Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
File:                     879a586a-5dbd-3989-ac66-822d1f92f8f6.roa (raw, json)
Hash identifier:          wYAith77qUy5/mZ8NFwk1WCYNTwaRkLF+rC/UPLLafY=
Subject key identifier:   94:E5:49:0B:31:64:B2:65:37:DB:C6:B9:84:5A:D1:E9:9A:14:4B:13
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F432858456C531DF60CE22EA508A34700
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        142.202.39.0/24 maxlen: 24
                          142.202.36.0/24 maxlen: 24
                          142.202.37.0/24 maxlen: 24
                          142.202.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1d:f6:0c:e2:2e:a5:08:a3:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=f869af50-5bc8-4fa7-a7a8-d5c3b68af19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:50:16:3a:86:ac:d0:fd:4a:68:b6:c7:50:
                    33:72:01:d0:e1:f9:5a:75:e9:7e:46:a3:77:f8:a0:
                    e8:af:1d:a3:e2:14:40:35:36:03:d4:c4:c9:64:48:
                    c8:9d:44:fc:b5:de:ba:92:03:96:63:3e:ab:df:77:
                    bd:7d:35:63:6b:76:1b:c0:71:51:31:6c:e2:b9:fe:
                    bc:e2:af:5b:5e:46:da:1c:76:c6:ae:a2:3c:ff:04:
                    54:6b:53:05:3e:12:52:26:5e:78:c0:44:19:67:6b:
                    a4:e6:c2:d1:6a:78:57:fc:38:6c:29:0c:93:f9:2e:
                    38:56:57:4a:fc:1e:19:f7:c6:e9:a7:8f:4f:56:0b:
                    1e:38:d9:e8:e6:02:57:80:fd:8c:a3:64:4e:58:3c:
                    c1:2e:b2:3d:14:5e:63:a6:ad:91:1e:4a:a9:c1:c2:
                    99:7c:94:01:79:19:d1:45:1e:ed:bb:69:be:09:64:
                    0d:19:62:ed:bb:57:ad:bc:cd:f5:10:d3:4d:47:44:
                    51:77:12:4f:93:ab:6f:2e:c0:1b:65:3d:9c:f4:53:
                    31:09:92:4d:16:a8:34:57:2d:c9:62:c5:ce:1b:96:
                    ea:08:95:52:11:e7:3b:e8:56:29:9b:c3:97:db:d3:
                    17:f0:1b:83:7b:2a:c6:59:6c:50:22:5d:60:d3:a3:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:49:0B:31:64:B2:65:37:DB:C6:B9:84:5A:D1:E9:9A:14:4B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:c3:38:78:29:32:64:85:6c:da:9c:71:53:f9:f8:78:56:
         c0:78:8d:27:27:41:03:12:26:82:44:b2:17:10:40:f3:fb:da:
         98:84:68:e5:5b:ee:6c:cc:ce:ac:bb:81:d0:32:8a:55:43:9b:
         2a:8a:b1:82:fd:d8:2d:a8:09:f7:86:ad:3c:85:3f:21:53:ea:
         c8:17:3a:30:11:f2:6e:09:af:ff:71:ab:f2:65:a1:ee:96:16:
         a4:85:af:bf:83:60:22:70:ec:91:52:7c:ba:6c:71:6b:12:62:
         bf:e0:51:92:d9:df:05:64:ef:0e:0d:99:0f:e7:c9:fd:f3:fa:
         52:01:21:fb:2f:cb:c0:55:bf:d7:65:ca:18:57:bb:bf:4b:c6:
         e0:8c:0d:ba:81:96:a3:c5:f0:1a:58:2b:9e:90:d7:62:b0:90:
         bc:ad:e1:27:3c:59:84:49:cb:05:96:6e:b1:b4:94:8d:8e:fe:
         35:a8:8c:8f:17:ee:4e:f4:ae:27:37:47:28:75:60:41:e8:cf:
         0d:bd:13:4e:b1:29:f9:39:3a:cc:f7:19:9e:89:8d:9d:3f:ae:
         94:1f:97:15:18:26:67:50:85:f9:19:21:a2:94:ce:be:bd:53:
         6e:7d:79:b9:06:ec:0d:a0:77:fd:ac:a9:64:9c:be:c0:80:48:
         62:fd:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:57 2024 by rpki-client on console-fra.rpki-client.org