Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa
File:                     de58c588-4488-3729-a7e1-98130f91c66c.roa (raw, json)
Hash identifier:          9V0cPzNhfFzY9Tb+9HC+prHP/cARgmhKbQ8hsJ/lgoM=
Subject key identifier:   2F:A6:A7:9D:06:99:71:F8:F1:81:87:00:0B:BD:F2:9E:0A:23:1D:28
Certificate issuer:       /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849
Certificate serial:       010D0C9F432858478CB68A76456408E7FA8D5400
Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     32867
IP address blocks:        64.5.64.0/20 maxlen: 20
                          64.186.16.0/21 maxlen: 21
                          66.172.192.0/18 maxlen: 18
                          74.221.32.0/20 maxlen: 20
                          199.116.180.0/22 maxlen: 22
                          199.247.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8a:76:45:64:08:e7:fa:8d:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=e0acc6dd-140d-424e-a9fb-7f9fc00596d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:8e:d9:72:e9:ce:74:b0:ff:dc:b9:10:5d:
                    d7:c6:36:d8:9d:58:de:92:f4:1e:37:68:6b:73:a6:
                    0e:6f:20:be:9a:9d:cf:a0:ae:0e:24:2b:72:15:b4:
                    54:9d:45:92:bb:87:ac:21:05:0c:6b:70:c0:8b:f8:
                    9b:77:81:14:d1:9e:ad:3b:0f:c8:5e:1e:00:8b:e6:
                    30:f8:59:ca:1a:dc:8b:ac:be:cc:d5:83:cf:74:5b:
                    79:92:16:80:a9:f9:c0:c4:b8:2d:2a:74:b6:83:a7:
                    8b:e5:54:78:12:a8:95:72:5a:ee:ce:01:21:c0:0a:
                    d3:92:82:42:ab:e5:98:d5:21:27:8c:9a:d8:0e:7e:
                    ae:21:e3:ee:f5:c9:2e:bc:b2:69:62:b7:1d:42:f1:
                    d5:7a:a4:6b:26:93:3e:49:2f:1f:04:f9:b7:9f:f2:
                    19:15:e1:bb:7d:02:14:03:6d:28:cd:d2:b3:cc:91:
                    84:70:d5:80:d1:d8:c5:a0:a9:fe:79:76:30:45:e6:
                    69:eb:be:bc:7a:b6:0b:45:ae:ea:9a:c5:51:94:0c:
                    b0:45:db:fc:8d:59:9b:c7:4d:45:c5:06:3b:f7:80:
                    6c:0a:6d:50:e2:39:aa:bf:bf:ea:0f:98:75:cb:bf:
                    29:63:51:ef:82:ba:33:52:a9:a7:4c:37:69:f0:4b:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:A7:9D:06:99:71:F8:F1:81:87:00:0B:BD:F2:9E:0A:23:1D:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl

            X509v3 Authority Key Identifier:
                keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.5.64.0/20
                  64.186.16.0/21
                  66.172.192.0/18
                  74.221.32.0/20
                  199.116.180.0/22
                  199.247.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:a9:4c:a1:d2:b4:19:6d:a6:33:34:86:c5:55:36:4d:5b:
         a4:be:b8:a4:f4:9f:3a:0e:ed:08:bb:47:49:9d:00:a1:f2:df:
         73:c1:a0:a0:b4:69:47:64:7f:bf:7c:6c:03:e7:aa:a3:4c:8b:
         a3:42:39:b6:93:72:82:e4:f8:93:71:ad:2d:26:24:b3:92:ef:
         75:1d:1a:f4:58:ff:f1:f1:4f:1f:b4:80:9e:e9:9b:ff:be:a8:
         29:da:27:69:ce:97:9d:a1:8f:b4:82:a2:5b:67:29:a9:0e:51:
         85:54:2f:82:ba:4c:33:32:1a:42:83:ed:89:75:11:8b:ae:3c:
         c5:6c:53:e2:1f:27:c0:c5:bc:7b:b3:8b:79:58:d6:62:b2:98:
         20:9a:08:9a:29:03:d7:32:d7:4a:4a:03:cf:96:6b:ab:34:eb:
         57:96:aa:77:54:df:a9:3c:06:d5:e6:22:64:0f:73:93:10:af:
         a7:16:a9:d8:49:35:a6:01:23:50:63:50:e0:d1:55:bb:a3:ef:
         bf:23:2c:b3:a7:00:ef:eb:38:92:99:17:3f:5f:24:89:cc:cb:
         25:e7:f6:05:93:70:30:a6:c6:a9:bf:c6:72:d6:cb:71:93:d1:
         e2:52:b7:f1:63:7d:be:ee:59:4a:3c:ba:99:0b:2e:1e:cc:53:
         8d:9f:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org