Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/a21e9270-f842-30f7-ba10-1ecee42f150f.roa
File:                     a21e9270-f842-30f7-ba10-1ecee42f150f.roa (raw, json)
Hash identifier:          8IbX34MVw6Sh/vq/GZAUI7/Dz1cAp2mxNLqImF/vKRU=
Subject key identifier:   DF:12:5E:FD:A4:C0:49:A8:DF:6F:F8:5D:7B:A6:E6:C0:ED:B1:53:7D
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285847C4AA180D9D7261F0669941C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/a21e9270-f842-30f7-ba10-1ecee42f150f.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     19871
IP address blocks:        50.116.96.0/21 maxlen: 21
                          96.125.168.0/22 maxlen: 22
                          108.179.208.0/22 maxlen: 22
                          108.179.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:18:0d:9d:72:61:f0:66:99:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=ff21800a-fccd-402c-a0c1-11ad64db08b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:34:df:85:67:4a:b0:c8:b6:c2:33:29:6f:5b:
                    9d:1b:07:5f:cc:c5:67:30:79:d4:fc:3f:68:4b:5b:
                    c4:00:25:92:24:d4:21:b8:a1:f7:a5:f0:d6:9d:9e:
                    68:0b:24:69:1e:cb:0f:92:48:3a:57:dc:be:6b:db:
                    fe:e5:16:7d:ac:bc:2d:21:c6:33:d4:52:bf:1a:62:
                    e1:2c:f3:b7:9f:c0:63:76:02:da:28:71:ff:46:13:
                    3f:b4:4e:0e:6d:c3:31:75:ca:e7:9d:3f:9c:0f:a6:
                    89:74:8b:3f:24:63:de:85:54:5e:38:0c:80:a4:2c:
                    0c:ac:2f:52:e4:9d:91:68:26:da:0a:31:37:fe:03:
                    b9:96:78:67:9e:15:93:82:b7:4b:9d:54:eb:26:de:
                    12:e7:d0:c7:86:8a:62:e9:de:0e:66:63:0e:02:70:
                    33:3c:87:d7:5e:86:73:1b:c1:53:8d:e2:e0:08:c1:
                    6d:16:1c:3b:26:f9:e7:31:8c:78:1f:95:8f:67:a5:
                    32:39:40:f9:82:6b:ac:a3:a7:4b:98:1a:1b:e9:41:
                    9d:3d:8d:33:96:e2:6a:ce:5c:68:8b:c0:0b:41:b8:
                    69:84:2e:56:e8:9e:88:e5:ed:4c:d4:a4:91:bb:95:
                    09:40:57:fa:a4:b3:8c:24:e5:be:a1:d7:c0:90:ea:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:5E:FD:A4:C0:49:A8:DF:6F:F8:5D:7B:A6:E6:C0:ED:B1:53:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/a21e9270-f842-30f7-ba10-1ecee42f150f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.96.0/21
                  96.125.168.0/22
                  108.179.208.0/22
                  108.179.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:50:05:98:ef:46:4a:83:99:86:3f:30:ee:00:ad:13:27:6e:
         a5:dd:d3:eb:69:16:7f:46:9a:fe:f2:ce:43:fb:3d:28:88:5e:
         fa:0c:4c:c8:f9:b4:32:ca:51:98:b7:4c:0d:99:90:b7:e5:16:
         85:ab:ee:03:24:93:63:9e:5f:69:12:b4:15:7e:b2:c8:f2:30:
         22:2f:2c:f7:4d:48:8c:5f:7a:10:2d:09:9f:23:29:20:e3:8a:
         2a:c5:11:bc:ba:5b:a2:f3:27:22:00:ae:ca:dc:4a:72:1b:45:
         b9:e4:3b:b0:df:a1:61:17:f0:ab:41:9a:fe:3f:25:24:78:94:
         a2:3e:88:fc:68:1a:4d:84:c3:95:cb:04:11:d5:28:ea:c5:b9:
         b6:96:21:a2:dd:2c:50:72:8e:6a:08:7c:d2:bf:3e:a4:cd:5d:
         5b:86:2a:3a:f5:e0:d2:4e:27:f4:30:e5:ad:a0:ec:7f:7d:98:
         df:40:0b:6f:2c:81:29:ad:ee:32:17:72:0d:f8:15:65:2e:e1:
         93:7d:fb:db:3e:2c:a6:f5:9b:fe:6f:0f:0d:f1:6e:0b:2d:d9:
         69:25:ad:e2:81:b9:31:1a:28:93:85:17:48:e2:14:1a:ec:a6:
         63:08:31:ef:29:48:15:2a:9b:f1:90:2e:1c:80:5a:1a:a3:d5:
         91:ec:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org