Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa
File:                     dad5264f-359a-33f3-bc03-957253f1506e.roa (raw, json)
Hash identifier:          ruTosTl/Zm6Enz9Gc5e+/KvcJKMf8EBOQi+WHPdfwk4=
Subject key identifier:   7A:C7:20:E3:03:99:73:4E:F1:B0:82:13:F4:E9:DB:09:BE:92:62:16
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584565583679E4B7633B1BC84D48
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa
Signing time:             Mon 01 Apr 2024 01:00:26 +0000
ROA not before:           Mon 01 Apr 2024 01:00:26 +0000
ROA not after:            Sun 30 Jun 2024 01:00:26 +0000
asID:                     15224
IP address blocks:        66.117.16.0/20 maxlen: 24
                          66.235.128.0/19 maxlen: 24
                          172.82.192.0/18 maxlen: 24
                          192.161.136.0/21 maxlen: 24
                          192.243.224.0/19 maxlen: 24
                          208.67.40.0/22 maxlen: 24
                          208.77.136.0/22 maxlen: 24
                          208.91.168.0/21 maxlen: 24
                          63.140.32.0/19 maxlen: 24
                          2620:113:1000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:58:36:79:e4:b7:63:3b:1b:c8:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr  1 01:00:26 2024 GMT
            Not After : Jun 30 01:00:26 2024 GMT
        Subject: CN=e2c55865-f795-48e5-92a5-83595e991bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:92:dc:23:78:e0:84:b1:54:bc:00:be:71:
                    28:e7:2c:9f:2e:a6:37:9b:ea:be:b2:0d:58:c8:dd:
                    de:57:64:d6:41:ff:bd:70:ca:ce:35:a6:4f:c5:fb:
                    8e:4a:b6:0a:9c:43:82:9d:9c:e1:a3:3d:8f:95:1c:
                    84:9e:1f:38:65:0a:6f:b9:4d:b9:7e:f4:e6:4f:20:
                    8b:f3:68:f6:bf:95:c2:0c:a7:6c:d9:62:88:d2:6f:
                    2e:2a:a1:45:cb:69:ac:a7:d1:34:72:76:c3:57:aa:
                    f9:51:ef:a9:1b:44:a1:b9:5f:8a:dc:49:0e:45:ed:
                    30:0e:62:06:d9:40:a1:90:7b:56:7f:0a:7b:e5:3a:
                    6b:aa:1b:69:4c:4b:85:1f:4e:90:f9:9d:04:09:ce:
                    d1:c6:03:b5:85:99:25:22:b2:9b:62:db:4d:2f:9e:
                    65:24:37:1c:44:4f:34:4c:06:21:89:25:f3:dd:82:
                    ea:5e:3a:39:8b:6c:3f:e8:83:3c:f0:77:a5:90:2e:
                    59:2a:8e:01:01:04:d4:21:5a:bf:e4:3d:ac:3c:bd:
                    dd:55:31:ab:5c:62:9a:3b:06:9c:d9:fc:6a:3e:b4:
                    6f:70:32:13:63:4a:3d:c7:0c:76:12:b9:ba:e6:8d:
                    42:7c:5d:50:10:e8:c3:79:be:7f:89:98:83:e0:99:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C7:20:E3:03:99:73:4E:F1:B0:82:13:F4:E9:DB:09:BE:92:62:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.32.0/19
                  66.117.16.0/20
                  66.235.128.0/19
                  172.82.192.0/18
                  192.161.136.0/21
                  192.243.224.0/19
                  208.67.40.0/22
                  208.77.136.0/22
                  208.91.168.0/21
                IPv6:
                  2620:113:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:0e:9f:b6:57:27:bf:c5:21:0a:90:39:ef:5e:bc:0f:13:
         27:0f:16:50:12:9e:c5:92:f8:21:21:9b:28:75:00:0f:ca:88:
         e6:7f:eb:1b:a1:f0:b2:4f:52:cd:44:b8:a7:02:fb:c1:88:85:
         27:74:ec:6b:f5:61:97:41:d9:6f:f8:36:db:01:15:18:a4:2a:
         4f:2e:20:82:1c:f8:1f:dd:e8:e4:93:ad:9a:af:93:e0:2b:6f:
         18:f4:60:8e:3b:f6:23:83:b6:3c:02:d9:40:24:29:8b:aa:9b:
         50:1e:07:e4:50:81:ef:7d:81:86:06:59:d2:e3:be:76:8e:6e:
         c2:3c:df:b7:e3:9d:e0:a8:58:2b:f6:2b:16:e8:4f:65:18:aa:
         c1:03:be:91:7e:b4:2d:02:9e:c7:ea:b6:91:e2:c5:de:7d:9a:
         2f:80:7d:5a:51:c7:e4:0d:35:f8:7f:49:84:4d:e0:6d:d1:4f:
         1e:7a:ab:61:c6:fc:e2:12:21:c1:f1:85:04:5d:f3:41:c9:03:
         9f:b7:13:4e:bb:be:f9:ea:1f:54:b8:2f:66:77:92:1f:a7:3b:
         08:49:6f:b8:19:42:3f:24:85:f7:ab:cb:4e:d3:f0:46:0f:fa:
         10:4c:60:b3:af:f2:dc:b4:a9:a0:38:8d:f2:38:26:b4:e1:2e:
         f0:8c:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:18:09 2024 by rpki-client on console-ams.rpki-client.org