Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa
File:                     d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa (raw, json)
Hash identifier:          zDpUsoNwVEFNBg08oNaUxTbWSZoV+ucIyxxokZRs62A=
Subject key identifier:   E7:6C:A2:64:ED:61:46:CB:54:BC:F1:93:D0:AF:22:27:62:63:32:DE
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285847BAC6AA9A92EB1273F17B7680
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     396949
IP address blocks:        43.231.235.0/24 maxlen: 24
                          78.138.46.0/24 maxlen: 24
                          78.138.51.0/24 maxlen: 24
                          83.229.5.0/24 maxlen: 24
                          83.229.35.0/24 maxlen: 24
                          104.129.130.0/24 maxlen: 24
                          104.129.131.0/24 maxlen: 24
                          104.225.140.0/24 maxlen: 24
                          104.225.141.0/24 maxlen: 24
                          138.128.242.0/24 maxlen: 24
                          138.128.243.0/24 maxlen: 24
                          138.128.244.0/24 maxlen: 24
                          162.251.146.0/24 maxlen: 24
                          162.251.147.0/24 maxlen: 24
                          199.19.74.0/24 maxlen: 24
                          213.255.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:aa:9a:92:eb:12:73:f1:7b:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=7ab123a1-6086-421a-8890-989a42e3f73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:a2:b6:3c:4e:7a:c1:84:77:8b:bf:f8:24:
                    9c:f4:c5:2c:eb:fc:58:00:5e:f2:85:43:74:eb:e5:
                    6b:30:4e:09:9c:60:49:40:d1:12:38:9a:65:93:cd:
                    9e:1e:67:99:30:f9:9f:36:b3:c5:ec:2b:f9:aa:da:
                    6f:19:bd:4f:4a:c9:7e:ad:93:d0:16:7d:b6:3c:95:
                    f5:75:8c:d5:a8:c9:94:3f:45:a1:0d:e5:a6:74:c6:
                    b2:cd:9f:97:49:66:51:2b:b8:57:77:fe:ee:e7:5b:
                    2b:fd:2b:72:2e:5a:34:76:d1:3a:17:6d:56:33:2a:
                    58:32:ec:0c:13:37:ff:69:e6:4a:9c:33:e9:9e:ed:
                    d9:71:c0:9c:5b:eb:36:b7:6c:dd:cb:51:27:64:7a:
                    85:e1:fd:71:72:20:d4:51:e1:bf:07:aa:f5:ff:fa:
                    9e:d3:a3:df:dd:c4:a1:3b:60:4c:10:e0:c2:2d:cf:
                    c2:46:c3:a1:16:51:d7:17:c7:d4:5a:c4:78:ac:3a:
                    7f:d3:3b:e6:17:8e:a8:c4:a5:9a:cc:16:0f:06:5b:
                    cc:e4:37:9f:51:1e:9b:28:69:5d:02:da:c0:f7:a0:
                    e1:b3:60:ff:48:0d:81:cd:19:5c:9c:ba:10:f0:15:
                    83:1e:82:8e:8c:25:d2:5f:e0:a2:44:62:4f:4d:8e:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6C:A2:64:ED:61:46:CB:54:BC:F1:93:D0:AF:22:27:62:63:32:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.235.0/24
                  78.138.46.0/24
                  78.138.51.0/24
                  83.229.5.0/24
                  83.229.35.0/24
                  104.129.130.0/23
                  104.225.140.0/23
                  138.128.242.0-138.128.244.255
                  162.251.146.0/23
                  199.19.74.0/24
                  213.255.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:ee:93:09:79:88:83:73:cd:16:5d:e2:fc:04:48:d6:20:
         14:9c:5a:4a:ed:de:6c:bc:13:5a:a0:5c:3f:90:04:8e:48:f8:
         73:34:dd:83:fc:29:67:96:8b:30:04:87:f4:8a:51:34:36:88:
         6c:fc:1f:61:8f:65:07:51:69:46:57:cd:56:35:79:34:a8:34:
         1a:55:ff:e7:56:4a:9b:fb:3f:fa:09:51:04:9e:f2:77:d1:27:
         82:b4:55:46:1d:f2:ba:47:cd:7b:e6:6f:04:7b:62:8b:8c:5a:
         3e:d6:49:cf:b1:e4:af:8f:69:82:0a:d9:9d:7d:4c:cd:43:f8:
         2f:fd:93:ee:58:f2:05:9f:ef:75:9d:76:a5:56:33:e5:29:55:
         97:2d:99:31:cc:41:76:8e:fd:c7:fb:67:18:ae:23:21:96:ae:
         80:df:72:ff:25:ab:b4:83:dc:82:0d:ca:0a:8d:1c:6f:bc:57:
         39:a0:11:b4:4a:71:bd:cd:cf:76:f0:c7:45:2c:34:83:5f:25:
         77:6c:c0:bf:71:04:0b:f4:96:da:33:bd:e3:c0:a2:95:95:4b:
         d7:72:31:46:13:00:a1:d2:62:07:9c:88:03:a7:45:a8:dc:21:
         7e:35:c6:0d:54:d0:99:de:9a:86:84:dc:e2:10:d5:dc:83:50:
         c4:35:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org