Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
File:                     1ed11bba-2055-382e-ae61-183dfc3956d0.roa (raw, json)
Hash identifier:          rZ6MJ4qjqFGbZr6UJYqu42dSgnKLmqwr28J2dP9Xh3Q=
Subject key identifier:   DE:DD:0E:9F:7E:EE:14:C5:07:0C:5C:07:02:0C:17:08:CA:1A:5D:EC
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F43285847924BDB2141457AB7A91E8CC0
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     35860
IP address blocks:        63.133.208.0/22 maxlen: 22
                          74.119.52.0/22 maxlen: 22
                          192.149.254.0/23 maxlen: 23
                          192.149.254.0/24 maxlen: 24
                          192.149.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:db:21:41:45:7a:b7:a9:1e:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=44b2812c-d826-4b54-9850-5f6fd23eb390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:79:e6:7d:de:fe:21:b5:86:28:f6:64:36:
                    82:dd:4e:6d:bc:c8:c7:ca:0f:b4:f0:69:cf:14:93:
                    a7:ca:33:b9:7d:ce:7a:c2:c2:62:30:76:e1:e4:18:
                    ab:45:f2:f3:3f:f6:e2:45:1f:93:57:ce:9e:b4:be:
                    27:46:79:e3:be:c4:47:ee:95:29:0d:81:02:55:f3:
                    0e:3c:9e:44:6a:4f:aa:90:ad:10:c2:85:11:7a:c4:
                    2f:b3:57:f0:93:f7:65:8b:75:bd:c3:82:af:aa:50:
                    ca:a4:e7:2d:5b:ca:9f:d3:9d:f4:a5:30:19:fc:41:
                    86:44:81:ce:3a:14:e7:40:fb:b8:54:38:ae:ea:3d:
                    01:d0:90:a5:10:08:35:1e:98:69:08:b6:71:24:dc:
                    35:44:3d:0e:00:d9:36:0b:2f:a5:4d:9d:bc:9e:68:
                    c2:28:17:e2:5c:14:60:8a:0b:65:09:ac:60:4d:a2:
                    41:b2:31:5b:e7:49:c4:f2:10:91:6e:8f:25:e0:4d:
                    ed:ef:c1:a2:15:99:fa:42:d3:b4:df:36:fc:38:70:
                    8d:e8:50:d9:1e:19:12:36:b3:ff:ee:bf:3d:7a:04:
                    62:2c:9f:83:9c:9e:00:1d:01:24:ac:99:9a:e6:36:
                    1d:5c:13:8e:9b:ce:83:09:a8:23:4c:7b:47:6a:68:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DD:0E:9F:7E:EE:14:C5:07:0C:5C:07:02:0C:17:08:CA:1A:5D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.208.0/22
                  74.119.52.0/22
                  192.149.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:c3:89:d2:1d:70:49:8e:53:95:b6:e6:27:f7:6f:55:f9:
         86:da:35:f9:59:06:98:74:87:d8:02:ed:e1:e8:b7:89:6a:9a:
         d9:12:ab:88:16:b0:51:9c:89:41:2e:42:ee:b0:30:87:de:fa:
         d3:9b:cd:53:6e:30:87:ee:25:ea:a4:e2:1a:7a:5e:7e:54:f6:
         cc:f9:ae:39:13:a9:67:ce:5c:f4:07:ec:c3:d1:aa:e3:6e:4e:
         95:f4:61:8c:4c:d4:9a:79:67:df:17:6f:ed:4c:69:a9:1c:b2:
         b9:b8:a7:f0:d8:1d:7c:6c:3f:31:d2:fd:88:4e:50:0a:af:ed:
         0e:fe:68:8b:75:b6:bb:55:4a:29:bc:d8:95:8f:69:b7:84:95:
         89:b6:09:5d:d8:b4:22:cc:90:c9:7c:39:56:b8:5f:e7:9c:c9:
         e8:77:66:f3:39:5a:12:5c:07:43:06:b6:36:84:18:3b:b7:92:
         bf:80:b7:0f:3e:df:47:57:6f:1a:5e:b7:e8:0b:7c:34:ea:86:
         a9:06:1c:ef:c2:ea:72:16:fa:1b:20:13:a8:d8:dd:f1:da:5e:
         e2:f6:36:ac:61:d7:61:5f:b6:50:3f:1b:c5:ad:00:01:8b:26:
         f8:bb:b1:04:ce:0e:ee:70:cd:d0:93:9f:72:7c:65:54:b5:3a:
         82:21:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:51 2024 by rpki-client on console-ams.rpki-client.org