Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/1bebdab6-b819-38bc-be99-094b6095a7b4.roa
File:                     1bebdab6-b819-38bc-be99-094b6095a7b4.roa (raw, json)
Hash identifier:          sorbYS2OidWFF4homXFp6yuLX2sU+vh570qLBA285oQ=
Subject key identifier:   7E:E6:A8:4C:D6:2A:88:37:67:FF:B4:44:09:4E:D8:1C:1F:B7:6D:92
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F43285844E3A53A84BC7F15D5A0928C80
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/1bebdab6-b819-38bc-be99-094b6095a7b4.roa
Signing time:             Wed 14 Feb 2024 14:00:30 +0000
ROA not before:           Wed 14 Feb 2024 14:00:30 +0000
ROA not after:            Tue 14 May 2024 13:00:30 +0000
asID:                     12956
IP address blocks:        66.201.160.0/19 maxlen: 24
                          66.119.64.0/19 maxlen: 24
                          198.52.248.0/21 maxlen: 24
                          66.249.192.0/19 maxlen: 24
                          216.184.96.0/19 maxlen: 24
                          2001:1820::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:a5:3a:84:bc:7f:15:d5:a0:92:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Feb 14 14:00:30 2024 GMT
            Not After : May 14 13:00:30 2024 GMT
        Subject: CN=4473770b-418e-44d8-bf30-30b5a478c2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:c3:30:8b:53:be:60:d7:e2:48:a9:33:5b:
                    e1:4b:31:56:e3:4b:56:5d:07:04:6a:42:cc:1d:d2:
                    ec:3e:0c:11:b0:77:b8:36:d9:af:5c:6b:7c:21:8a:
                    2a:8b:a8:7e:bc:09:8b:1b:e6:11:5d:5f:08:7f:16:
                    09:f2:9b:61:11:28:ff:4c:f8:76:ef:85:89:d0:a5:
                    ad:4d:56:d8:e5:4a:e9:ab:f6:04:5c:dc:22:af:7c:
                    14:cb:2a:97:f5:b8:04:21:ce:e3:0a:c3:a6:a4:52:
                    36:d0:1e:0d:a8:d7:fb:84:4c:45:15:4b:a2:48:1a:
                    aa:67:b6:41:d9:79:c4:5e:74:c6:7b:a8:3c:09:01:
                    3c:8e:45:e5:c4:bd:a4:78:b1:a4:eb:2c:0e:50:73:
                    d9:f8:c5:3d:e7:b9:36:59:d3:01:ab:eb:41:03:d6:
                    73:72:5a:83:fa:51:e1:fb:11:e6:bc:85:a2:1b:f1:
                    4a:d5:e4:29:af:29:2d:ce:63:41:43:c2:44:3a:f6:
                    8a:fa:bb:6a:67:56:6d:5b:f3:4d:c0:78:55:70:92:
                    6f:c6:c4:30:a1:65:1d:8b:5d:17:33:fc:5e:8e:ff:
                    90:44:14:cf:dc:24:10:55:3c:0b:fe:82:cc:79:d3:
                    5e:76:43:f4:ab:8e:32:96:54:a2:7e:c7:86:77:bc:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E6:A8:4C:D6:2A:88:37:67:FF:B4:44:09:4E:D8:1C:1F:B7:6D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/1bebdab6-b819-38bc-be99-094b6095a7b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.64.0/19
                  66.201.160.0/19
                  66.249.192.0/19
                  198.52.248.0/21
                  216.184.96.0/19
                IPv6:
                  2001:1820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:50:78:49:96:a4:8d:09:5a:66:f6:9a:a9:67:c5:2c:73:
         e8:33:44:3b:b3:93:8b:5e:e8:50:0a:db:53:80:09:7a:de:57:
         27:d6:93:9b:58:bc:07:ff:a9:71:0f:0c:07:08:2f:7d:a9:5c:
         48:e5:27:2d:e2:16:63:a2:51:16:d5:bb:63:b3:34:17:17:58:
         05:ff:37:cd:2f:45:65:21:53:e2:ca:0f:0e:a3:48:1c:d9:fa:
         42:f8:72:d2:10:9e:87:65:66:c0:9e:ed:6f:7d:4d:19:45:6d:
         84:d9:9d:c2:9e:73:86:13:4c:42:94:6d:95:17:54:ea:39:23:
         5f:dc:57:88:f9:7b:7b:8d:6b:9e:fd:a1:20:25:ab:b3:c9:7f:
         d8:f5:c0:44:2b:1b:6d:7a:a0:c0:89:51:1c:7b:40:47:4a:fa:
         6c:49:55:6f:49:c5:94:0d:1d:23:18:58:df:f3:2a:39:b3:9c:
         19:9e:8d:83:7f:e2:91:61:a1:13:2c:31:26:04:ef:75:e3:f6:
         d4:64:a4:45:a2:ab:6b:3f:75:20:fc:fb:ce:7f:ca:12:29:97:
         c3:fa:ad:cb:3f:be:9b:b7:de:33:55:92:ef:52:43:ab:cc:be:
         84:50:54:85:64:5c:42:16:0b:56:04:13:ae:ce:e5:a3:30:15:
         c1:cb:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:22:47 2024 by rpki-client on console-ams.rpki-client.org