Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
File:                     033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa (raw, json)
Hash identifier:          E5r0bryothLjtpfb8Uu5SRBR5BPKr4sYMX8sXgWb3GY=
Subject key identifier:   7E:36:63:D4:5E:94:EA:DB:CC:21:83:70:4A:00:7C:A6:3C:B6:A0:71
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584574B316B6004A209F56814478
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     20055
IP address blocks:        205.174.152.0/22 maxlen: 22
                          192.152.0.0/24 maxlen: 24
                          192.75.144.0/24 maxlen: 24
                          204.194.220.0/23 maxlen: 23
                          198.179.52.0/22 maxlen: 22
                          162.43.200.0/21 maxlen: 21
                          69.55.208.0/20 maxlen: 20
                          66.35.0.0/20 maxlen: 20
                          162.33.232.0/21 maxlen: 21
                          107.191.236.0/22 maxlen: 22
                          137.83.80.0/23 maxlen: 23
                          64.52.96.0/22 maxlen: 22
                          207.32.192.0/20 maxlen: 20
                          137.83.56.0/24 maxlen: 24
                          209.237.136.0/22 maxlen: 22
                          72.21.10.0/23 maxlen: 23
                          64.52.6.0/24 maxlen: 24
                          206.166.252.0/23 maxlen: 23
                          208.52.175.0/24 maxlen: 24
                          208.52.160.0/24 maxlen: 24
                          2607:f688::/32 maxlen: 32
                          2605:21c0::/32 maxlen: 32
                          2001:506:39::/48 maxlen: 48
                          2001:506:38::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:16:b6:00:4a:20:9f:56:81:44:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=3693ab17-a831-4d3e-8382-4b60e4199084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:18:26:6e:00:84:d3:d4:2a:98:28:47:8e:
                    77:2f:b0:ec:7a:df:ab:0c:1d:d3:43:b0:8d:f4:df:
                    a4:75:69:5b:ce:80:79:22:b3:3f:58:f9:ea:f5:36:
                    60:8c:a9:43:cb:12:93:eb:2f:d6:4a:a4:61:d5:a5:
                    bb:63:5f:d2:42:70:f5:ac:a5:37:0f:9c:22:d7:a0:
                    82:25:81:23:1d:15:60:f6:b6:dc:fe:d1:5c:40:40:
                    82:ff:43:8c:07:ec:c7:2f:42:52:96:99:db:dd:b5:
                    8c:01:b4:25:b2:e7:23:4a:52:b9:39:4d:af:ef:dc:
                    6d:7e:02:dd:69:93:a1:93:ee:6f:6e:98:5d:69:be:
                    17:1a:e5:3c:16:f7:34:32:73:b3:38:8a:47:1d:7c:
                    bd:48:1a:53:07:4b:9d:8a:f3:34:62:16:1a:6f:1b:
                    49:29:43:6a:b4:46:87:63:bc:da:33:fa:f1:dd:53:
                    c3:1c:33:df:9e:24:2e:e4:df:8c:09:b2:26:a4:a8:
                    23:f4:8c:01:28:12:00:95:2d:1d:a2:96:0d:29:1b:
                    a0:89:72:cc:0e:1b:b6:ae:3c:de:ed:f9:ca:5a:b8:
                    26:2e:7e:f4:1a:31:d2:00:0f:a2:25:70:97:79:4f:
                    35:e3:6b:4d:e6:ed:1a:5f:33:d9:3d:ab:b1:a1:cb:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:36:63:D4:5E:94:EA:DB:CC:21:83:70:4A:00:7C:A6:3C:B6:A0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.6.0/24
                  64.52.96.0/22
                  66.35.0.0/20
                  69.55.208.0/20
                  72.21.10.0/23
                  107.191.236.0/22
                  137.83.56.0/24
                  137.83.80.0/23
                  162.33.232.0/21
                  162.43.200.0/21
                  192.75.144.0/24
                  192.152.0.0/24
                  198.179.52.0/22
                  204.194.220.0/23
                  205.174.152.0/22
                  206.166.252.0/23
                  207.32.192.0/20
                  208.52.160.0/24
                  208.52.175.0/24
                  209.237.136.0/22
                IPv6:
                  2001:506:38::/47
                  2605:21c0::/32
                  2607:f688::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:48:bc:91:e2:f0:c2:4b:08:cd:a9:0a:b0:2d:dc:34:b1:a8:
         4b:d9:95:f1:43:a1:dc:17:8d:82:64:34:ef:34:89:fe:a9:3b:
         59:1b:f6:9a:d0:60:26:43:68:fe:26:72:7b:7d:d6:eb:5b:87:
         f2:bf:59:df:0b:71:bf:c6:fb:91:ea:3b:3f:46:bc:8e:fd:ea:
         b1:39:2b:22:20:85:35:3c:f2:81:09:2b:ac:f3:f1:e1:a5:ef:
         a9:9b:95:8d:89:70:3d:ae:a9:a7:e5:36:8e:68:33:f5:3c:f3:
         85:d1:91:34:6b:82:31:89:74:09:32:23:8b:75:15:2e:cd:0c:
         c2:9a:9a:6c:b8:86:20:41:5c:f4:ad:00:b1:fa:4e:9e:66:20:
         50:a1:b5:5c:75:e7:3c:11:8e:29:00:e5:89:2d:e4:56:2e:80:
         a5:9c:3e:a1:1b:30:67:98:fb:b1:e7:fa:e1:7b:e1:91:d6:7a:
         69:0d:9a:91:73:2b:5e:d0:cd:98:92:af:3a:15:8a:dc:ad:c0:
         3f:25:46:ec:1a:50:01:7a:5d:12:e4:f2:d8:b8:e5:ee:bb:20:
         00:9d:49:e6:aa:13:05:54:b7:b7:fe:00:16:1e:b1:47:20:dc:
         ca:52:b3:27:06:ea:58:4d:58:39:e7:c0:a5:a0:65:18:34:b8:
         c0:fb:4f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:37 2024 by rpki-client on console-ams.rpki-client.org