:3e:22:ac:f3:7e:28:9b:db:7c:ab:59:d7:a6:89:3d:15:bc:
         64:20:a6:25:08:74:c4:c6:a1:7d:e0:6e:78:06:aa:df:15:4f:
         91:27:95:ce:b3:a1:b0:c2:83:92:8a:93:c8:92:65:b9:13:1c:
         d2:ad:53:f7:bb:8e:f3:e7:a8:4d:b7:d6:38:4c:3c:f2:bf:13:
         2a:0a:dc:0a:08:e3:44:5d:30:dd:78:3b:20:1f:68:50:64:4f:
         3b:e6:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:01:40 2024 by rpki-client on console-ams.rpki-client.org