Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa
File:                     4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa (raw, json)
Hash identifier:          zfQ8MpT+6edTRtmEqzJb7tc0PfA+7veJyPlQhQE3n6s=
Subject key identifier:   F0:F3:59:0B:EB:28:CF:FD:99:8C:B2:B2:B9:9A:09:53:C1:3D:89:F8
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F432858475EA61969EE13015A6F7DC500
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     398772
IP address blocks:        66.180.138.0/23 maxlen: 24
                          66.180.141.0/24 maxlen: 24
                          66.180.144.0/24 maxlen: 24
                          66.180.147.0/24 maxlen: 24
                          66.180.148.0/23 maxlen: 24
                          66.180.151.0/24 maxlen: 24
                          66.180.152.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:19:69:ee:13:01:5a:6f:7d:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=79159839-a78e-4fdc-8c8f-52b0e850408c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:71:43:0d:f5:56:13:dd:19:17:73:40:b5:
                    c5:a3:74:df:9b:1c:48:3c:74:aa:0a:41:30:93:b3:
                    fd:aa:bc:9f:a0:f9:ca:41:f5:a6:3c:04:ee:8a:8f:
                    54:9c:83:4d:f4:13:dc:f8:e3:4a:d9:31:29:0e:11:
                    9a:05:a5:99:fc:89:f4:92:b9:3a:8c:cb:cd:e5:84:
                    c1:af:5e:03:b8:f7:c3:6e:00:d2:65:63:c8:55:84:
                    b5:6b:36:7e:a4:6b:cb:8f:cd:cd:be:ea:03:b1:a1:
                    f1:ce:e2:37:53:b2:df:19:c7:9e:e8:52:de:3f:f9:
                    e8:6d:dd:34:a6:df:a1:e6:f8:ec:3e:0b:10:e1:59:
                    8c:cf:21:02:26:46:5e:62:dc:3e:bc:06:64:08:c8:
                    85:f7:1e:d9:df:5c:b1:c2:1a:4d:29:d2:b3:b8:c2:
                    5a:67:91:37:0f:27:96:ea:00:8e:af:44:54:77:1c:
                    d9:5d:b6:6f:2f:88:58:4b:c2:73:98:d1:6f:58:26:
                    fd:6a:ab:4e:0a:b8:76:e5:da:b9:ea:9c:5a:5e:9a:
                    47:cf:94:48:ac:5e:cd:0c:d8:60:79:6e:08:4d:93:
                    28:ed:b9:03:f2:c6:94:1f:51:d5:d8:68:11:23:14:
                    21:89:b7:bd:12:2a:4f:f6:0c:b2:d5:06:1b:c2:53:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:59:0B:EB:28:CF:FD:99:8C:B2:B2:B9:9A:09:53:C1:3D:89:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/4f32464a-fbf0-3ae9-8ca9-572e079df9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.138.0/23
                  66.180.141.0/24
                  66.180.144.0/24
                  66.180.147.0-66.180.149.255
                  66.180.151.0-66.180.153.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:18:a4:6d:e8:93:b3:61:e4:4e:74:c3:06:84:63:06:0f:
         99:60:26:43:d0:4e:5f:5f:2f:ba:81:8a:27:39:d8:47:6d:69:
         56:aa:9d:f2:8e:cd:1f:5d:8f:45:03:12:0d:7b:d5:3b:b4:f1:
         f1:0a:e6:12:1d:97:a2:02:a9:02:7c:be:3d:82:2c:de:6c:37:
         f6:a9:90:25:03:b1:fa:8b:ab:94:dd:13:6f:1a:1c:9a:f4:b3:
         b9:ca:12:05:93:c5:45:40:05:0e:b0:28:76:85:93:fa:a1:f8:
         27:2c:00:fa:50:6e:eb:25:89:48:eb:f2:b5:ab:30:c5:91:9f:
         1e:3d:a2:d3:8d:bf:b5:b7:4c:55:b7:f7:08:5f:0a:36:f7:5a:
         1d:0c:73:c7:a4:08:91:5e:ed:d5:51:df:e4:6f:d3:92:dc:42:
         45:ec:fe:ad:75:67:01:2f:74:18:16:ec:8f:4b:40:19:7f:82:
         63:e8:7f:4b:ef:ab:e2:af:08:ed:3c:1e:b8:ed:a7:e9:46:ec:
         7c:7a:d7:51:fb:ba:aa:92:78:e0:26:70:ff:30:cb:fb:e4:dd:
         e6:d5:06:ed:33:19:cd:4c:46:f2:10:bd:78:fc:99:5e:54:a9:
         b8:c0:4f:d3:c5:90:51:ca:9a:f2:e0:79:8c:d0:ba:dc:0d:c9:
         7b:b6:97:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:00 2024 by rpki-client on console-ams.rpki-client.org