Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
File:                     0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa (raw, json)
Hash identifier:          QtsQvSgpqaxJkTk1cqafgY7JZjz8oj7B37v9SuEBsK4=
Subject key identifier:   B2:C5:67:AC:B9:80:E0:33:C8:3A:B8:B2:FB:5D:3A:D5:84:8A:E4:70
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285847ED24BBA68D9DDC4A7789A480
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     26337
IP address blocks:        50.116.64.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          108.179.192.0/18 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          192.254.128.0/17 maxlen: 24
                          216.172.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bb:a6:8d:9d:dc:4a:77:89:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=613f6463-597c-442c-9523-682ba5a8185a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e8:37:7d:a5:05:af:58:86:4e:85:95:fa:35:
                    49:73:87:3b:69:42:c9:3b:d1:dc:cf:df:41:50:60:
                    48:d8:49:31:4e:b0:02:7d:53:d0:8c:2c:47:73:db:
                    ac:cc:fa:e9:1f:d8:8c:b8:a6:d4:eb:02:1a:ad:83:
                    03:1c:c3:32:05:f1:83:67:b5:c6:99:c9:c5:48:7e:
                    7a:9c:00:1a:b8:ca:6d:73:41:aa:63:ca:00:97:ac:
                    35:4a:cf:7d:0c:90:ea:a4:76:04:fb:3e:af:6b:17:
                    78:9b:e2:02:64:dd:d0:18:b6:98:98:71:6d:5d:b0:
                    da:7c:d9:7e:0c:d8:bc:3f:ba:3d:4d:bb:e1:88:e1:
                    ae:ac:6d:51:79:e6:99:6f:ad:53:56:30:21:9c:60:
                    a8:d2:78:69:5a:d7:fc:c8:c4:45:36:c1:9c:db:ad:
                    91:ed:f7:47:87:cc:c1:85:69:55:62:49:4b:63:26:
                    af:2b:81:55:cf:1a:6f:98:bc:50:fe:9b:eb:df:4b:
                    24:7f:f5:89:81:ab:a5:7c:39:ee:07:79:c6:73:19:
                    47:c3:8d:98:82:a1:b3:af:34:32:07:89:ff:61:31:
                    1c:76:9d:d7:c0:cd:90:bb:3c:3b:2b:25:42:8d:0e:
                    d6:c3:cb:73:83:3f:dd:56:44:1a:7d:9b:89:25:ba:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:67:AC:B9:80:E0:33:C8:3A:B8:B2:FB:5D:3A:D5:84:8A:E4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:c6:2a:24:96:e9:d9:53:8d:f7:c9:4a:af:b9:7f:de:6f:
         d0:15:35:33:8c:2e:6f:28:0a:dd:4a:1a:8c:5e:d2:6c:e1:fe:
         53:47:11:28:70:c0:9c:bd:a3:8c:90:05:af:2f:a4:51:53:af:
         62:7c:7a:92:86:0c:84:7d:49:b8:97:01:d0:04:8d:68:43:ae:
         bf:64:be:f2:32:09:8f:0a:2f:ea:b2:2c:4d:06:81:cd:1a:4b:
         08:21:c2:89:82:a1:9e:f1:e5:48:05:3f:fd:db:52:f6:22:34:
         97:ee:46:ca:64:35:84:cd:ba:29:20:da:09:36:3c:51:87:e7:
         b8:49:7d:08:32:3e:a8:45:54:33:d3:e0:d3:92:07:03:4e:16:
         29:2a:59:8c:d9:89:23:16:83:43:9d:a6:47:5e:16:a7:7d:d8:
         db:55:09:3e:ec:6e:d7:eb:2b:65:91:f2:9d:9d:77:c5:98:95:
         3e:c6:13:a6:48:82:33:11:5f:bd:06:d2:0d:6f:11:30:ce:4a:
         6e:02:d6:39:dc:aa:cf:2b:bd:28:07:90:2a:b0:35:52:a9:e6:
         22:25:d0:73:9b:a1:46:46:be:9d:9a:24:5f:5e:1a:23:53:77:
         ec:b2:26:e5:6f:d4:47:05:cb:33:35:7a:4f:e3:27:8c:81:31:
         b2:cf:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org