Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/a142e04a-4bc1-3111-b089-dbf0feff0e10.roa
File:                     a142e04a-4bc1-3111-b089-dbf0feff0e10.roa (raw, json)
Hash identifier:          R1harelpKrIDEh/o/LP3S6WZSV3ZVjsjc6/i95wTUEk=
Subject key identifier:   A4:CF:24:3B:62:B4:CF:CF:9D:86:91:12:C1:4A:26:2E:E6:67:77:76
Certificate issuer:       /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Certificate serial:       010D0C9F43285846E3CFF739EAB9BD87F0462680
Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/a142e04a-4bc1-3111-b089-dbf0feff0e10.roa
Signing time:             Fri 16 Aug 2024 01:00:30 +0000
ROA not before:           Fri 16 Aug 2024 01:00:30 +0000
ROA not after:            Thu 14 Nov 2024 02:00:30 +0000
asID:                     394456
IP address blocks:        66.223.0.0/24 maxlen: 24
                          66.223.1.0/24 maxlen: 24
                          66.223.2.0/24 maxlen: 24
                          66.223.3.0/24 maxlen: 24
                          66.223.4.0/24 maxlen: 24
                          66.223.5.0/24 maxlen: 24
                          66.223.6.0/24 maxlen: 24
                          66.223.7.0/24 maxlen: 24
                          66.223.8.0/24 maxlen: 24
                          66.223.9.0/24 maxlen: 24
                          66.223.12.0/24 maxlen: 24
                          66.223.13.0/24 maxlen: 24
                          66.223.14.0/24 maxlen: 24
                          66.223.15.0/24 maxlen: 24
                          66.223.60.0/24 maxlen: 24
                          66.223.61.0/24 maxlen: 24
                          66.223.80.0/24 maxlen: 24
                          66.223.81.0/24 maxlen: 24
                          66.223.82.0/24 maxlen: 24
                          66.223.83.0/24 maxlen: 24
                          66.223.84.0/24 maxlen: 24
                          66.223.85.0/24 maxlen: 24
                          66.223.86.0/24 maxlen: 24
                          66.223.87.0/24 maxlen: 24
                          66.223.88.0/24 maxlen: 24
                          66.223.89.0/24 maxlen: 24
                          66.223.90.0/24 maxlen: 24
                          66.223.91.0/24 maxlen: 24
                          66.223.92.0/24 maxlen: 24
                          66.223.93.0/24 maxlen: 24
                          66.223.100.0/24 maxlen: 24
                          66.223.101.0/24 maxlen: 24
                          66.223.102.0/24 maxlen: 24
                          66.223.103.0/24 maxlen: 24
                          209.196.146.0/24 maxlen: 24
                          209.196.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:cf:f7:39:ea:b9:bd:87:f0:46:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
        Validity
            Not Before: Aug 16 01:00:30 2024 GMT
            Not After : Nov 14 02:00:30 2024 GMT
        Subject: CN=fd81d2be-5cab-4acc-aa5f-8e3b0e4032d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:1d:3c:a3:d3:43:d1:24:18:e6:e8:85:f9:
                    4b:e1:6c:23:1a:92:47:ca:8e:e2:ad:7c:bf:6a:b0:
                    1f:b9:37:c1:e3:73:b2:af:c7:95:66:bf:0e:46:27:
                    14:1b:a6:6f:9c:09:24:d3:93:49:a8:40:d9:32:1a:
                    5b:cd:a8:71:b7:eb:9e:f1:78:40:89:07:04:0e:07:
                    b1:4d:12:b5:46:9a:ca:c1:0f:c8:a8:50:ea:d9:f1:
                    2d:67:70:e9:cf:f9:bb:37:06:7d:dc:14:31:cc:e1:
                    e4:69:bc:7a:d7:0a:80:42:72:01:58:01:59:90:17:
                    74:63:d5:74:54:59:7e:f7:1e:c9:05:88:25:78:5f:
                    9e:0a:df:19:19:1d:ec:ec:0f:e9:60:fa:55:01:e7:
                    69:bb:8f:0c:90:51:b9:27:46:7e:05:89:bd:77:3e:
                    f7:79:93:79:7d:95:18:cb:a1:24:cd:dc:78:9d:70:
                    96:53:f4:35:bd:76:fc:f9:a8:e0:cc:bf:42:52:3f:
                    d2:87:c7:cc:b6:92:26:5d:59:00:d5:2e:d3:4a:f3:
                    6d:6e:34:17:a7:f8:58:c2:02:64:7a:82:e3:4c:cf:
                    41:36:7a:fe:93:55:31:5b:39:b2:84:bb:dd:df:ca:
                    55:ab:35:30:b0:16:7c:c2:dc:f7:52:a0:61:89:fa:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CF:24:3B:62:B4:CF:CF:9D:86:91:12:C1:4A:26:2E:E6:67:77:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/a142e04a-4bc1-3111-b089-dbf0feff0e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.0.0-66.223.9.255
                  66.223.12.0/22
                  66.223.60.0/23
                  66.223.80.0-66.223.93.255
                  66.223.100.0/22
                  209.196.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:81:9c:6c:b1:82:e0:fe:15:65:f1:25:a3:95:82:fe:36:
         ab:20:94:3a:a0:b8:c2:14:65:3c:20:f5:d0:79:e5:d4:4e:80:
         ce:81:1a:d2:74:b5:b0:ea:96:04:44:f0:28:5b:ad:58:3c:6b:
         d7:4a:30:32:27:da:f3:0c:30:19:35:f2:45:59:82:64:fb:8c:
         df:93:58:5c:78:91:55:5f:3a:cf:32:ac:6a:32:20:1b:9e:06:
         63:bc:27:ae:c6:d8:9f:03:ee:b2:33:0d:d3:de:21:31:ec:b8:
         3b:47:a4:12:70:b5:52:ae:37:bb:dd:ab:d2:cc:0e:17:ba:19:
         a1:52:b0:36:9b:c8:1d:14:5a:da:cb:cc:5a:5d:a4:18:3f:e9:
         e9:07:63:30:8f:09:4c:7e:65:04:47:2c:6c:9a:9b:ac:75:8c:
         f5:6c:15:7e:09:19:05:93:a2:55:6d:8d:d5:a8:b3:69:ff:83:
         a2:38:67:73:ce:ab:95:36:bb:6a:10:8b:9c:82:b1:c8:e0:df:
         d0:83:c8:f8:82:d7:2c:30:43:15:ad:00:8a:58:88:52:d3:ca:
         f8:37:ff:55:51:ee:ec:c3:bd:41:8b:51:aa:4f:82:e0:39:e4:
         59:dd:fe:dd:17:25:00:3a:65:7a:d5:0f:73:31:e6:d8:6d:c1:
         4c:19:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:25 2024 by rpki-client on console-ams.rpki-client.org