Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa
File:                     089b0e00-21fd-333b-ab34-115e31016ef4.roa (raw, json)
Hash identifier:          IfDHhbERo92DlvariTb/lNxxGkrwViRPkZHk85dE9BQ=
Subject key identifier:   61:B0:04:D5:9C:51:F5:5A:0C:40:84:C7:79:CF:5A:E4:1B:FC:B7:E4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858455E5DA36FB38F1F6262D96100
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     30103
IP address blocks:        159.124.156.0/23 maxlen: 24
                          159.124.150.0/23 maxlen: 24
                          159.124.148.0/23 maxlen: 24
                          159.124.154.0/23 maxlen: 24
                          159.124.152.0/23 maxlen: 24
                          159.124.142.0/23 maxlen: 24
                          159.124.140.0/23 maxlen: 24
                          159.124.146.0/23 maxlen: 24
                          159.124.144.0/23 maxlen: 24
                          159.124.138.0/23 maxlen: 24
                          159.124.132.0/23 maxlen: 24
                          159.124.130.0/23 maxlen: 24
                          159.124.136.0/23 maxlen: 24
                          159.124.158.0/23 maxlen: 24
                          159.124.128.0/23 maxlen: 24
                          159.124.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a3:6f:b3:8f:1f:62:62:d9:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=85d61826-ec8d-40c2-8905-1c3918c67368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:9d:bb:59:3f:3c:92:86:aa:33:96:b9:68:
                    cc:0d:ff:29:2b:2e:28:a4:42:ce:86:96:1d:39:52:
                    bb:65:8e:c0:00:66:23:26:27:99:8f:7c:7b:0a:f9:
                    07:d8:a9:ec:2c:6a:0e:85:a8:d6:ea:f6:67:32:82:
                    4a:ac:b0:82:88:27:53:a2:4c:48:c4:64:e6:82:a9:
                    46:d1:8e:16:75:f1:6e:59:a4:14:4f:84:5e:6d:07:
                    d8:e4:a2:45:5b:e2:20:0e:c2:de:bf:ba:26:52:d7:
                    a4:ed:22:77:4a:c2:bc:58:91:5c:5f:79:e8:07:07:
                    fb:7a:b7:76:a1:d0:62:17:99:d3:4c:57:a7:c5:b7:
                    b2:9b:5f:4b:53:08:a7:ca:84:fa:e6:87:94:9b:03:
                    f7:96:0d:d5:5c:d5:57:d6:34:15:91:6c:24:17:4e:
                    b3:7a:c1:6d:d6:f8:7c:f5:c0:b0:1e:6a:96:bf:66:
                    7c:53:78:34:42:43:92:26:1c:77:0f:35:2d:60:bb:
                    57:f6:a9:8f:93:f5:9d:21:4e:fa:91:d9:d1:ef:df:
                    37:77:10:5c:47:d7:1e:2d:0b:f3:81:6a:8e:10:f1:
                    f6:5d:d3:6e:4f:03:a8:d4:3c:e0:c9:a2:0a:47:5a:
                    52:57:2f:62:d7:66:ab:dd:93:01:3f:20:94:cb:26:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B0:04:D5:9C:51:F5:5A:0C:40:84:C7:79:CF:5A:E4:1B:FC:B7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:25:38:13:26:2d:cc:43:ed:cf:a3:ad:ca:8f:ed:a5:c0:26:
         d9:28:f1:a1:01:87:e1:6d:f8:ff:fd:6d:c7:3e:85:e9:79:01:
         94:6b:6e:84:04:f9:65:9f:53:a9:ce:26:5a:ca:86:bb:a6:a5:
         7e:2a:ab:42:6e:3e:73:7e:dd:5a:5e:8a:5b:da:2c:c3:44:b0:
         24:e0:c3:b5:70:fa:69:85:43:f5:76:91:4b:28:c9:77:aa:18:
         8e:76:9b:37:ed:f3:3b:d4:a5:16:09:0c:92:f2:d3:ac:b4:84:
         19:f4:5e:5f:1b:93:f0:7e:eb:d7:78:77:b9:5f:5f:47:34:2e:
         20:3d:27:66:26:c6:39:24:5d:7f:3d:07:62:dd:60:c9:a4:58:
         d6:ed:cc:7b:a1:7f:3e:2d:a6:68:f4:5a:44:73:a5:4d:f8:43:
         cd:45:d8:e3:5c:5f:f7:07:0d:81:83:dc:e8:ab:da:68:3c:ec:
         e1:fa:db:7f:3f:d0:15:27:2a:77:cd:24:c7:f9:81:89:fa:7c:
         9a:71:ef:96:b9:b7:2d:16:a2:04:3d:82:0c:38:72:5d:14:3e:
         ba:3e:8c:32:42:8f:bb:71:13:2e:25:e5:d0:ac:a9:50:72:01:
         87:8d:24:e7:ff:c4:09:5d:7e:41:e3:9b:e1:01:c6:c4:19:99:
         4d:c6:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:39:50 2024 by rpki-client on console-fra.rpki-client.org