Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
File:                     f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (raw, json)
Hash identifier:          uXUYMfHGdDnVeIp3GZPed3Gi4U5IBGKGlYwQSh+c3IM=
Subject key identifier:   09:B6:DE:5C:58:B0:D8:FE:13:97:0D:59:CC:98:6E:6E:EC:41:EF:FD
Certificate issuer:       /CN=de111c10-2de5-41fa-a9e4-1e49a0479199
Certificate serial:       010D0C9F43285845E7291BE0EF767F00694783C0
Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     26793
IP address blocks:        69.5.128.0/19 maxlen: 24
                          162.216.76.0/22 maxlen: 24
                          173.240.192.0/20 maxlen: 24
                          205.237.160.0/19 maxlen: 24
                          206.127.176.0/20 maxlen: 24
                          2604:2800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:1b:e0:ef:76:7f:00:69:47:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=0d2a8e64-6612-4080-8775-a57743c2acf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:55:28:60:30:08:a0:f4:db:39:31:22:7b:
                    44:c4:47:91:f8:dc:fc:77:3d:cc:0d:38:f4:b6:1d:
                    a0:89:6c:39:02:79:3c:f2:f8:a9:c3:b9:85:11:6b:
                    70:67:94:62:42:f6:72:bd:a9:b2:82:5d:ce:e0:29:
                    c4:86:fb:23:b6:b6:53:f7:79:5a:2a:3a:90:7e:ea:
                    19:14:ab:11:99:8e:a4:f8:da:a9:8a:2d:f1:8f:eb:
                    a2:a5:f3:21:0d:39:b2:fa:e6:54:1a:b2:37:1d:aa:
                    0f:4a:f4:bd:bf:c5:55:0e:06:b9:82:e8:07:da:2f:
                    09:35:c0:91:a5:57:f5:3a:2f:52:62:63:73:24:4f:
                    bf:79:60:d3:d5:bb:50:94:54:30:2a:dd:fc:18:3a:
                    bd:75:03:2d:1a:dd:62:67:e2:9a:72:40:eb:62:c0:
                    b9:56:e1:8b:58:fc:bf:05:3a:c9:c6:dd:6b:90:f7:
                    6f:1e:e7:d5:47:f3:78:54:c3:9b:ef:83:cc:04:93:
                    f2:eb:bb:44:f5:af:f2:58:1f:79:b0:86:0c:e8:22:
                    0e:98:34:c7:34:fc:13:fc:cc:9f:2c:f4:1b:d0:cc:
                    b0:38:77:97:ee:4d:08:34:b3:e5:22:36:1a:5a:b4:
                    32:26:75:46:43:b5:79:b1:ec:ab:82:e9:e6:60:6c:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:DE:5C:58:B0:D8:FE:13:97:0D:59:CC:98:6E:6E:EC:41:EF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl

            X509v3 Authority Key Identifier:
                keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.5.128.0/19
                  162.216.76.0/22
                  173.240.192.0/20
                  205.237.160.0/19
                  206.127.176.0/20
                IPv6:
                  2604:2800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:40:77:7f:98:29:f2:b3:f8:ca:3c:b0:1c:1e:24:9e:7f:a3:
         86:85:09:b2:f0:1b:8b:dc:5b:97:84:07:38:f2:d4:f7:c6:f1:
         aa:74:83:22:41:92:e1:51:1a:01:58:64:a7:a5:b2:b3:fa:f1:
         2d:b1:71:ed:52:4e:38:f1:18:b7:0c:67:e4:d5:30:3c:58:b6:
         c5:10:c1:86:6a:86:e0:1c:87:11:d4:a8:3d:4c:20:c6:20:a3:
         d5:e0:4f:9f:9b:2d:3a:32:17:bc:67:1e:46:02:36:46:a6:a2:
         44:69:ed:84:07:12:b8:a2:68:51:5c:39:bc:cc:19:74:a5:4b:
         40:14:17:7f:bb:ab:e6:01:dc:3e:78:ad:1e:72:d3:f2:39:bb:
         b6:4b:00:7b:5d:64:92:27:12:f7:9c:16:44:27:55:0d:56:fa:
         1f:97:fe:fd:5f:3a:39:5a:42:63:34:f5:48:23:7d:be:d5:b3:
         eb:19:83:28:19:61:2a:2f:9a:22:72:51:64:9b:77:01:bf:18:
         0f:f3:4a:cc:96:58:07:54:21:b1:54:22:57:8c:3a:9a:6e:2a:
         7a:60:7e:06:fe:24:b1:8b:24:ec:49:34:a2:8b:f0:42:0b:5b:
         2c:fc:c4:3c:c3:ae:41:ac:b3:33:3c:03:23:fe:04:6d:04:ac:
         5e:99:b9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 07:21:42 2024 by rpki-client on console-ams.rpki-client.org