Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
File:                     43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa (raw, json)
Hash identifier:          9GI5cY24T091SoX+hFGLeALhffNXGfIscfOgCRZloK4=
Subject key identifier:   2F:E7:22:D7:67:26:C3:5E:00:12:C9:41:BA:41:A0:D1:F9:A8:F3:42
Certificate issuer:       /CN=62612914-d3c8-454d-861f-ea1fa94cf858
Certificate serial:       010D0C9F43285844C4EFB75BEE979A15B75CC8A0
Authority key identifier: D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
Signing time:             Sat 03 Feb 2024 14:00:30 +0000
ROA not before:           Sat 03 Feb 2024 14:00:30 +0000
ROA not after:            Fri 03 May 2024 13:00:30 +0000
asID:                     398542
IP address blocks:        23.129.82.0/24 maxlen: 24
                          158.51.128.0/22 maxlen: 24
                          134.195.108.0/22 maxlen: 24
                          207.90.220.0/22 maxlen: 24
                          2605:e140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c4:ef:b7:5b:ee:97:9a:15:b7:5c:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62612914-d3c8-454d-861f-ea1fa94cf858
        Validity
            Not Before: Feb  3 14:00:30 2024 GMT
            Not After : May  3 13:00:30 2024 GMT
        Subject: CN=946a3091-4ccd-464c-9b3d-a09c0218bbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:b9:a2:31:41:ba:33:31:0a:e4:4e:52:7a:
                    6a:83:3f:d1:6b:51:99:a4:af:54:66:ae:53:82:96:
                    01:3e:7d:dc:2f:f8:65:b3:5c:21:7c:61:64:8f:d7:
                    b5:b0:ac:ff:dd:49:9e:e9:39:5a:ee:71:39:7e:88:
                    27:6e:21:34:74:b7:5d:cd:91:7f:05:5a:2a:66:e7:
                    10:31:cf:eb:fe:c2:87:f9:fd:48:9d:74:2a:5f:86:
                    97:1d:c1:da:63:59:13:ec:79:d1:d4:19:76:5c:ab:
                    61:93:6f:27:1f:82:c0:1f:1f:17:7c:0b:9d:7a:ce:
                    f1:22:ca:82:70:f5:fc:bf:f1:40:32:1d:22:91:9f:
                    c6:3d:81:27:01:71:7b:03:e8:f6:ea:f9:7b:f1:7c:
                    b5:66:38:ab:fb:f5:66:19:c8:26:c4:db:46:87:73:
                    c2:db:d9:34:9f:37:4e:4c:ba:c3:f1:66:cf:76:60:
                    d1:c2:49:1a:84:ee:35:36:d6:6e:85:43:bc:57:e7:
                    74:d8:e1:b9:1f:fb:7a:73:16:3c:f2:25:ac:ff:49:
                    ad:53:02:d9:ef:de:e8:ae:b4:6b:76:0b:d1:cf:5a:
                    f4:25:a5:a8:2e:70:1f:2e:f6:e0:29:42:7c:11:46:
                    c4:71:99:f2:fb:16:2e:e1:3d:9b:2c:3e:13:21:58:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:22:D7:67:26:C3:5E:00:12:C9:41:BA:41:A0:D1:F9:A8:F3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.82.0/24
                  134.195.108.0/22
                  158.51.128.0/22
                  207.90.220.0/22
                IPv6:
                  2605:e140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:dc:72:a7:1e:ed:ca:e2:1c:b9:5f:57:ff:c3:08:f3:a7:71:
         7a:6e:c8:33:ae:df:66:d7:14:ac:93:d3:ef:6e:67:32:6c:a0:
         2e:0f:d9:8f:d4:1e:b6:40:b2:01:69:86:c1:03:e1:ef:84:78:
         a0:47:e6:8c:3a:ed:38:12:98:f6:e0:92:3a:ae:9b:6f:e4:af:
         6b:6a:28:de:15:45:33:cf:75:3a:07:ed:46:e7:02:30:70:42:
         67:b2:58:ad:92:90:62:a3:73:46:68:0c:9e:24:71:d4:28:c3:
         97:8f:22:d2:03:2e:f1:42:d6:f7:49:77:24:d2:36:9f:f7:ed:
         ed:92:74:a0:45:67:eb:de:11:e2:48:59:f3:47:30:c0:68:df:
         9d:76:83:46:e7:d0:f8:f8:7b:19:15:c8:de:fa:95:50:41:a4:
         e8:f4:ea:ed:b5:c1:53:58:1e:6c:99:42:28:07:68:aa:44:d0:
         a7:63:31:2f:ec:ec:be:2f:8e:20:af:73:ca:16:42:f7:d0:71:
         de:57:07:23:dc:b5:87:d2:fa:dc:25:2a:e5:bb:7a:34:ee:43:
         45:30:03:f1:1d:c5:fd:d5:07:fe:e7:06:b5:6f:ac:50:3d:43:
         13:0d:9f:14:86:ad:44:99:4c:db:2e:cd:de:80:36:37:39:20:
         67:00:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:22:46 2024 by rpki-client on console-ams.rpki-client.org