Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa
File:                     3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa (raw, json)
Hash identifier:          /BYQFjIDIMLZg9GCi62R6bF75UmkP8umV32K9VYujQg=
Subject key identifier:   45:2B:28:5B:43:A7:16:D4:AB:4E:0E:A9:AC:6D:71:C9:EF:3E:49:F1
Certificate issuer:       /CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
Certificate serial:       010D0C9F432858457FDDE4D3D4AF162C6A63B200
Authority key identifier: 5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     400633
IP address blocks:        69.176.56.0/24 maxlen: 24
                          76.8.185.0/24 maxlen: 24
                          76.8.178.0/24 maxlen: 24
                          69.176.63.0/24 maxlen: 24
                          69.176.57.0/24 maxlen: 24
                          69.176.53.0/24 maxlen: 24
                          69.176.44.0/24 maxlen: 24
                          69.176.37.0/24 maxlen: 24
                          69.176.12.0/24 maxlen: 24
                          69.176.6.0/24 maxlen: 24
                          69.176.4.0/24 maxlen: 24
                          76.8.190.0/24 maxlen: 24
                          76.8.186.0/24 maxlen: 24
                          69.176.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e4:d3:d4:af:16:2c:6a:63:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=55d14bf9-acf5-44c3-8ed9-d99547877f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:21:fb:91:e1:df:64:61:23:a9:3e:7b:fa:
                    22:f0:b1:eb:c1:b6:87:90:4e:a8:a3:a7:ab:b1:55:
                    99:fe:74:ae:ac:92:19:b2:75:8f:f8:52:75:53:61:
                    3c:d2:f8:ce:5f:e6:35:cd:7c:8a:93:5a:0f:34:98:
                    75:2a:67:9b:d7:cb:69:70:4d:52:f4:9c:56:f6:8a:
                    7f:e1:3c:bd:30:25:00:01:19:cd:3c:d4:75:10:61:
                    41:54:86:fa:1e:ee:13:cb:c6:c9:3c:9a:f9:9b:27:
                    9f:d7:95:1f:c6:19:ad:e6:04:d0:3d:07:16:bb:4c:
                    38:f4:ac:e6:c8:53:55:ef:14:e6:50:df:66:4f:84:
                    63:e2:a9:59:ae:45:97:c6:39:60:a2:7b:27:12:db:
                    09:e0:53:3f:7b:5f:84:24:e8:d6:c4:fa:20:73:ef:
                    b4:c4:4b:91:73:ed:e3:ab:59:51:6d:1f:70:73:e3:
                    51:40:b4:63:08:61:f8:97:d4:cf:ef:08:50:6e:3e:
                    73:0a:22:57:67:0c:78:eb:9a:67:30:50:50:73:39:
                    78:42:70:73:1a:00:8c:0d:37:20:28:5d:52:a4:7b:
                    9f:42:58:4c:80:14:2d:ee:29:6a:9a:aa:3b:6e:56:
                    34:64:af:a2:6f:55:a6:7c:eb:f6:a5:bd:4d:02:50:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2B:28:5B:43:A7:16:D4:AB:4E:0E:A9:AC:6D:71:C9:EF:3E:49:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.4.0/24
                  69.176.6.0/24
                  69.176.12.0/24
                  69.176.19.0/24
                  69.176.37.0/24
                  69.176.44.0/24
                  69.176.53.0/24
                  69.176.56.0/23
                  69.176.63.0/24
                  76.8.178.0/24
                  76.8.185.0-76.8.186.255
                  76.8.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:8b:e8:6b:96:88:11:e9:0c:13:f9:f9:45:c3:b0:ee:d7:
         27:a8:1d:81:62:87:3f:43:0a:48:68:3f:0e:a1:a4:69:c0:10:
         31:34:d4:cd:bc:93:2d:83:fe:9a:e4:26:4c:03:0f:79:dc:b8:
         f5:84:a1:4e:f9:83:14:46:74:72:e5:1b:06:32:e4:24:67:20:
         cf:78:9b:0b:7b:24:9c:a5:11:69:58:1c:da:2f:85:a7:39:7c:
         2e:09:0c:57:0a:be:01:a2:27:4d:6d:55:98:2a:4a:aa:d2:2e:
         8d:68:01:f4:ad:49:08:89:db:a6:25:be:7c:60:ae:3a:8c:7d:
         af:85:b5:ca:57:a6:d3:0d:8a:0a:36:6b:fd:b8:b5:14:db:d3:
         ae:39:d4:83:a3:27:87:dd:a6:c9:02:1f:73:18:1d:11:9a:fe:
         f6:57:27:1a:83:ec:6d:b1:2c:30:c3:ee:ff:67:aa:12:38:ab:
         d7:55:87:b2:b2:c7:d5:31:ca:48:5d:b2:bd:55:8d:d1:54:d6:
         bb:8d:bb:e7:87:12:47:93:24:0d:39:46:5c:be:04:a3:81:9b:
         ef:7b:ad:b6:2e:8b:b0:4f:6b:f5:57:7c:7f:3b:41:8e:ee:94:
         46:bf:8f:4b:eb:43:c4:c4:fb:dc:91:7e:00:27:3c:97:b1:78:
         08:24:0e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:07 2024 by rpki-client on console-ams.rpki-client.org