Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa
File:                     c975af3b-1769-381f-b596-ba7b61e7fce8.roa (raw, json)
Hash identifier:          /WFWKP0+stvHvcmDIBCXlZu7R12/ygTXLPyfrw07ucA=
Subject key identifier:   50:BE:7A:CF:9B:1B:D6:33:FA:70:E0:A3:F2:0C:19:44:05:61:80:28
Certificate issuer:       /CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba
Certificate serial:       010D0C9F432858453747FC9CBDF81831F94C1400
Authority key identifier: 92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     20257
IP address blocks:        74.222.112.0/20 maxlen: 24
                          158.115.160.0/19 maxlen: 24
                          74.222.96.0/20 maxlen: 24
                          173.233.112.0/20 maxlen: 24
                          216.218.64.0/18 maxlen: 24
                          69.80.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:47:fc:9c:bd:f8:18:31:f9:4c:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=baa53fe0-bbfa-4bd9-9c06-6d749bffa0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:b6:6d:02:23:f3:c0:58:9e:14:56:4b:a4:
                    af:85:7f:85:5e:64:c4:00:5e:9e:1e:e7:f6:64:9b:
                    f4:64:78:79:61:fb:56:72:c6:dd:30:72:2b:55:9b:
                    a8:5b:50:8a:85:f6:97:96:85:2c:6a:bf:35:bc:80:
                    79:34:f8:23:74:7f:4e:37:92:b0:40:0b:e1:b1:20:
                    6f:c8:11:3d:2d:bd:d2:bb:a2:df:c2:fb:3c:0c:9f:
                    b7:2f:0a:9f:86:49:9a:ee:95:42:9d:e2:32:b1:81:
                    4a:7f:ec:c1:7f:12:a0:0f:56:0c:04:ae:f8:1b:5b:
                    ab:72:e3:49:b2:ac:44:29:09:bb:65:1c:65:da:c9:
                    c5:1f:49:3d:8a:32:fa:db:8d:36:47:29:e2:cc:60:
                    85:79:d8:cd:20:69:6d:88:e4:76:fe:ee:6d:af:cb:
                    44:25:a5:bb:0d:9e:25:0f:f9:77:4c:ac:63:03:99:
                    4d:a3:8f:c0:d0:a0:3c:1a:4d:bd:de:2e:f0:46:58:
                    c3:66:2c:c8:20:1a:81:c2:2e:fc:bd:e4:1c:bb:d4:
                    e1:96:7b:af:75:e6:e7:11:f2:18:a6:8b:ea:cc:e8:
                    a0:4f:1e:fd:66:cf:84:14:7a:be:01:91:bf:cd:93:
                    02:d7:5f:e8:d8:3a:d3:e8:b1:44:0e:72:3b:a1:fb:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:7A:CF:9B:1B:D6:33:FA:70:E0:A3:F2:0C:19:44:05:61:80:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl

            X509v3 Authority Key Identifier:
                keyid:92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.80.0/20
                  74.222.96.0/19
                  158.115.160.0/19
                  173.233.112.0/20
                  216.218.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:27:9a:c0:e0:16:aa:5a:ff:e4:b8:a2:b0:51:8e:51:44:47:
         cd:b9:b4:cf:94:01:39:a6:0a:63:13:8e:d6:97:57:3f:7b:05:
         57:8c:23:61:c4:2c:ad:ac:b9:74:90:1e:17:ce:4c:3b:f2:a1:
         db:18:d8:40:0b:0d:5a:a5:c0:3b:a0:1d:2e:6c:7d:17:63:c0:
         0a:06:90:63:c7:9a:b6:98:d4:60:f5:1a:4e:2f:a6:0f:80:11:
         97:95:35:97:54:6c:7a:0e:7f:6c:36:c9:18:77:0f:6c:5f:74:
         0e:a6:c0:86:23:6e:f5:02:a4:1e:0c:63:58:ed:f9:e8:76:37:
         ce:22:61:7f:cb:bd:7e:46:ea:d4:1f:75:8d:ec:ed:a4:a4:30:
         b4:cb:f6:ca:f3:73:a6:ec:71:af:b2:62:92:3e:4e:9d:5f:81:
         6b:91:5d:f5:f1:2d:43:21:d2:06:a0:47:a5:6c:b7:3f:6d:43:
         af:e9:71:21:a5:de:54:cc:9f:1b:00:9f:b4:80:3b:90:29:41:
         2a:a6:50:57:67:51:00:38:a5:f2:ca:ec:81:19:c5:97:b6:6c:
         fc:d9:33:bb:e4:19:47:79:64:a5:71:76:a0:39:b1:27:b2:a9:
         a3:83:83:98:61:f3:2a:23:0e:9f:c1:0a:d4:9f:c0:3f:ab:e6:
         b5:f0:1f:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 17 16:16:24 2024 by rpki-client on console-fra.rpki-client.org