Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/31ae1a91-bf27-3882-ad70-9fa0166219d8.roa
File:                     31ae1a91-bf27-3882-ad70-9fa0166219d8.roa (raw, json)
Hash identifier:          vawiY8Zri7Cq/GpE17xfCchI0dArEiM0NUWdqyO20iI=
Subject key identifier:   0F:E4:A1:EC:84:91:EB:36:43:8F:19:51:A2:1A:C0:2D:72:FB:32:9F
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285847ED24BB80A4798CF91673BA00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/31ae1a91-bf27-3882-ad70-9fa0166219d8.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     46606
IP address blocks:        50.116.64.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          108.179.192.0/18 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          192.254.128.0/17 maxlen: 24
                          216.172.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bb:80:a4:79:8c:f9:16:73:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=1af1e94d-eaaf-44b1-8d12-d20efd909038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:dc:3f:c9:15:f1:3b:af:bc:20:b7:63:14:
                    7e:e3:65:f4:53:5f:72:ad:e7:55:92:30:18:b3:e9:
                    73:b2:05:c4:01:fc:9a:4e:cb:dd:14:48:c7:86:b5:
                    dc:33:54:41:c7:fd:b2:35:d9:22:b2:61:a3:df:51:
                    52:52:0c:ba:75:df:e9:9c:81:99:96:7f:8c:9c:c3:
                    f8:5b:e2:df:50:38:7e:1d:73:ca:5c:8f:51:f1:c9:
                    28:fd:eb:8f:af:a0:ca:13:bd:25:35:c8:cf:d7:27:
                    c8:a4:52:5f:d6:3d:5c:67:b0:e4:40:b8:9d:d0:ad:
                    9e:fd:26:c6:cb:32:a9:bb:15:4b:0b:49:89:42:a6:
                    ba:4b:cd:14:71:d9:4e:b7:7c:da:5c:65:ce:75:f3:
                    78:f0:bc:30:13:92:3e:5a:65:ef:24:b3:7d:52:f3:
                    0b:d6:f3:80:0a:e3:91:b2:18:bf:72:54:54:33:93:
                    e5:7c:f5:b7:b0:99:a3:8c:77:49:bc:8d:82:16:25:
                    de:4b:6b:f1:ba:a2:df:ce:af:6b:8c:a0:57:7f:39:
                    09:67:74:c8:78:85:17:9a:4a:5e:9a:be:1f:82:7e:
                    c7:11:96:c3:90:ce:53:cf:a3:59:34:e4:26:fe:f1:
                    0d:84:66:46:58:70:ce:59:47:08:13:22:3d:0a:0b:
                    ed:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:A1:EC:84:91:EB:36:43:8F:19:51:A2:1A:C0:2D:72:FB:32:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/31ae1a91-bf27-3882-ad70-9fa0166219d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:54:3a:e2:2d:0b:a9:ac:d5:88:8d:4c:56:39:08:e6:27:
         a7:ee:28:51:89:89:0b:e1:c0:0e:6b:7f:71:67:02:1c:23:82:
         26:89:29:a8:7e:af:cb:b5:e0:b6:1e:06:be:ff:d3:4c:52:aa:
         6d:24:be:95:79:05:5a:1a:69:5e:7b:6d:31:13:c7:ac:12:06:
         f8:01:25:4d:09:eb:cd:cb:1f:30:22:92:73:3c:2b:16:86:3b:
         24:02:0b:a8:9e:32:a9:0a:64:f9:e6:bb:7e:0a:5e:a6:76:8f:
         2f:40:fc:51:0c:59:22:c5:f7:1a:d4:96:61:60:34:c0:15:09:
         94:0f:ab:74:0c:b9:dc:a0:2d:16:ec:d2:39:3f:de:85:4e:b3:
         68:56:a8:83:cc:14:85:19:e8:a7:71:22:dd:56:16:57:ed:cd:
         bf:42:db:29:03:f7:70:cf:02:9a:00:e5:61:5c:07:8f:36:51:
         2e:7b:67:76:c3:14:ed:5f:b4:0c:e2:dc:d8:1d:0a:11:24:51:
         43:56:2a:5a:fd:39:5e:23:8f:3a:cf:82:24:e8:e3:95:ee:ce:
         27:26:b1:13:a7:e5:ea:de:f5:01:08:7f:6f:03:47:07:7a:86:
         fc:cc:34:ae:12:34:c8:9b:c8:85:5d:f3:20:e8:0c:8e:08:84:
         f6:f3:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org