Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa
File:                     3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa (raw, json)
Hash identifier:          4XhdTJ6oVlFRuYF63rs2PrOpFE4s32onO54fb1lKIWU=
Subject key identifier:   0F:53:C8:7C:21:D2:4E:71:4D:DE:2B:07:21:77:C7:88:16:C4:61:A7
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285847B10161DC8E1730726C9FB7C0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     6621
IP address blocks:        72.170.0.0/19 maxlen: 19
                          72.170.208.0/24 maxlen: 24
                          72.170.209.0/24 maxlen: 24
                          72.170.210.0/24 maxlen: 24
                          72.170.211.0/24 maxlen: 24
                          72.170.212.0/24 maxlen: 24
                          72.170.213.0/24 maxlen: 24
                          72.170.214.0/24 maxlen: 24
                          72.170.215.0/24 maxlen: 24
                          72.170.216.0/24 maxlen: 24
                          72.170.220.0/23 maxlen: 23
                          72.170.223.0/24 maxlen: 24
                          72.170.224.0/24 maxlen: 24
                          72.170.225.0/24 maxlen: 24
                          72.170.226.0/24 maxlen: 24
                          72.170.227.0/24 maxlen: 24
                          72.170.228.0/24 maxlen: 24
                          72.170.229.0/24 maxlen: 24
                          72.170.230.0/24 maxlen: 24
                          72.170.231.0/24 maxlen: 24
                          72.170.232.0/24 maxlen: 24
                          72.170.233.0/24 maxlen: 24
                          72.170.234.0/24 maxlen: 24
                          72.170.235.0/24 maxlen: 24
                          72.170.236.0/24 maxlen: 24
                          72.170.237.0/24 maxlen: 24
                          72.170.238.0/24 maxlen: 24
                          72.170.239.0/24 maxlen: 24
                          72.170.240.0/24 maxlen: 24
                          72.170.241.0/24 maxlen: 24
                          72.170.242.0/24 maxlen: 24
                          72.170.243.0/24 maxlen: 24
                          72.170.244.0/24 maxlen: 24
                          72.170.245.0/24 maxlen: 24
                          72.170.246.0/24 maxlen: 24
                          72.170.247.0/24 maxlen: 24
                          72.170.248.0/24 maxlen: 24
                          72.170.249.0/24 maxlen: 24
                          72.170.250.0/24 maxlen: 24
                          72.170.251.0/24 maxlen: 24
                          72.170.252.0/24 maxlen: 24
                          72.170.253.0/24 maxlen: 24
                          72.170.254.0/24 maxlen: 24
                          72.170.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:61:dc:8e:17:30:72:6c:9f:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=7e067919-0c37-468b-9bc7-0551c425570b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:3b:19:01:b7:e0:ec:1a:40:fa:e5:c1:f4:
                    ea:20:36:8d:3e:6d:8d:a1:32:57:09:fd:21:db:48:
                    17:be:ff:10:48:d9:ca:ec:e5:c2:dc:40:11:88:27:
                    31:e8:ac:22:a9:31:87:05:fe:e9:ab:cd:c4:1d:d4:
                    af:b0:de:74:15:19:bf:2e:84:52:f0:4f:8f:96:8d:
                    e4:76:73:d0:68:9c:94:3a:18:16:29:f9:8c:4b:a6:
                    42:f9:30:55:ce:0f:f2:b9:51:29:bb:0b:17:f3:8b:
                    42:de:57:76:f9:f7:30:11:fb:87:3c:79:07:f0:ec:
                    c7:5c:e8:53:3f:72:9b:f6:82:2e:74:af:f5:19:27:
                    3b:69:72:9c:85:b0:c5:ae:91:a4:5e:98:8b:6d:b0:
                    ca:d3:cb:8c:5f:7f:f5:95:28:0e:c3:89:2f:3b:f3:
                    7d:00:f3:a3:21:c8:ea:42:50:f3:5f:88:13:8a:0d:
                    49:13:61:37:e9:ee:49:c4:c1:56:52:07:ae:80:00:
                    b5:4f:33:eb:97:37:2b:9e:8e:75:bb:f3:a3:ea:a9:
                    09:84:96:a0:17:f5:39:70:d4:16:9c:19:8e:a4:5e:
                    6c:ba:33:71:e4:2b:31:76:11:b1:d6:46:c7:87:9c:
                    8d:f9:9e:20:02:ff:b2:80:b6:4a:ea:b2:c0:e0:12:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:53:C8:7C:21:D2:4E:71:4D:DE:2B:07:21:77:C7:88:16:C4:61:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3871f1a7-c32a-314b-bdfd-606ab94f5e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.170.0.0/19
                  72.170.208.0-72.170.216.255
                  72.170.220.0/23
                  72.170.223.0-72.170.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:5a:93:fe:ff:57:1d:ec:92:96:37:e7:f4:db:f7:d1:cf:
         60:e6:fd:8d:da:f8:fe:a0:08:67:f8:24:c6:22:a5:b9:19:63:
         6b:44:6e:34:83:56:80:86:5b:56:dd:fc:1d:c7:9f:4b:49:44:
         6d:e3:66:2d:8d:40:a4:66:e5:56:0e:75:d6:18:0e:d9:ca:08:
         ff:48:27:9d:4d:a5:69:69:7c:7e:2d:73:c8:8d:d5:8d:42:32:
         a9:94:a8:0b:16:91:e2:31:27:c2:28:68:7e:10:b1:b6:10:40:
         1e:a1:50:32:ab:ed:70:a5:20:43:bd:63:b8:5e:ed:f3:73:dd:
         5a:0c:89:d5:38:e1:a2:4c:b5:21:95:77:4e:f2:0f:60:81:56:
         61:6a:ed:38:71:60:f9:3b:43:a5:e6:98:d8:bc:6b:83:55:8b:
         9a:98:07:15:bb:e8:e3:f7:ac:8b:a9:d1:84:db:8d:18:05:fb:
         ee:83:87:d1:64:80:21:76:5f:c8:6b:ad:14:b4:b3:ff:1f:9b:
         a2:2e:a4:86:60:c4:29:c3:43:f4:55:94:5e:6f:78:bb:8c:32:
         93:66:31:85:ec:98:19:92:fb:8b:48:ba:6e:a5:ee:3d:88:e0:
         85:39:2d:e0:21:ec:0e:1a:e6:d2:84:f3:1f:07:1d:a1:89:d6:
         46:cf:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org