Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa
File:                     e289bffb-83d4-374a-b0ae-085e30cda0d5.roa (raw, json)
Hash identifier:          t7ge756qXhex39Qz6TssTllQz4Cp53qGqxSj544YaAA=
Subject key identifier:   54:64:E5:D4:FC:15:3C:A4:7F:1E:A6:D3:FC:08:8C:1E:34:D0:11:BF
Certificate issuer:       /CN=7db346f0-17b1-4b0d-942b-291f70e18910
Certificate serial:       010D0C9F432858479D76B1F9111F97D9CDAA7E00
Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     40317
IP address blocks:        67.221.128.0/20 maxlen: 24
                          68.168.192.0/20 maxlen: 24
                          69.46.48.0/20 maxlen: 24
                          162.248.236.0/22 maxlen: 24
                          167.89.128.0/17 maxlen: 24
                          192.170.130.0/23 maxlen: 24
                          199.58.76.0/22 maxlen: 24
                          199.96.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b1:f9:11:1f:97:d9:cd:aa:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=3325d8eb-e56c-481a-ab6d-c18c1e813414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:5b:62:20:61:45:83:07:f0:d1:d8:4d:64:
                    11:89:82:69:17:48:f5:d6:89:01:b5:ef:0f:46:39:
                    ef:38:28:80:e6:a8:97:9f:fa:6d:08:a6:b0:44:bd:
                    08:5b:09:e4:a0:05:bf:9d:90:63:29:dd:0c:b3:95:
                    e2:7a:59:bf:01:7c:2f:45:02:53:5e:c1:a8:85:29:
                    f3:54:d0:e7:be:0f:30:9d:f5:26:a6:e4:e2:94:69:
                    b3:b6:92:8d:ca:a7:69:25:5a:ff:eb:49:3e:10:b1:
                    e8:80:f1:5e:e6:5b:81:ac:b6:92:a1:8a:b0:8b:4f:
                    76:2f:03:cf:73:08:5c:9a:1f:b2:b9:33:d8:9e:ef:
                    2e:3a:24:b2:f3:50:f7:1f:3a:a0:40:39:f2:cb:f5:
                    e0:18:4d:67:0f:64:dc:bb:8b:da:ee:16:17:dd:a3:
                    d9:54:35:da:ff:ec:5d:77:2c:c4:45:ec:33:b4:f5:
                    5a:13:70:47:7a:c7:ae:0a:72:51:d1:0c:a9:72:56:
                    c6:c9:a0:f4:93:db:4f:d5:f0:44:f1:06:98:d3:5c:
                    df:12:90:f3:df:57:08:b6:f2:0b:02:c3:37:b0:f9:
                    35:fc:c6:2c:5c:df:33:1c:79:c3:d5:77:12:db:4a:
                    9e:f7:8a:d7:2a:6a:e8:c9:87:4d:9e:f3:6f:7c:bf:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:64:E5:D4:FC:15:3C:A4:7F:1E:A6:D3:FC:08:8C:1E:34:D0:11:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.128.0/20
                  68.168.192.0/20
                  69.46.48.0/20
                  162.248.236.0/22
                  167.89.128.0/17
                  192.170.130.0/23
                  199.58.76.0/22
                  199.96.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:20:2e:07:10:dd:43:3c:55:7e:14:42:68:ff:d2:d1:3c:41:
         65:a3:4c:80:36:cb:29:c1:71:89:cd:5a:1b:61:8a:56:61:50:
         e5:74:ec:e1:fd:55:1d:67:20:d2:7e:b2:f6:19:e7:66:dc:5b:
         1d:a5:31:fd:4e:72:cb:25:68:28:75:04:25:68:f9:e9:e3:3f:
         bc:69:18:ad:5c:47:7a:22:39:0b:27:18:d3:29:14:6a:cb:e4:
         e6:21:5c:18:49:a3:37:fb:24:ff:39:ec:65:41:5d:9d:0c:bb:
         66:1a:b0:40:e6:52:c2:37:63:f7:8c:1a:8e:18:fe:75:53:45:
         9c:88:4f:fc:4d:df:4c:6d:f7:a3:3c:a4:0c:e2:63:26:b9:6e:
         21:08:73:c6:7d:17:f3:f5:93:aa:2f:16:3c:36:c6:27:5a:47:
         1b:8e:b0:66:21:ec:51:91:cb:eb:dc:4c:0e:2d:5e:eb:9b:83:
         d9:8a:47:bc:51:e1:11:77:b6:1f:5c:46:13:a5:a8:0b:90:3f:
         2c:8e:27:be:42:59:5c:d2:b9:57:15:ce:e3:2a:e1:84:e0:98:
         21:68:f9:6e:d7:2a:71:7b:b9:90:e9:ef:e1:42:1f:c8:af:a3:
         8e:50:45:ab:bd:13:a0:80:e6:cb:8c:5b:92:60:30:d8:5e:90:
         95:53:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:57 2024 by rpki-client on console-ams.rpki-client.org