Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
File:                     f72adc35-9eb4-3118-8c85-285ff915009f.roa (raw, json)
Hash identifier:          WbdpQn6q280DN50obOEg7Hp7MSA0emfd/4ASd/OtxVA=
Subject key identifier:   0C:91:08:DD:9E:FA:7E:6F:DA:7F:63:63:AF:2B:73:D6:72:0C:B9:C8
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285847C4AA17FBB666B0F901AE76C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     396982
IP address blocks:        50.116.96.0/21 maxlen: 21
                          96.125.168.0/22 maxlen: 22
                          108.179.208.0/22 maxlen: 22
                          108.179.216.0/21 maxlen: 21
                          198.154.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:17:fb:b6:66:b0:f9:01:ae:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=3722b04f-ebaf-45cf-8d6c-805f8dbf61e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:76:9f:11:9d:66:00:c8:8a:af:81:58:d4:
                    0d:14:87:6d:d4:06:64:fb:1f:2d:80:ff:de:24:8a:
                    6d:7a:b7:65:24:c6:d0:f1:57:7b:62:25:7c:fd:c8:
                    3f:99:37:88:31:35:1a:f2:92:b9:d6:c4:5d:77:66:
                    7c:11:1d:a7:e3:10:c8:cf:48:0b:ae:c2:f9:05:ab:
                    f3:b7:aa:45:ec:c0:b2:1c:aa:ad:31:83:37:b5:35:
                    dc:e5:99:3d:1c:40:e4:d0:04:74:88:0a:1e:51:3e:
                    e9:1a:3f:ba:ea:09:db:67:d3:ad:cd:c0:0b:02:92:
                    7e:0b:49:7c:68:8c:42:82:5f:9d:fc:cc:7c:64:cc:
                    52:e7:e1:b5:21:57:85:09:7e:ce:2d:62:0b:66:83:
                    6e:2c:0b:eb:0c:3e:f1:9e:37:c2:6d:29:01:8f:a6:
                    70:88:f8:b3:47:77:f8:9a:aa:69:71:42:96:96:64:
                    83:e1:b1:be:91:99:b1:ca:49:2d:ea:ce:71:3e:59:
                    fd:14:73:29:31:28:50:eb:fc:e3:73:e2:c3:97:f2:
                    5f:69:20:3d:b5:56:cb:c2:06:53:77:89:b8:b7:65:
                    64:34:5d:48:47:52:df:cb:eb:6c:0c:b2:2d:c1:b3:
                    a0:b7:b2:99:15:28:d2:32:f6:1f:79:29:c6:46:3e:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:91:08:DD:9E:FA:7E:6F:DA:7F:63:63:AF:2B:73:D6:72:0C:B9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.96.0/21
                  96.125.168.0/22
                  108.179.208.0/22
                  108.179.216.0/21
                  198.154.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f9:43:f7:86:5b:b2:f5:8e:5b:e5:13:6c:8f:db:4d:61:9f:
         03:82:3c:33:e3:e9:13:95:b1:05:89:d3:91:e7:9d:0a:92:65:
         18:d9:99:ed:bf:01:49:14:46:33:e5:44:f6:ed:80:f3:2e:ce:
         09:e1:65:c8:c3:46:8a:30:3a:ac:22:82:26:52:bd:85:c2:1f:
         f0:b8:24:c9:6d:cf:1e:97:76:e2:6e:f3:c5:52:d9:a3:e8:34:
         97:d8:16:56:5e:72:43:fa:d1:32:6f:87:ea:3f:eb:07:b9:40:
         a4:12:66:72:ec:0c:24:8e:67:fb:f1:37:87:92:83:ce:04:b9:
         03:24:d0:df:ef:86:35:e6:14:31:02:fb:6c:80:b7:8e:88:08:
         9d:ff:48:83:01:a9:6e:f7:85:d6:e6:a4:a9:21:76:91:3f:af:
         a2:1b:64:09:e2:0d:91:21:48:94:d0:c9:2a:ea:37:97:e6:52:
         d2:f9:20:7f:90:c2:e1:95:87:2a:c5:60:26:b3:49:6d:8a:86:
         cf:cb:f5:d8:20:9e:0a:4c:45:db:d3:20:3c:2d:08:c6:33:c8:
         fd:bf:b1:b5:d3:8a:ea:7a:e9:d0:11:b1:b7:7c:b3:61:83:f5:
         77:02:83:7b:aa:d5:1c:c5:06:da:3d:40:e1:19:f2:3c:34:83:
         42:e3:40:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:24 2024 by rpki-client on console-ams.rpki-client.org