Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
File:                     6a49b156-6028-30c5-b60a-3bb373cf36fc.roa (raw, json)
Hash identifier:          rIBs9cDXyyV8D24y4Y0iejeEvAMzEaZtleZcMS0mHzs=
Subject key identifier:   0F:B4:BF:53:4E:B8:5E:FC:12:06:98:45:8B:74:81:F1:B0:4F:BA:76
Certificate issuer:       /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial:       010D0C9F4328584589A31B739F98C6C450EE9F40
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     398940
IP address blocks:        192.245.221.0/24 maxlen: 24
                          192.245.222.0/23 maxlen: 24
                          199.33.132.0/23 maxlen: 24
                          199.33.134.0/24 maxlen: 24
                          192.245.224.0/24 maxlen: 24
                          199.33.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1b:73:9f:98:c6:c4:50:ee:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=14c81dbb-d693-4a38-bb5e-4622ec47455f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:d0:ff:6b:5c:48:e0:1b:a1:39:87:56:00:
                    0d:62:cd:9e:77:48:88:4f:4e:43:ef:64:30:9b:6a:
                    97:81:6a:ba:27:75:74:46:3d:1b:b8:61:4f:95:8f:
                    25:18:d1:86:d5:0c:80:09:38:3b:39:ab:1e:b6:f7:
                    c7:50:38:7b:82:68:be:2c:1c:49:07:7b:66:cf:28:
                    5c:a0:e2:75:92:69:6a:9b:f2:6c:28:b8:db:23:83:
                    41:7b:51:15:16:a5:e9:9f:52:33:c1:a5:24:9c:fc:
                    63:00:a5:be:3a:b1:22:4d:eb:49:7b:99:37:e4:43:
                    af:e0:3d:98:1c:de:0f:b8:7c:59:82:88:b9:ce:44:
                    05:d7:a6:84:97:22:a5:43:7e:50:61:ec:92:52:92:
                    73:6e:91:7c:89:93:94:fa:cc:86:77:f2:c5:9d:93:
                    90:b8:f5:f3:4b:61:e7:b4:fc:ba:1e:7c:50:f4:16:
                    8a:57:d1:50:f9:c4:f5:92:bd:89:61:b6:cd:fb:b8:
                    6a:b0:c9:35:8d:88:ed:26:5f:a4:b3:d6:66:5a:d3:
                    c3:76:54:41:13:98:62:01:63:82:66:eb:4c:81:5c:
                    a5:59:79:3c:99:72:b2:1b:43:e5:6c:51:8a:35:e1:
                    08:a7:88:97:fb:74:8d:c7:3d:b3:2f:2a:17:70:49:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:BF:53:4E:B8:5E:FC:12:06:98:45:8B:74:81:F1:B0:4F:BA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.221.0-192.245.224.255
                  199.33.130.0-199.33.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:57:78:f3:db:88:f6:a8:4f:f8:65:ea:4c:bb:00:4c:e7:
         9e:d1:4b:8b:73:ae:e7:48:98:ae:62:ef:5f:3e:52:29:71:ba:
         59:50:6c:39:f2:b5:7e:54:f3:ae:87:07:cb:1a:08:52:d1:d1:
         5d:2f:f7:f0:90:e9:a4:e7:f8:96:c1:7e:fb:93:bb:a1:44:37:
         e5:f1:36:e1:0a:f1:ca:86:39:3f:5b:41:03:ac:b5:ed:2f:6d:
         0f:dc:7b:87:dc:a0:4b:d5:68:43:6a:ad:d5:e5:43:e7:d5:55:
         3f:91:28:f6:90:fe:b9:5d:34:5d:f5:1b:b7:07:c2:b4:20:15:
         8e:20:0b:f6:06:9d:4a:c4:6d:b4:aa:1d:50:fd:94:7e:09:9b:
         07:89:64:bd:76:27:ba:d9:6a:05:8b:38:f2:75:ca:86:e3:ed:
         bd:b2:e0:7a:f0:87:b2:05:18:72:c7:f2:cc:12:74:f8:48:21:
         4e:9b:be:52:d8:9c:7a:1e:6b:df:8a:c5:7a:4c:5a:d3:ab:fa:
         5c:5d:d5:6c:d1:36:ed:d9:9a:53:c2:2d:98:27:c1:24:94:2a:
         5f:a8:2f:e7:f9:11:f2:50:0a:aa:f5:41:34:00:7b:be:d9:4e:
         d6:4f:2e:2e:6c:17:46:f5:17:27:51:17:1d:97:bd:57:31:d6:
         c2:a6:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:03 2024 by rpki-client on console-fra.rpki-client.org