Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa
File:                     c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa (raw, json)
Hash identifier:          wlbS7Cou/ezDQKrFSM2V50zQQZMf3Ps6Y8GCRBlnvSA=
Subject key identifier:   A2:2B:9F:2A:73:9C:8A:17:64:95:C2:F6:45:83:EF:4E:C0:3B:97:63
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F43285845734DB206A0963BD4A361AE00
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     21887
IP address blocks:        74.118.192.0/22 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b2:06:a0:96:3b:d4:a3:61:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=079b5557-9d37-49db-ac62-b072ea45e19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:12:1a:98:7a:4f:30:ab:11:dd:75:7e:5e:
                    cd:4a:3d:58:06:55:ac:0b:1a:22:24:27:ef:36:62:
                    2f:91:e7:66:2c:c6:49:3c:0f:53:d0:df:d2:ce:42:
                    5e:76:83:cf:55:56:5a:a4:b0:1f:80:a5:0a:7b:8a:
                    25:43:ee:d6:f6:82:31:e9:ea:79:be:61:21:00:b1:
                    48:27:44:e1:5a:3b:5e:85:c7:09:09:2d:fe:2e:84:
                    aa:8d:d6:a8:4c:b8:ca:72:7e:a2:ce:d2:f7:2f:6f:
                    37:0e:f3:b9:a5:bc:4c:16:0a:f2:80:de:15:4e:a0:
                    99:05:f7:a3:8c:37:7e:7c:91:a8:ea:f0:d1:7b:2d:
                    aa:f6:c7:f3:62:7f:13:05:dd:a0:d7:f0:4c:21:28:
                    51:b0:ef:fc:e0:3d:b3:62:0c:8e:8c:50:00:75:da:
                    dc:2e:5c:46:60:74:9a:c3:2d:1f:01:31:2c:8e:c3:
                    99:90:54:4c:a4:95:f5:d3:47:64:49:61:20:46:9a:
                    94:2d:4d:4e:a1:10:18:d3:79:07:08:12:bc:bb:3c:
                    48:f6:64:45:5d:e1:16:cf:63:e1:60:f4:62:4b:19:
                    1c:2a:8a:93:57:3e:61:d2:5c:9f:50:8d:b7:d3:f4:
                    1d:5a:44:c4:07:2d:e5:5f:18:cb:f0:54:e2:75:04:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2B:9F:2A:73:9C:8A:17:64:95:C2:F6:45:83:EF:4E:C0:3B:97:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:47:df:80:93:4b:eb:56:81:e7:7f:c4:9c:35:27:73:d4:
         32:c0:29:fa:e9:5e:02:02:e3:27:79:71:56:50:8f:7c:76:63:
         b1:22:7e:f7:54:37:cc:d6:cf:3e:3c:1d:59:24:53:5d:4e:e8:
         91:5b:d4:33:60:5d:9e:04:fa:62:08:51:bc:ce:9b:30:62:ef:
         af:a5:6c:37:db:89:36:dd:4a:db:07:9a:f2:6f:36:d5:f9:91:
         b9:cf:39:a4:63:fd:cc:29:f0:16:e6:d6:43:36:25:cf:d1:09:
         72:1e:c1:99:2c:eb:14:37:35:d4:cb:a0:45:b7:5e:9c:65:2a:
         30:1b:7a:16:15:f4:fe:d8:ba:52:97:f0:ee:64:82:e0:10:90:
         b3:f4:5a:c4:fe:b7:1a:b9:6e:8d:29:97:2b:ec:09:fb:a8:b5:
         c6:f4:70:8b:4f:56:1f:f1:cd:6b:d7:a2:00:2b:ba:c5:39:76:
         c7:e6:16:34:6a:c3:77:f1:db:be:d5:96:c4:f0:2c:ce:44:c5:
         9b:18:6e:ab:81:25:64:b8:d8:61:c0:ee:d7:10:4c:af:d8:8e:
         df:a6:2b:b7:8f:23:7d:f7:68:04:d4:65:43:26:96:40:dd:a1:
         94:d3:8a:c5:7e:53:ba:3a:f6:ec:df:fc:34:5f:87:55:ac:f4:
         5a:a2:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:15:11 2024 by rpki-client on console-fra.rpki-client.org