Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa
File:                     d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa (raw, json)
Hash identifier:          Co1G+0BHnVCIzhnLffNunK/sQ17a/7vCaY376BOHpXM=
Subject key identifier:   76:38:9A:31:D7:03:DF:84:CF:ED:3B:0B:80:4E:6F:4C:FE:06:2C:5D
Certificate issuer:       /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial:       010D0C9F432858456C530F0EBEADF1620CD51380
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        139.60.200.0/21 maxlen: 32
                          136.228.0.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0f:0e:be:ad:f1:62:0c:d5:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=6f2ecc8c-eeaf-44ab-88a7-93dd1b301598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:1f:d3:a1:53:5a:67:da:29:d8:ef:a6:51:
                    c7:6b:9d:96:bb:03:be:61:dd:4a:b2:63:5f:20:b2:
                    f8:6f:b6:30:ec:0d:7c:a6:16:37:83:6e:6e:d6:c1:
                    10:94:b3:5a:17:be:56:08:59:74:04:ee:f6:65:7a:
                    61:41:9a:29:df:40:92:3b:4f:4a:9a:56:a7:24:e3:
                    ef:9f:30:fc:c2:11:bb:2c:84:e3:21:73:8f:8f:eb:
                    af:5a:97:ff:e6:58:99:7d:a0:29:ac:6b:05:95:45:
                    e8:52:78:7d:2a:f6:63:0b:f6:cd:45:39:cb:ad:f1:
                    b2:13:7a:fb:ae:07:b2:18:ff:e1:d6:6a:d1:14:05:
                    fa:4a:54:f3:e1:89:ed:13:85:b9:dc:d8:08:be:c6:
                    e2:8a:57:8e:26:58:4b:56:b2:c1:eb:04:63:93:92:
                    8f:62:af:98:a5:11:10:3b:e1:35:75:ce:9f:aa:01:
                    38:32:66:ac:15:58:6a:58:d8:8f:e7:96:8b:33:e6:
                    01:11:08:5c:ca:b4:77:c9:c4:2c:d3:ff:d7:3f:bf:
                    f7:9e:2c:11:ef:bc:ff:7f:a8:03:5d:f1:47:57:21:
                    d0:e6:3b:e9:bb:b4:21:22:bd:c2:6a:f5:f8:80:ee:
                    ba:2f:db:2d:a8:a3:32:8e:cc:94:7e:a4:0b:73:02:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:38:9A:31:D7:03:DF:84:CF:ED:3B:0B:80:4E:6F:4C:FE:06:2C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.0.0/19
                  139.60.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:88:63:6c:db:b9:94:7f:3e:11:2b:6a:ef:0f:f7:7c:14:
         31:24:a6:fc:df:9f:77:68:26:ab:ed:db:38:f6:27:d8:15:4f:
         fa:bf:61:ba:2a:8a:61:8b:d0:82:22:3a:fd:85:6c:a5:21:cb:
         ac:80:0e:dd:44:df:27:a0:a4:f3:e6:89:f6:f4:d5:9b:d8:26:
         1a:8b:3e:2b:dd:97:36:5f:23:8c:21:aa:e7:3a:13:06:9d:6a:
         36:8c:d0:50:9f:3b:f4:be:0f:83:62:e8:58:80:4e:62:6b:76:
         77:c0:5f:f5:08:84:1c:92:30:e8:3b:f6:f7:6b:f3:51:47:e3:
         34:b7:bc:9b:63:93:1e:7a:91:1e:64:96:66:b1:51:37:d2:2a:
         1c:d6:9c:70:54:f5:62:4a:7d:52:1f:4e:68:17:2a:e2:85:78:
         40:91:39:1a:e4:4c:74:32:67:dd:f6:7a:b5:9f:d0:4b:34:5c:
         39:53:96:7d:8b:5b:44:e1:5f:18:e3:dc:f3:29:f4:bf:21:39:
         42:17:44:ef:2e:ef:69:de:51:6a:36:fb:1e:d5:df:8a:96:cf:
         ee:ba:f8:86:db:cb:64:92:b2:12:c3:a1:84:eb:a7:12:4e:89:
         53:e2:82:b1:c7:a6:dd:b2:41:5d:1a:86:46:9e:79:df:16:76:
         d7:7d:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:54:25 2024 by rpki-client on console-ams.rpki-client.org