Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa
File:                     f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa (raw, json)
Hash identifier:          KaUqge3xWbMMRrni2nkHYduoxx13nGsLo/+B21DwyjU=
Subject key identifier:   24:34:44:C4:FE:1A:19:AC:DF:A9:5F:B2:56:9A:39:84:9A:6E:37:72
Certificate issuer:       /CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
Certificate serial:       010D0C9F43285845CB3E4DB06964E2C7BD6BEA00
Authority key identifier: 07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     11105
IP address blocks:        142.58.0.0/16 maxlen: 16
                          204.239.18.0/24 maxlen: 24
                          199.60.18.0/24 maxlen: 24
                          199.60.16.0/23 maxlen: 23
                          199.60.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4d:b0:69:64:e2:c7:bd:6b:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=8f036b87-a7ae-4bf8-8829-f88c0700604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:d5:4a:de:1a:5a:a1:93:72:97:1f:c6:cd:
                    1f:78:3f:7c:40:14:5a:31:f9:28:2c:17:d8:2b:42:
                    1e:62:f9:c3:34:16:42:9e:ef:a4:27:bb:29:12:85:
                    f0:80:be:3d:13:6f:13:f6:27:1c:2d:70:d4:5b:5d:
                    a0:dd:63:27:98:5d:a0:f5:66:68:23:80:10:08:2e:
                    86:cc:0b:b4:76:e3:60:af:23:50:23:f9:84:49:ee:
                    20:04:5a:ee:14:38:3b:49:0f:ed:06:97:d8:49:28:
                    ed:eb:aa:d6:8d:d1:c1:76:04:cc:9e:23:7a:c4:2b:
                    b2:b9:f5:96:67:38:7e:4e:7b:7a:b8:03:5c:61:22:
                    97:56:3e:63:8c:73:04:50:d0:1d:e0:58:a0:4e:a3:
                    1c:53:f0:4a:43:57:5b:2d:0e:18:ad:45:3e:da:6b:
                    c0:b3:4d:36:d3:a8:4b:ca:2f:4a:6d:57:65:e5:10:
                    0b:bc:f6:bd:94:d8:93:11:29:0d:58:56:7b:15:56:
                    1e:76:0b:bb:19:ed:69:59:db:2a:71:9a:33:b6:69:
                    5d:a0:98:a3:74:da:83:a5:e5:49:88:03:04:2b:10:
                    40:b9:49:f9:38:e9:a0:41:58:5e:88:16:c5:34:9f:
                    f9:9f:92:20:48:16:09:d6:2c:5a:ab:af:2c:dd:b3:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:34:44:C4:FE:1A:19:AC:DF:A9:5F:B2:56:9A:39:84:9A:6E:37:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl

            X509v3 Authority Key Identifier:
                keyid:07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.58.0.0/16
                  199.60.0.0-199.60.18.255
                  204.239.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:36:b9:a5:b3:44:c0:34:b0:e3:a2:50:d0:77:d9:af:d7:b1:
         a1:f6:c2:42:50:d9:29:c0:18:4a:af:d5:e1:c7:62:8d:01:f9:
         1a:bb:49:31:ef:ad:5e:b2:b5:12:65:46:23:db:db:f2:e8:9a:
         c2:6f:ae:10:a7:9c:90:fd:20:d8:fd:08:76:c1:2b:f5:43:55:
         db:13:53:82:70:af:38:88:8a:2f:1a:39:41:50:07:2e:88:03:
         af:ec:35:e1:74:97:2a:62:68:3c:d2:3c:3f:ef:27:3c:86:29:
         c5:f7:1a:81:ff:23:35:bc:23:cf:0c:46:fa:ad:2c:59:50:8e:
         52:3a:ac:87:b9:48:fd:a4:ee:c8:4a:c7:e5:70:08:1a:ed:35:
         bb:d4:bc:54:e8:65:4d:f0:10:f8:7e:a0:f6:1d:68:7f:a1:34:
         31:9c:2e:12:00:0f:1e:79:b3:3a:88:ef:a9:56:3c:51:b0:bf:
         49:cb:23:58:1b:c4:ee:f9:53:c1:3a:f1:69:4e:5b:16:02:00:
         6b:89:ae:11:dc:9a:3c:88:be:e8:46:ad:f5:11:bc:69:de:56:
         22:fa:be:99:52:b4:b6:d3:76:1d:de:f1:c9:d9:23:d2:49:80:
         c3:bb:a8:14:75:e1:ad:95:e9:a4:fa:a6:76:8a:15:bb:6d:42:
         19:2d:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 21:45:50 2024 by rpki-client on console-fra.rpki-client.org