Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
File:                     b5e19845-18ec-3998-b3f9-d75ca70625ef.roa (raw, json)
Hash identifier:          bUnq9EWwiVegZsmhJMatAYWnwH2LencjHfr0sDMYPEU=
Subject key identifier:   D4:CD:CF:8B:6C:FC:B9:C7:AB:71:35:80:EE:69:B4:52:5C:38:70:A9
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F432858457A4875A74EE043C769510DEE
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     6939
IP address blocks:        158.51.60.0/22 maxlen: 24
                          208.80.4.0/22 maxlen: 24
                          74.114.88.0/22 maxlen: 24
                          2604:4f00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:75:a7:4e:e0:43:c7:69:51:0d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=2e812941-d433-4041-b9e1-40117e764afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:49:2c:1c:14:b8:ff:a0:0b:0d:ca:4b:dc:
                    64:ae:63:74:2b:b0:38:06:28:7d:89:1e:28:2d:cc:
                    96:e1:c8:12:e5:42:84:88:a4:9e:05:da:91:93:80:
                    a5:eb:4c:e2:df:e8:4b:c0:cf:01:83:08:c4:cd:f2:
                    29:e5:64:a0:14:39:d6:c4:92:95:af:86:1e:26:15:
                    37:ca:4e:41:bc:aa:8e:d9:06:52:6f:dc:2e:dd:4e:
                    b8:69:94:3f:31:61:1f:38:f8:bb:78:6c:0b:c9:ab:
                    a9:d9:55:16:6d:95:ca:9f:c0:79:79:9c:67:8f:db:
                    6b:cb:6c:0e:ef:f3:6b:cf:54:1e:44:f6:7f:0d:82:
                    42:b0:93:2a:1b:d3:b0:74:05:2f:17:c1:9d:14:71:
                    e2:8d:71:44:60:0f:e7:df:4a:59:7f:88:8d:e7:5b:
                    fd:43:99:0b:90:4a:84:cd:af:71:ed:6c:0e:2c:68:
                    ce:90:21:72:b2:bb:7a:d7:c1:cf:26:4e:68:18:ea:
                    24:63:33:f6:8b:e1:4a:06:08:75:4d:76:05:cd:60:
                    c1:64:6f:1f:b4:68:d1:4a:74:3a:44:dd:b6:40:e5:
                    ef:55:5b:d5:08:4a:ca:11:5c:23:23:53:1b:b0:51:
                    2b:f1:ea:fe:7c:fe:9c:a4:04:a1:9f:36:80:16:0e:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CD:CF:8B:6C:FC:B9:C7:AB:71:35:80:EE:69:B4:52:5C:38:70:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.88.0/22
                  158.51.60.0/22
                  208.80.4.0/22
                IPv6:
                  2604:4f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:73:b7:56:cb:2b:f1:0d:46:fb:a1:a7:10:56:27:85:72:
         08:8d:10:a2:d6:2e:52:42:e8:0d:f5:8d:e4:76:58:dc:fe:f4:
         b5:9f:b1:27:20:41:98:f8:c8:8f:4c:09:5b:8f:15:89:dd:44:
         18:f3:1e:9f:49:09:bd:84:84:f1:72:df:ad:17:91:ab:c9:d2:
         55:f0:f0:d3:5c:b0:fe:3a:7b:8b:91:35:70:14:e3:91:3e:8e:
         fe:87:0c:7b:b0:b7:65:08:52:12:f9:28:70:9a:b8:1a:d9:8e:
         43:eb:e3:36:4d:87:6c:bc:f9:40:1c:35:5f:17:ba:ee:a8:48:
         df:8a:c4:26:4e:8e:75:5d:56:62:e5:1a:97:b1:13:64:c4:24:
         30:9e:6b:30:2e:38:7f:e0:c8:a2:af:07:25:de:07:0d:67:c1:
         d9:e3:11:4c:a7:7c:fd:5f:3d:91:97:83:6e:49:66:62:be:ea:
         0c:ea:81:81:5b:b1:8d:b6:04:2e:1e:6e:4e:3c:0a:19:27:c9:
         93:40:11:ed:03:ee:bd:7e:d6:ac:ac:83:6a:0f:8d:cc:7a:0f:
         d6:76:bb:5c:90:a9:8e:86:53:b3:84:71:f4:c9:95:f9:7e:00:
         ae:64:70:44:ea:ce:da:4f:f2:2b:64:40:08:7d:d5:1b:94:e1:
         f2:98:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:43 2024 by rpki-client on console-fra.rpki-client.org