Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa
File:                     f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa (raw, json)
Hash identifier:          B9pcMcD63vLhyOrsbPUw2Hzq6J6qlv763X/kVJZ+NEw=
Subject key identifier:   D7:13:70:00:6C:9F:00:F2:C0:EA:CD:70:8E:FC:18:99:F3:F0:F8:03
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858455E5DA384D9B8E2C897380900
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     30103
IP address blocks:        159.124.112.0/23 maxlen: 24
                          159.124.114.0/23 maxlen: 24
                          159.124.116.0/23 maxlen: 24
                          159.124.118.0/23 maxlen: 24
                          159.124.120.0/23 maxlen: 24
                          159.124.122.0/23 maxlen: 24
                          159.124.124.0/23 maxlen: 24
                          159.124.126.0/23 maxlen: 24
                          159.124.102.0/23 maxlen: 24
                          159.124.96.0/23 maxlen: 24
                          159.124.98.0/23 maxlen: 24
                          159.124.100.0/23 maxlen: 24
                          159.124.104.0/23 maxlen: 24
                          159.124.106.0/23 maxlen: 24
                          159.124.108.0/23 maxlen: 24
                          159.124.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a3:84:d9:b8:e2:c8:97:38:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=db1d7f99-d9c8-4516-99d0-7d8bbf213223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:b6:f7:77:de:0e:6b:2f:a0:da:f5:d1:d4:
                    be:8f:9c:5b:b7:ae:41:00:f5:48:dc:42:dc:1c:f1:
                    99:d2:c8:f7:b0:46:28:6a:8f:b7:50:bc:5e:80:a6:
                    f3:ff:e4:9d:67:04:ba:28:f6:36:4e:ce:a7:da:3d:
                    d6:ed:27:9d:f2:23:d6:de:b7:9c:95:da:b6:28:a8:
                    7d:0b:4b:07:e7:7c:2f:08:d2:ab:82:33:fb:6b:52:
                    b2:f0:94:af:85:24:bd:78:bf:56:6e:a2:78:fe:c2:
                    7e:38:d5:db:f2:1b:20:b1:2e:61:90:bc:6b:8d:9d:
                    2f:e6:b2:d5:d7:e3:0f:f9:9e:f3:5d:63:94:8c:ed:
                    bd:2f:0b:11:c8:b0:ef:d6:e0:a7:e5:f1:ff:a7:bf:
                    b5:64:cf:74:d7:1a:25:c7:0a:d2:a9:4e:d6:48:ac:
                    c7:73:f9:79:10:d1:5f:6b:5e:78:98:66:bf:13:da:
                    be:6b:f0:45:bd:aa:bf:d5:5a:06:dd:df:bc:16:10:
                    b1:a4:8c:df:5f:fa:44:90:d3:36:29:9c:d1:aa:4c:
                    cd:94:29:98:32:fa:d0:93:f3:95:23:3e:7b:74:ea:
                    8c:99:fc:03:51:f6:71:50:87:bf:a6:6d:83:5c:2b:
                    44:07:72:81:54:cd:dc:88:42:2d:ef:b5:77:96:44:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:70:00:6C:9F:00:F2:C0:EA:CD:70:8E:FC:18:99:F3:F0:F8:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9dd5e14-afc4-3783-b6b8-df1ada2c2deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:74:f3:d7:d2:14:fd:47:bc:ec:82:f1:4a:e2:df:2c:62:1d:
         25:85:ef:ad:f6:7d:d7:af:a5:22:a2:88:a2:6b:ff:b2:30:54:
         6d:f9:41:0b:d6:76:e3:84:59:3d:8d:85:33:ec:98:f1:21:d6:
         62:b2:05:81:d4:c3:ae:2f:3b:dc:9b:d9:41:2a:88:a5:73:97:
         51:8c:d2:f0:f4:3f:1b:4f:d6:e3:61:cf:63:82:b2:4b:b9:db:
         47:6a:60:da:1d:e1:32:bd:5d:7e:a4:51:13:e0:5f:a4:bd:d2:
         83:3a:de:92:d3:fb:38:59:23:6d:7e:97:3e:98:04:87:77:ce:
         2b:7d:50:59:fd:8b:e8:75:e3:97:db:d2:4c:5c:c4:e8:dd:b3:
         a6:43:cf:f4:cb:11:0b:5e:7d:0e:46:b8:f5:99:74:6e:01:06:
         94:a8:eb:8a:2b:66:ac:c5:5c:94:dd:ef:e9:00:3a:8c:93:2d:
         c2:76:96:80:e6:a0:1c:a0:0a:b2:c3:58:ef:e5:c4:d0:ec:c3:
         17:30:dd:a7:c6:58:5b:81:d7:0d:07:56:2b:45:1c:38:40:7b:
         a3:9b:8a:88:68:a1:3d:6f:d4:e0:4e:05:74:7a:93:bb:61:ab:
         25:cb:cc:70:70:b6:50:83:ae:42:24:cf:10:13:54:d0:2f:40:
         df:fa:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:17:35 2024 by rpki-client on console-fra.rpki-client.org