Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa
File:                     3b9384bd-5385-384e-95c7-0cd9faa340a3.roa (raw, json)
Hash identifier:          Qqm3WSQnPDONFMuBVmb7xeLTrnrFHsjLjybbSAIRPVE=
Subject key identifier:   66:6B:6B:E6:17:C5:2D:5B:E0:45:09:80:53:69:A7:7F:8D:30:45:2B
Certificate issuer:       /CN=d51196d1-75e6-431b-8514-1f946ae21089
Certificate serial:       010D0C9F4328584566BDB95755F1222CA0471720
Authority key identifier: B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     6140
IP address blocks:        107.161.208.0/20 maxlen: 20
                          2602:ffd3::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b9:57:55:f1:22:2c:a0:47:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51196d1-75e6-431b-8514-1f946ae21089
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=58957c58-d55a-4fe3-a629-9d95e390962f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6c:ea:6a:a7:2e:53:21:39:cc:e8:38:e4:00:
                    6b:ab:55:f7:bd:13:12:8d:93:52:a0:d9:02:6d:da:
                    b2:e8:e9:60:f1:39:bf:34:32:31:fd:25:07:00:b1:
                    d3:3f:f5:13:2f:d3:2a:ac:e2:fe:29:d5:8c:db:88:
                    45:ca:14:4a:04:73:01:67:cd:20:ec:dc:7c:69:95:
                    e4:a9:9f:a0:45:c8:09:83:20:d6:5d:42:db:fe:86:
                    c7:07:2d:ab:e1:84:3e:7b:76:c9:e9:a6:df:4e:5a:
                    85:a5:0b:63:b8:98:c8:fd:98:62:ac:45:51:97:f2:
                    7e:1c:b8:ad:57:89:0d:57:fa:ff:ff:f2:af:f8:52:
                    e7:d3:c6:b4:99:92:be:89:15:6d:98:db:b2:b3:05:
                    8f:57:7a:3d:ae:ee:67:fd:95:f4:d9:37:fe:6c:42:
                    2b:41:69:6b:70:44:f6:20:66:2b:f4:79:fc:c9:60:
                    77:0a:41:b3:7f:0a:51:83:5e:1c:e3:bb:47:15:41:
                    da:62:3d:e8:aa:76:8d:16:92:fa:79:94:48:d8:19:
                    af:2e:fa:c2:f3:b5:ac:20:67:3d:ac:fa:64:18:41:
                    63:8c:98:1c:30:ae:a2:e9:1a:18:a4:9b:4b:85:76:
                    38:03:84:b4:d5:55:c6:d3:35:e2:1b:4c:7f:45:bd:
                    b4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:6B:E6:17:C5:2D:5B:E0:45:09:80:53:69:A7:7F:8D:30:45:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl

            X509v3 Authority Key Identifier:
                keyid:B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.208.0/20
                IPv6:
                  2602:ffd3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:03:35:53:21:7f:3f:3e:59:b1:aa:04:cd:fa:e2:da:82:15:
         a9:1a:bd:d5:68:fe:1d:fb:74:08:87:cc:76:b9:1e:79:4a:e2:
         a0:55:d3:67:6e:72:53:33:fd:76:71:18:54:1e:32:ef:d4:f2:
         db:d2:c1:86:03:0e:44:18:bf:b3:ba:77:b3:15:bd:45:de:77:
         c9:3e:4b:c6:90:f2:26:bc:bb:50:31:f5:b7:f1:67:cb:98:ae:
         fa:7a:53:51:c6:4a:24:41:a7:19:8a:1b:59:f4:07:13:2f:fa:
         f3:3d:16:37:91:68:c9:1d:97:2a:25:80:a0:de:99:20:4c:f0:
         3d:f3:f7:df:87:b2:de:99:72:d1:9a:83:6b:fa:c0:78:c1:dd:
         2a:d7:a5:2e:97:02:29:32:b5:af:cd:80:39:4f:70:9e:ea:2d:
         5c:33:90:b8:eb:8a:86:4a:98:07:b5:fa:b5:e0:2b:90:66:16:
         e1:ba:ea:fd:f0:f9:2f:12:cb:83:7f:9c:7c:45:cb:aa:b1:ba:
         6c:2b:c4:71:7d:80:75:e9:17:45:82:4b:09:e1:e3:d9:2b:94:
         d7:d8:e2:a4:88:40:36:5e:3e:4b:bb:55:8c:c1:b3:6d:ab:e1:
         9e:72:66:8e:54:56:be:9f:ef:13:12:35:06:ee:43:82:6d:dc:
         7c:cb:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 09:50:16 2024 by rpki-client on console-fra.rpki-client.org