Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa
File:                     cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa (raw, json)
Hash identifier:          Nsl1aJwzEKs3YKIgqQ1pjUOvX6epISNM8MM9ttlsOQ8=
Subject key identifier:   4C:DB:8A:EA:40:62:DF:1D:41:94:70:95:FF:EB:12:9F:63:D9:1B:66
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285847ED24BB939663770FA9A24E00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     19871
IP address blocks:        50.116.64.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          108.179.192.0/18 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          192.254.128.0/17 maxlen: 24
                          216.172.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bb:93:96:63:77:0f:a9:a2:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=1d62687a-61a8-4f7d-bda8-21d79f78ef18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cb:51:39:6a:39:84:ca:e6:e7:c3:42:f1:de:
                    52:7d:1a:49:35:0d:e5:ec:ac:d1:05:04:c1:9e:a8:
                    9c:ea:73:a5:8a:27:75:c5:24:37:43:72:92:08:c2:
                    8a:96:06:1b:d7:9d:cf:04:90:c2:b1:78:6e:92:ff:
                    c8:cb:f7:95:2c:dd:fd:c5:7c:76:ec:e2:c6:f7:ec:
                    2e:6d:ba:2c:07:7b:aa:a9:8c:3a:45:45:49:61:81:
                    64:c6:09:fe:ce:ce:5c:dc:ff:b6:a2:ef:6a:e4:02:
                    b0:22:80:88:62:ea:7a:80:ab:8f:6e:37:16:df:b6:
                    44:a8:20:c8:6e:79:81:9f:56:73:4a:b8:86:93:45:
                    21:11:2b:fa:32:0a:fc:dc:b6:04:66:73:23:64:72:
                    b2:ea:ac:ab:df:3b:dc:2a:a3:af:99:f5:94:f9:c4:
                    fc:2e:24:34:da:1c:48:08:6d:67:e2:ca:a5:40:bc:
                    ab:21:1e:f3:e9:e1:e2:4e:63:cf:fe:ff:f5:06:9b:
                    c5:da:35:c8:d2:fa:c2:82:28:f8:70:68:f5:b5:76:
                    94:ef:b1:33:a6:0e:04:aa:c8:9c:68:1a:90:c9:b3:
                    44:aa:8c:f2:95:21:12:ca:6b:5e:a6:e2:5c:01:ab:
                    fb:a2:cb:d9:a0:2e:ce:b3:08:65:1e:75:9d:3c:e9:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:8A:EA:40:62:DF:1D:41:94:70:95:FF:EB:12:9F:63:D9:1B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/cdcc6238-1290-3738-a5a9-cfa3ac20cdfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:c0:38:03:52:a6:ab:50:bd:22:b2:7b:d1:b0:55:86:ff:
         3b:ff:2f:21:45:a8:0d:bb:99:69:1f:f5:32:00:21:7a:f8:7e:
         27:22:2b:a0:f4:52:05:b1:7c:2f:65:0d:bd:2e:2b:88:f8:0f:
         91:7c:3d:27:76:3d:8a:a8:16:63:af:3f:f9:3a:03:e1:68:39:
         9c:ac:c6:89:f6:3e:1d:51:34:a8:4f:f4:47:53:35:39:a1:9e:
         5f:48:6d:71:74:8d:60:95:36:df:6b:f9:a3:47:73:02:2c:2d:
         26:34:87:ae:fb:ff:95:08:ec:f2:f7:0b:30:0c:30:26:cf:9b:
         ce:61:89:2c:44:a5:0f:05:1d:8a:84:5b:40:e6:f6:36:b4:02:
         59:39:22:6f:80:1b:ab:bb:32:09:57:9f:27:6c:27:86:2a:d5:
         8c:aa:ad:1b:ea:3b:7a:82:20:7f:43:db:28:e1:fa:c7:01:f4:
         16:5d:d6:2e:3f:84:8e:65:ff:90:5e:7f:41:d0:80:db:38:36:
         9c:e1:da:70:02:d6:d6:08:81:32:85:d3:55:4b:8a:07:4a:7c:
         f0:db:18:46:80:ab:29:e6:97:cc:7c:31:71:7c:6d:3c:7f:a6:
         17:e6:be:5e:8e:3b:65:fb:6a:ca:36:1c:c2:6d:28:c9:e0:67:
         82:35:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org