Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43/e4b33f6e-0045-323d-bc80-a32e866ada34.roa
File:                     e4b33f6e-0045-323d-bc80-a32e866ada34.roa (raw, json)
Hash identifier:          S/KwK12UWrIBypq9ViGtL5ZYLNle25VKyHtx3DrDxsE=
Subject key identifier:   D9:B7:97:D0:64:09:DE:77:72:6A:21:26:AC:10:19:96:3E:11:0C:84
Certificate issuer:       /CN=7d54de7a-e0a0-4a9a-94b0-05929ab31c43
Certificate serial:       010D0C9F43285847924BDB4AFE42B9E0159A1340
Authority key identifier: AF:BC:1A:11:35:D5:F7:C5:C1:07:A3:08:00:F9:FD:B3:14:35:EA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43/e4b33f6e-0045-323d-bc80-a32e866ada34.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     55219
IP address blocks:        172.110.204.0/22 maxlen: 24
                          198.148.78.0/23 maxlen: 24
                          2620:28:c000::/48 maxlen: 48
                          2620:121::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43/7d54de7a-e0a0-4a9a-94b0-05929ab31c43.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43/7d54de7a-e0a0-4a9a-94b0-05929ab31c43.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:db:4a:fe:42:b9:e0:15:9a:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d54de7a-e0a0-4a9a-94b0-05929ab31c43
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=6832dc71-1eee-4245-b9ba-f98fbbdc3329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:19:b8:b6:30:fa:bd:fb:c8:97:66:9e:6b:
                    13:27:a6:c5:6a:ac:cc:34:ca:4e:70:5a:4d:be:e3:
                    6a:18:94:41:0c:47:73:68:bd:d6:ba:15:c6:55:d3:
                    43:7f:7c:2d:0a:5f:40:72:a9:8e:31:99:4d:e5:37:
                    61:aa:04:3e:56:37:d5:41:fe:f0:bc:21:27:25:d1:
                    8b:c2:35:89:94:2a:73:e5:8e:54:fe:29:0f:c2:fc:
                    63:be:5e:88:a7:82:69:26:b5:00:91:4a:b7:c0:d1:
                    57:e1:d3:98:8a:55:65:0b:bb:bd:f5:e0:00:ec:56:
                    91:51:c2:bc:ea:03:8c:aa:43:b0:9a:a2:b3:f1:9d:
                    18:41:c5:b7:9b:e2:55:4f:ab:4a:8e:cb:01:6d:44:
                    eb:d3:a6:bf:02:a0:ee:ff:33:62:4a:ae:d1:b0:a2:
                    2f:80:b8:6e:6b:cc:d6:3f:3b:01:42:ef:3c:72:b2:
                    64:07:3b:72:a7:b6:6d:60:84:c8:ee:84:ad:96:9d:
                    0f:33:6c:d1:ca:1d:1f:57:1f:87:14:b0:ec:ea:7a:
                    ce:c1:2e:05:a1:8b:5a:0d:d0:40:a5:06:1a:aa:77:
                    70:f3:65:f8:31:cd:98:34:94:5e:e9:5f:e1:25:e2:
                    c3:0e:eb:79:76:dd:15:ea:07:0a:9f:06:1a:34:d1:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B7:97:D0:64:09:DE:77:72:6A:21:26:AC:10:19:96:3E:11:0C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43/e4b33f6e-0045-323d-bc80-a32e866ada34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43/7d54de7a-e0a0-4a9a-94b0-05929ab31c43.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BC:1A:11:35:D5:F7:C5:C1:07:A3:08:00:F9:FD:B3:14:35:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d54de7a-e0a0-4a9a-94b0-05929ab31c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.204.0/22
                  198.148.78.0/23
                IPv6:
                  2620:28:c000::/48
                  2620:121::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:cb:30:92:a6:ad:3d:70:39:be:b3:6c:bf:6d:97:35:dc:ae:
         89:17:a7:d3:b7:64:a6:c0:c7:b8:f6:d6:9e:af:76:22:26:08:
         c7:bc:f5:2f:36:18:3b:d3:ac:34:b8:05:2a:d3:dc:f8:0f:dd:
         56:84:c5:54:21:02:0e:24:b1:65:92:f7:e0:55:d4:45:89:e0:
         7a:0c:96:1f:06:cd:c8:42:77:c4:e2:be:5d:3c:dd:69:4e:4c:
         b6:28:50:43:52:2d:f6:5d:38:2e:fb:91:b2:12:42:8f:db:31:
         90:dc:da:93:e2:5e:70:68:18:80:76:3c:25:52:80:bb:03:26:
         e5:d2:f8:7f:36:3d:05:34:13:90:c1:23:44:a5:4c:64:6c:3c:
         d5:48:98:18:c9:f9:d6:01:9b:b9:f1:bc:2a:1f:4f:bb:89:4f:
         d0:ca:75:8e:b2:5c:81:ae:dd:0a:c7:4a:a1:3c:f6:e9:60:c0:
         4c:4b:17:64:03:2c:01:2c:6d:d2:97:5a:c5:78:64:f7:75:33:
         47:74:c3:c8:70:c8:78:f5:4c:0b:db:12:f5:fa:e1:70:72:78:
         02:fb:01:21:aa:3e:9c:f7:85:1b:39:80:56:96:88:95:39:4f:
         bc:42:b9:72:b0:31:83:ad:8d:b5:aa:78:5d:56:a4:0e:f7:b5:
         dd:44:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org