Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
File:                     2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json)
Hash identifier:          HloXfpPRO0voLUjUSLncKcerybCSev8JcdE+PRdK/Ks=
Subject key identifier:   50:45:B5:AD:1B:5D:3C:6B:FA:AD:AB:BC:78:23:3D:08:8E:60:12:28
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F43285845CB3E51CD312FFCDFB7C94C00
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     803
IP address blocks:        162.253.8.0/22 maxlen: 22
                          104.219.8.0/22 maxlen: 22
                          104.255.48.0/22 maxlen: 22
                          108.160.16.0/20 maxlen: 20
                          108.174.160.0/20 maxlen: 20
                          104.152.28.0/22 maxlen: 22
                          216.174.128.0/19 maxlen: 19
                          108.60.160.0/19 maxlen: 19
                          199.189.88.0/21 maxlen: 21
                          206.163.224.0/19 maxlen: 19
                          207.47.128.0/17 maxlen: 17
                          216.126.200.0/22 maxlen: 22
                          192.34.224.0/21 maxlen: 21
                          198.245.112.0/20 maxlen: 20
                          199.26.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:51:cd:31:2f:fc:df:b7:c9:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=b8104fbb-a9b4-4167-8995-5bc03306a640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:9b:7a:d2:59:67:11:b7:1a:9c:56:3b:21:
                    03:bb:c1:8b:e8:94:8e:75:4a:55:3f:31:18:27:44:
                    ab:5a:82:69:8e:4e:b3:b9:80:e5:06:21:19:51:11:
                    47:55:be:49:b6:18:7b:a4:63:30:6b:a7:a2:f8:94:
                    f1:fd:35:ab:cd:da:8e:e8:01:a9:e5:ba:af:a3:d3:
                    1b:50:ef:bc:29:ed:06:31:07:be:8c:58:e4:de:a2:
                    89:ac:c5:2f:7b:01:76:9c:42:ab:ee:fb:79:55:6b:
                    a3:2f:f0:52:42:9f:a3:83:a1:a1:21:2d:9f:2e:05:
                    ac:3e:f8:e8:b3:f1:8e:94:b5:db:7f:0d:36:e8:92:
                    c3:4b:f1:87:24:44:19:9b:91:f7:35:c1:80:43:80:
                    b6:ff:a4:e6:62:9a:c7:d7:74:d4:be:9a:18:88:40:
                    f9:8f:81:6e:da:f0:b4:0d:88:e7:b9:da:98:82:81:
                    40:8e:64:a8:4f:6b:47:0a:40:7a:da:c8:f3:dd:8a:
                    59:36:6f:8d:c8:4e:2b:97:b8:71:49:36:26:8e:99:
                    49:71:df:a4:b1:c8:33:bb:17:29:37:31:4d:cb:85:
                    07:df:18:55:05:bf:c8:6a:74:d5:a4:11:09:60:c8:
                    d3:c9:41:b7:52:2a:bd:88:6c:72:8d:e4:c5:7f:58:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:B5:AD:1B:5D:3C:6B:FA:AD:AB:BC:78:23:3D:08:8E:60:12:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.28.0/22
                  104.219.8.0/22
                  104.255.48.0/22
                  108.60.160.0/19
                  108.160.16.0/20
                  108.174.160.0/20
                  162.253.8.0/22
                  192.34.224.0/21
                  198.245.112.0/20
                  199.26.190.0/23
                  199.189.88.0/21
                  206.163.224.0/19
                  207.47.128.0/17
                  216.126.200.0/22
                  216.174.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:21:43:55:41:8c:87:ea:a5:46:4a:f8:47:7d:69:0d:dd:f6:
         77:7a:2e:1d:02:34:cb:7d:d8:74:8f:62:9d:90:52:df:a2:52:
         54:0a:2a:22:22:14:15:0e:93:e9:19:e0:06:a6:46:cb:20:56:
         05:67:a4:f6:1b:c4:35:91:d1:76:98:96:5c:3e:8f:c8:4d:f7:
         68:64:cc:e2:75:8b:68:96:de:7b:6a:65:f1:d8:d3:84:7e:00:
         66:53:32:40:64:c3:2d:6a:ae:dc:26:24:1d:03:48:f2:a8:d8:
         f3:c9:1a:b0:c5:bf:66:f1:fe:0a:3f:ce:08:06:3c:35:62:67:
         24:8f:60:e0:10:ae:62:0d:3a:f4:9d:c1:3b:8c:25:71:36:08:
         9a:2f:49:3e:e2:e5:55:10:fe:82:b0:5e:9f:77:00:a6:91:5c:
         37:a5:84:2b:c9:50:07:ec:83:22:5e:e2:55:74:50:41:63:9f:
         73:eb:2b:ae:11:c7:35:5f:93:8d:3e:90:d4:9b:ed:25:d1:7d:
         46:07:ba:cf:b1:8d:f9:29:0a:02:c8:de:87:e1:c4:18:78:71:
         a5:3b:82:c4:53:c3:3a:e9:8c:04:c6:3b:b3:43:4e:ae:3f:7b:
         5e:cc:11:10:4d:a9:bc:43:e2:cd:24:59:0b:a5:1e:ea:be:e0:
         01:8f:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:16:54 2024 by rpki-client on console-ams.rpki-client.org