Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa
File:                     0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa (raw, json)
Hash identifier:          ya9U/h+iLS0cx3Eg39yrR2AJN4vya0W/AemzUiMXlUs=
Subject key identifier:   7F:08:84:19:DB:98:12:AC:D3:94:9C:F4:FE:E4:79:3E:15:FB:1D:F2
Certificate issuer:       /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Certificate serial:       010D0C9F432858476E01060A6885B947CBBC80C0
Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     35906
IP address blocks:        162.250.104.0/21 maxlen: 24
                          199.21.184.0/22 maxlen: 24
                          199.180.192.0/22 maxlen: 24
                          199.201.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:06:0a:68:85:b9:47:cb:bc:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=b82addd9-96c3-43a4-863c-1eed47ede467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:cc:b6:4e:1a:45:e0:c4:c9:6f:80:63:55:
                    3b:28:9c:15:a5:8d:ca:eb:d7:c9:d2:77:33:0e:f0:
                    c0:8a:84:8e:87:34:cb:76:79:e6:10:a6:ad:b5:db:
                    18:5b:25:64:19:83:51:6d:33:25:f3:05:6e:08:0b:
                    e8:e3:e7:43:be:d2:fd:57:4a:b0:e3:0b:64:b5:40:
                    74:40:83:cd:c9:d4:f6:69:1c:45:b4:a2:8b:67:0a:
                    eb:36:a4:96:99:f2:9d:00:5d:53:03:7e:d4:7b:e8:
                    d5:ac:ef:ed:4f:ad:84:50:9f:79:04:b9:66:f6:dc:
                    a5:b9:e5:74:b2:8e:4d:42:c6:fd:4b:03:d8:ae:c6:
                    9d:35:e2:1e:63:28:05:82:e6:11:8f:ce:6d:08:2d:
                    a2:08:b0:eb:23:fd:a9:fb:28:2c:f0:e7:30:5f:dd:
                    da:31:44:0d:ec:7c:56:65:95:b1:66:60:7c:b6:0c:
                    e4:3c:73:c0:eb:2c:fb:07:6a:93:45:17:46:69:43:
                    bb:90:a1:36:ed:29:ac:d9:ee:8c:02:54:d1:ac:59:
                    1c:b8:fb:44:a4:e0:97:c7:91:f1:09:ba:ee:0a:6e:
                    69:92:1d:6d:21:ba:52:9a:b9:58:ba:d3:b9:7f:b4:
                    bf:28:5e:65:3b:13:d5:d6:65:80:bf:26:ed:a1:98:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:08:84:19:DB:98:12:AC:D3:94:9C:F4:FE:E4:79:3E:15:FB:1D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/0bbfdd8e-01bd-3cc4-81eb-0aa51db18100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.104.0/21
                  199.21.184.0/22
                  199.180.192.0/22
                  199.201.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:63:47:00:c4:88:e4:8e:fa:23:e1:ac:23:8e:89:22:dc:c4:
         45:62:66:6d:42:c9:95:eb:cf:2b:a3:b6:26:02:06:89:d8:92:
         3d:df:88:d5:01:47:0d:4d:ba:90:23:70:57:8e:89:13:bc:fd:
         76:11:77:c0:21:4f:9b:c8:5d:24:12:a0:54:86:c4:1e:d2:19:
         10:e0:58:a1:c2:a7:dd:09:d2:61:8c:96:ef:a8:1e:3c:e6:71:
         fb:c4:2c:85:43:ba:2d:f7:5f:aa:f4:7f:c0:aa:c8:de:80:81:
         db:89:94:32:14:22:0b:e0:cc:f6:4a:7b:af:43:a9:08:0a:b0:
         1a:d0:c5:f9:4c:79:07:35:1c:26:44:58:fe:ab:c1:e4:30:17:
         1d:c4:a2:da:05:c4:44:55:58:4b:09:19:69:38:12:2f:8e:b0:
         f9:a2:08:61:e9:a3:55:00:b3:f5:b1:46:0a:42:86:e9:80:00:
         16:09:a4:9b:b9:6b:04:42:92:ab:29:48:64:b9:b6:ed:d9:2b:
         8f:cb:c1:d6:ed:4c:03:5a:d0:71:1b:7e:74:f1:e1:2e:a4:01:
         9e:4d:a5:fa:39:d9:2b:b4:c7:b8:e5:f3:8e:3c:a0:b5:9c:39:
         52:38:e8:8b:40:ec:76:1e:6c:83:ee:34:48:0e:28:26:3b:41:
         97:89:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:27 2024 by rpki-client on console-ams.rpki-client.org