Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa
File:                     05d53889-8629-3f75-b779-6895e4c540d0.roa (raw, json)
Hash identifier:          XyoI6XEsP9CtDqx2YojGief04SmX+dQRQcasDDsn42A=
Subject key identifier:   42:C1:65:C9:57:7C:1A:E1:E6:2F:B5:60:D8:81:45:BA:AC:22:92:33
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584589A32038FD3D727CA2A23B00
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     32329
IP address blocks:        199.241.200.0/22 maxlen: 24
                          199.230.10.0/23 maxlen: 24
                          199.188.192.0/22 maxlen: 24
                          199.116.72.0/22 maxlen: 24
                          199.83.220.0/22 maxlen: 24
                          192.195.80.0/22 maxlen: 24
                          162.217.72.0/22 maxlen: 24
                          176.108.136.0/21 maxlen: 24
                          162.245.20.0/22 maxlen: 24
                          208.90.212.0/22 maxlen: 24
                          104.244.24.0/22 maxlen: 24
                          52.119.112.0/20 maxlen: 24
                          148.64.96.0/20 maxlen: 24
                          104.193.168.0/22 maxlen: 24
                          208.69.40.0/22 maxlen: 24
                          158.247.68.0/22 maxlen: 24
                          207.53.252.0/22 maxlen: 24
                          2607:f598::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:20:38:fd:3d:72:7c:a2:a2:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=ab26c6d8-5b55-47d3-b8b2-a7bb9cc96580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:97:b6:f6:55:32:dc:e3:c8:15:c6:eb:9f:
                    11:f0:56:cd:07:24:26:da:16:40:ac:fe:be:70:8a:
                    8e:e1:d4:94:20:19:f5:fe:74:da:75:98:6f:95:86:
                    69:29:7d:c1:2a:69:64:09:c0:4a:1d:5f:87:e9:9b:
                    54:75:fc:32:08:16:0c:c1:10:fb:68:c1:5a:2a:77:
                    06:52:57:3f:7f:02:45:9d:be:b8:83:c1:3d:d8:42:
                    2f:76:0b:f0:58:18:03:8e:e0:08:6a:47:4c:21:f3:
                    5c:dc:b6:31:f2:cb:e8:60:cb:ff:48:60:44:2c:7a:
                    11:95:30:e5:95:a7:a9:f2:cc:10:81:95:b4:89:0b:
                    de:5f:e7:39:24:60:40:3f:1f:a0:a8:3d:51:d9:46:
                    8f:74:fb:69:f8:90:f8:87:13:f0:1f:20:80:92:3d:
                    8d:2e:31:9c:88:e8:44:39:8a:27:ae:e0:21:6b:fd:
                    e7:88:37:90:fe:8a:d3:81:15:3a:56:f7:60:af:8c:
                    7a:d9:64:d7:2e:5b:ac:c1:4f:cf:96:cc:bf:40:c5:
                    3d:57:b8:3a:7e:12:9f:17:08:dc:1b:bc:6a:77:e5:
                    09:21:3e:86:fe:cb:83:9a:53:7b:6b:d8:c2:c4:fc:
                    bf:e8:ef:bc:5d:c2:5e:a8:4a:66:ae:97:87:fb:37:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:65:C9:57:7C:1A:E1:E6:2F:B5:60:D8:81:45:BA:AC:22:92:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.112.0/20
                  104.193.168.0/22
                  104.244.24.0/22
                  148.64.96.0/20
                  158.247.68.0/22
                  162.217.72.0/22
                  162.245.20.0/22
                  176.108.136.0/21
                  192.195.80.0/22
                  199.83.220.0/22
                  199.116.72.0/22
                  199.188.192.0/22
                  199.230.10.0/23
                  199.241.200.0/22
                  207.53.252.0/22
                  208.69.40.0/22
                  208.90.212.0/22
                IPv6:
                  2607:f598::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:9d:ce:f8:30:d7:5c:12:f9:24:90:a8:fe:c5:a1:ea:5a:
         74:83:ad:08:45:99:03:e7:e3:53:17:c4:1a:66:d8:20:da:f2:
         2a:09:d2:f5:59:f2:a7:31:e3:75:dc:41:e2:2b:99:e3:ef:32:
         81:7a:f7:aa:90:0d:04:65:cf:cf:05:96:3d:4d:fb:db:f8:07:
         94:e8:4d:df:83:22:e7:41:37:8b:cd:28:f6:70:3b:ef:c3:94:
         a5:2f:d6:53:ff:98:06:ba:0a:20:48:4d:02:cb:bc:4e:a3:5a:
         c5:5c:bf:d9:fb:b1:a4:83:e1:c1:f7:5b:bf:ed:48:37:38:82:
         30:ef:f3:3c:7a:25:96:7e:9f:c0:ad:94:c9:9b:8c:42:d6:f2:
         ee:88:8d:95:8f:d0:20:5a:62:e9:99:aa:64:d7:4b:a2:2d:9d:
         0f:14:e4:13:ab:5c:a7:6a:81:55:67:9c:dc:fa:19:7f:1a:bb:
         12:87:2b:c0:c3:48:83:ce:20:0b:23:d6:7f:27:16:bf:9b:95:
         64:b1:ec:48:a4:fe:26:04:56:81:e4:5e:77:90:91:68:22:f0:
         ed:1f:db:bc:aa:e4:70:c8:ee:51:ec:b4:d5:32:a5:1e:49:ce:
         f4:c4:5c:ef:a4:88:fd:90:f4:d3:34:d8:77:83:c4:6d:8f:85:
         32:86:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:56:16 2024 by rpki-client on console-fra.rpki-client.org