Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa
File:                     a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa (raw, json)
Hash identifier:          8LPu82kKy8PvCNn6ja+uNJjZZ9kyQ7XOpy61bwIIrDg=
Subject key identifier:   B8:8B:9C:22:4A:8E:65:FA:60:C4:2B:51:5C:A2:45:A1:95:64:15:67
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F432858478F4611F2E27DCFE6185CE900
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa
Signing time:             Wed 16 Oct 2024 11:01:44 +0000
ROA not before:           Wed 16 Oct 2024 11:01:44 +0000
ROA not after:            Tue 14 Jan 2025 12:01:44 +0000
asID:                     211535
IP address blocks:        128.254.224.0/24 maxlen: 24
                          128.254.226.0/24 maxlen: 24
                          128.254.227.0/24 maxlen: 24
                          2602:fbec::/36 maxlen: 36
                          2602:fbec:224::/48 maxlen: 48
                          2602:fbec:226::/48 maxlen: 48
                          2602:fbec:227::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:46:11:f2:e2:7d:cf:e6:18:5c:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Oct 16 11:01:44 2024 GMT
            Not After : Jan 14 12:01:44 2025 GMT
        Subject: CN=f1487537-e140-452d-8a2f-95d3f960d50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:37:62:9a:71:9a:82:a5:38:6b:26:0f:43:
                    56:6d:b0:6f:9f:3c:38:8e:b2:c6:84:ef:5a:a4:fd:
                    04:8a:88:3a:bf:8f:b3:4f:8a:76:94:26:37:46:fc:
                    43:02:9b:4e:cb:c8:84:59:8c:3c:43:5e:48:83:6a:
                    31:c0:17:6e:4d:6c:6a:aa:2f:43:69:a8:cc:ae:ae:
                    a9:ec:03:ad:17:65:3f:f1:ec:2b:aa:76:79:16:19:
                    0b:d0:9b:13:78:3b:37:40:60:0c:0c:35:0f:7b:0f:
                    6a:51:8a:7a:aa:3c:61:79:12:14:0d:cb:b6:78:7a:
                    bb:15:b4:29:3b:d2:31:98:d0:57:a3:84:3b:23:38:
                    93:12:fc:1e:18:1a:da:d6:17:68:39:be:00:aa:87:
                    e3:35:ee:e4:f3:cc:fe:e8:12:c1:31:5f:6f:17:b5:
                    f3:c9:18:59:04:67:72:ea:a9:a3:2d:4a:33:73:a5:
                    90:2b:1a:e8:78:50:e6:ff:2b:57:73:65:c0:1d:7c:
                    9e:d3:4e:aa:d2:75:00:01:05:b4:32:71:04:90:c6:
                    62:81:10:19:69:7c:16:f6:71:09:7b:67:2b:a4:e4:
                    b5:78:93:64:47:80:f9:0b:e3:2c:d8:22:33:05:30:
                    eb:18:a7:bb:82:5e:65:30:0c:e1:5d:94:b0:fb:28:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:9C:22:4A:8E:65:FA:60:C4:2B:51:5C:A2:45:A1:95:64:15:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.224.0/24
                  128.254.226.0/23
                IPv6:
                  2602:fbec::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:98:2e:f6:53:1e:15:ac:77:0e:e7:39:fd:a5:82:54:16:de:
         61:40:2c:52:e4:69:1d:8a:e7:89:17:d4:a4:ee:95:7e:75:b0:
         13:29:04:47:77:77:08:d2:6e:3e:08:22:b3:0c:61:19:64:83:
         c7:0c:1c:5d:79:d4:c7:97:e4:27:9f:3d:25:88:81:7d:21:76:
         88:36:e3:84:2d:d5:97:77:52:4a:31:f6:95:a4:48:ac:1f:41:
         ac:47:1c:71:d7:f0:7d:8c:ca:b3:69:7c:5b:25:ce:e1:ab:5d:
         c2:dc:c9:3d:55:52:47:08:35:8e:75:f1:9b:0b:81:64:ae:d8:
         2c:ef:1e:5e:2e:42:0d:36:3f:16:22:ea:00:b0:f8:80:7f:79:
         00:84:5e:98:bc:3a:e9:d3:49:c8:9f:e0:05:14:ed:56:0f:14:
         d5:f2:02:3f:93:e2:42:2f:94:0e:31:03:ce:32:47:c1:7c:eb:
         56:c3:85:d9:6f:c6:01:19:86:3d:60:79:c0:db:c1:1a:bd:d5:
         83:a7:f1:f6:b0:07:76:94:b1:6f:f0:dc:d1:96:0d:07:50:5a:
         6a:20:63:9a:f7:3c:90:7e:73:4c:2b:c3:fa:e0:79:69:44:0d:
         bd:ea:1c:13:07:ef:e3:c9:3a:6e:6f:1d:9c:fa:55:4a:9a:cc:
         c3:b6:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 14:47:19 2024 by rpki-client on console-fra.rpki-client.org