Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/ee2afd24-50fb-3e26-b4d4-d8ffff2901cb.roa
File:                     ee2afd24-50fb-3e26-b4d4-d8ffff2901cb.roa (raw, json)
Hash identifier:          qGGr+CRTRLNxVDywAlzthAxugDTFH2w/HYb89PTTR0o=
Subject key identifier:   7C:3B:AE:7B:C7:9D:26:03:19:2C:61:24:0A:21:E2:E7:54:7A:07:DB
Certificate issuer:       /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
Certificate serial:       010D0C9F432858473D25DDFC526FE82B506FA1A0
Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/ee2afd24-50fb-3e26-b4d4-d8ffff2901cb.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     12175
IP address blocks:        66.243.212.0/22 maxlen: 24
                          66.243.223.0/24 maxlen: 24
                          66.243.225.0/24 maxlen: 24
                          66.243.226.0/24 maxlen: 24
                          71.161.76.0/22 maxlen: 24
                          74.209.8.0/22 maxlen: 24
                          74.209.52.0/22 maxlen: 24
                          216.227.6.0/23 maxlen: 24
                          216.227.100.0/22 maxlen: 24
                          216.227.104.0/21 maxlen: 24
                          216.227.112.0/22 maxlen: 24
                          216.227.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:dd:fc:52:6f:e8:2b:50:6f:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=0f872906-79e9-4a87-965e-5ffca5e12e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:7d:74:81:db:61:c6:ee:8e:35:5c:49:e3:
                    64:11:fe:8c:de:8f:5d:a6:fd:e0:e2:cc:50:f2:d8:
                    ef:92:10:d8:47:56:4e:03:48:d5:eb:ed:bb:f1:92:
                    3b:a8:35:81:84:0d:4a:e2:be:fe:17:34:5f:96:d5:
                    5e:16:d6:2e:93:af:2d:0f:60:f2:5c:67:18:17:b1:
                    96:e8:51:36:55:5d:d6:80:25:36:e5:b4:65:2b:d1:
                    36:2d:54:ef:79:4b:17:49:ef:7e:7b:d4:85:ad:ab:
                    35:d6:b6:63:9c:54:d4:e7:d0:3c:91:a1:b1:ab:82:
                    b6:da:e3:66:36:45:82:44:70:84:b3:75:95:93:be:
                    67:2b:10:5a:29:1d:1b:f0:a5:ba:39:f0:bc:2d:55:
                    b2:01:a3:d3:4c:de:a8:1d:e8:c9:ae:a6:05:75:d0:
                    65:74:52:bf:b8:b9:d4:eb:d0:ba:73:48:b7:5f:b6:
                    a0:6e:ae:0a:44:55:25:90:57:6b:27:54:1e:3b:5a:
                    1f:83:52:55:6f:3c:8b:55:b9:3f:30:17:d1:4e:44:
                    2e:31:20:78:95:8f:8f:b3:0e:a5:71:70:a8:37:eb:
                    20:b9:fc:7e:a5:ad:37:94:2a:6d:85:89:17:a4:9f:
                    48:b6:12:32:75:97:a8:78:40:f7:88:cf:78:f0:5f:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:AE:7B:C7:9D:26:03:19:2C:61:24:0A:21:E2:E7:54:7A:07:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/ee2afd24-50fb-3e26-b4d4-d8ffff2901cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.243.212.0/22
                  66.243.223.0/24
                  66.243.225.0-66.243.226.255
                  71.161.76.0/22
                  74.209.8.0/22
                  74.209.52.0/22
                  216.227.6.0/23
                  216.227.100.0-216.227.117.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:78:58:01:0a:95:e9:27:ec:b4:db:e6:0f:15:88:0a:3c:a2:
         8b:8a:06:7f:54:03:93:63:5c:b5:d4:04:84:75:7b:bf:17:1f:
         4d:78:56:64:71:b5:c8:ef:eb:33:86:33:85:fe:ff:50:15:91:
         6f:6a:65:23:52:82:dd:0f:f8:52:7b:2e:43:ee:54:46:3e:88:
         f0:33:cd:05:9c:a3:75:c1:1b:63:ca:65:86:9f:c3:f7:72:34:
         3d:25:e2:86:5c:90:e0:6b:f8:03:29:a0:81:c7:88:06:40:08:
         ff:30:35:4d:2e:75:1c:a0:db:2d:72:3c:80:39:82:d2:1f:32:
         a4:4c:53:0f:0a:c3:b9:a1:83:7a:d6:a1:6d:ed:b9:ec:18:7b:
         5d:eb:a7:0e:1b:d1:d8:b2:a7:e7:c8:02:1a:7f:d3:a0:0c:24:
         bf:15:c3:3c:dc:79:e3:ca:c5:de:84:0c:f6:e8:8a:b4:c4:5c:
         e1:bf:68:49:10:81:f9:79:00:e2:2c:4c:fb:39:ef:76:dd:07:
         7a:71:11:c3:41:46:f4:e2:c4:04:ba:16:dd:d3:0a:46:2b:60:
         33:ff:fa:2d:a3:af:a1:f9:b3:ce:d2:2d:2b:c7:36:fc:dc:03:
         36:e4:ff:2e:a4:f0:1d:42:01:b5:27:c1:4d:51:8f:75:19:89:
         b8:7b:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:59 2024 by rpki-client on console-ams.rpki-client.org