Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
File:                     065ac7bb-bf21-3a5a-847d-e97aa48db175.roa (raw, json)
Hash identifier:          b9QS9Bw+6z7P1HYTtje6UbMGJCbTYK4Q/GsjaMRZy2c=
Subject key identifier:   DC:57:A0:77:67:D0:B0:FF:3A:CB:B3:67:64:4A:B1:E6:F3:9E:4F:47
Certificate issuer:       /CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
Certificate serial:       010D0C9F43285847299B12CB01D5CA51C4F6CFC0
Authority key identifier: 46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     13427
IP address blocks:        137.83.103.0/24 maxlen: 24
                          173.243.64.0/20 maxlen: 20
                          192.96.17.0/24 maxlen: 24
                          192.156.255.0/24 maxlen: 24
                          198.153.60.0/22 maxlen: 22
                          2604:8d80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:12:cb:01:d5:ca:51:c4:f6:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=a4057965-5ca0-4f26-a153-fa38fa7421f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:da:60:00:84:50:5c:50:6b:95:5a:07:3d:58:
                    10:aa:16:92:c4:b8:f3:51:3e:c3:07:b1:95:19:bb:
                    23:8a:0d:8e:8e:ae:19:ba:e3:a1:6d:f9:d4:42:d4:
                    c0:01:c4:c7:f4:91:2f:e3:65:58:4e:70:dd:73:ea:
                    c9:d6:43:9b:b8:71:9b:19:8e:7c:82:c5:b5:98:69:
                    5b:ab:97:b0:6c:7f:dd:fb:5d:31:38:00:5e:95:bf:
                    fa:fb:d0:9e:a6:21:bb:03:df:08:22:1d:e8:ae:32:
                    c9:18:fe:3e:15:75:f6:56:68:35:59:55:ed:fd:62:
                    0a:ce:4d:56:3d:0b:48:6d:b6:38:6d:a4:5e:bc:5b:
                    fa:28:51:c1:c6:06:4c:cb:f0:0b:cf:23:eb:8e:ac:
                    6c:5e:db:fa:79:35:b2:3e:02:af:8f:c4:7f:43:ef:
                    c0:ba:a0:c9:0f:3f:65:c9:de:c1:89:e3:9c:2b:61:
                    92:e6:42:00:fc:2f:34:dd:24:6a:c6:0c:34:3a:00:
                    b0:27:08:a7:38:5d:c6:ba:d1:29:75:81:08:d3:ab:
                    2a:56:58:ae:e5:17:12:57:4e:b2:ed:33:75:00:eb:
                    45:c9:f7:a7:0d:ae:e0:8e:fc:77:75:b7:24:bc:d2:
                    b5:d7:6a:e0:de:7d:dc:17:77:43:8c:a9:1d:d0:c1:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:A0:77:67:D0:B0:FF:3A:CB:B3:67:64:4A:B1:E6:F3:9E:4F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl

            X509v3 Authority Key Identifier:
                keyid:46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.103.0/24
                  173.243.64.0/20
                  192.96.17.0/24
                  192.156.255.0/24
                  198.153.60.0/22
                IPv6:
                  2604:8d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:f6:c5:4b:53:1a:3c:6a:6c:79:f6:a8:5c:4c:21:49:cd:72:
         3e:3b:1c:e3:87:0e:99:52:d7:d4:d6:ab:ad:65:2f:49:76:58:
         fd:fc:a9:b5:1b:ba:29:15:89:7a:0a:26:93:c8:ca:34:29:5a:
         79:48:73:d2:96:7d:66:68:c3:5f:b4:95:4f:d1:48:44:0f:62:
         5f:1c:31:56:e5:2d:40:78:25:52:dd:c4:c0:2e:79:c1:61:d5:
         ad:73:f9:c4:88:08:a9:9a:8b:ea:27:93:47:a2:cc:b4:03:05:
         22:bb:60:b0:73:39:9d:4b:c4:d6:28:30:56:3b:f8:05:89:57:
         50:f9:3a:fe:31:4d:c6:90:ec:a0:97:1e:9e:30:a9:74:8f:d5:
         ae:48:23:ea:70:54:48:9d:68:03:01:f0:22:6b:56:71:6a:f5:
         d3:8b:84:cd:7d:45:d0:65:e3:b3:b8:02:8f:79:b9:40:78:ff:
         7e:22:b7:09:c2:ce:13:fa:1a:95:dd:0e:29:18:87:df:14:2b:
         50:a3:d8:e6:fe:fe:99:11:07:c8:ea:9b:1f:df:c4:65:bb:96:
         21:c9:9e:27:a2:92:57:2d:08:ff:5d:54:34:c1:ac:83:e4:64:
         01:0f:c8:94:76:39:f6:21:23:24:67:4a:5d:7f:db:cd:48:69:
         37:0d:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:13 2024 by rpki-client on console-fra.rpki-client.org