Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/8b466fc3-8038-3f38-b91f-93d37a58dec6.roa
File:                     8b466fc3-8038-3f38-b91f-93d37a58dec6.roa (raw, json)
Hash identifier:          eK21K9JnqbmbMWCKiCso8+52NmR5spCAFtSxjWH9+08=
Subject key identifier:   28:DF:17:F9:BF:93:D8:E2:1B:E2:29:92:7E:7B:E0:81:5C:16:7B:BA
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F432858475EA62126C0900276FF1EFEC0
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/8b466fc3-8038-3f38-b91f-93d37a58dec6.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     27773
IP address blocks:        205.211.226.0/23 maxlen: 24
                          205.211.228.0/24 maxlen: 24
                          205.211.235.0/24 maxlen: 24
                          205.211.243.0/24 maxlen: 24
                          209.124.98.0/24 maxlen: 24
                          209.124.99.0/24 maxlen: 24
                          209.124.102.0/24 maxlen: 24
                          209.124.108.0/23 maxlen: 24
                          209.124.110.0/24 maxlen: 24
                          209.124.112.0/21 maxlen: 24
                          209.124.126.0/24 maxlen: 24
                          209.124.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:21:26:c0:90:02:76:ff:1e:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=4d5ddee8-310c-4a67-887c-c8ebfababe81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:9d:9c:cb:4c:7c:cc:39:03:a0:88:b7:8e:
                    b1:98:0f:92:60:d3:03:61:cc:5d:55:69:d2:0c:91:
                    6c:8f:2e:87:1a:87:e3:c0:92:65:db:a6:ba:52:a8:
                    b2:b0:48:5c:61:51:46:66:89:4a:9e:aa:ae:fb:77:
                    c4:9e:43:06:ee:7d:4d:c4:d4:a2:b2:e2:ef:16:9b:
                    dd:08:90:4f:1a:78:98:69:79:68:ad:92:68:71:9a:
                    c4:c1:3f:d3:27:3c:de:02:8b:59:79:b4:70:cd:81:
                    38:93:7b:c3:ec:3d:57:b8:2f:0c:bc:50:24:ee:5f:
                    99:63:3c:5f:93:b3:95:58:80:ae:88:78:3e:cf:87:
                    2a:71:ef:d1:9f:01:ae:18:33:28:2f:f5:4d:a0:a4:
                    13:12:59:d3:e0:18:36:7d:47:84:00:8f:0c:e1:ff:
                    f1:f6:e1:1f:3a:26:70:57:23:a4:b9:a6:7d:34:44:
                    6b:c8:ff:61:be:61:1c:2f:0f:5c:f6:c7:4d:46:d6:
                    1b:b0:7c:af:32:b2:e0:31:cb:75:b1:94:07:7e:60:
                    8f:70:a9:9b:30:57:8a:a3:13:55:80:c4:7d:be:36:
                    5a:32:77:4a:db:d5:e5:36:00:f6:a8:ba:13:4b:ac:
                    02:05:0a:93:33:b0:1f:dd:97:bf:61:21:b1:88:48:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DF:17:F9:BF:93:D8:E2:1B:E2:29:92:7E:7B:E0:81:5C:16:7B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/8b466fc3-8038-3f38-b91f-93d37a58dec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.226.0-205.211.228.255
                  205.211.235.0/24
                  205.211.243.0/24
                  209.124.98.0/23
                  209.124.102.0/24
                  209.124.108.0-209.124.110.255
                  209.124.112.0/21
                  209.124.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:3e:80:33:02:26:35:4c:52:17:c3:2b:0c:29:4c:15:7f:
         85:65:c0:d1:a4:f2:de:9b:65:e8:c2:3c:c4:a1:d2:9c:67:a1:
         f6:4f:64:e4:11:f4:bf:4a:85:b2:92:a9:e4:24:d0:b8:5e:a4:
         36:a1:ec:f6:97:d1:1c:b6:50:7a:59:94:ce:33:9a:71:84:bd:
         6e:53:cb:75:f9:5b:28:e2:0f:8a:cd:0b:f1:5b:91:c6:b0:d6:
         e2:3f:d5:35:c6:6f:da:51:5b:c6:8f:cb:8b:ba:05:14:46:bd:
         9c:18:14:8b:91:dc:21:14:c6:3a:19:0a:14:07:78:37:c9:6c:
         ba:ed:7b:0f:7f:c5:24:f3:70:6f:96:1e:d6:1a:79:83:87:fd:
         0b:61:e3:0b:8b:b9:93:d4:3d:fb:53:00:3a:4c:4b:ea:3b:59:
         59:fd:56:ac:5b:87:b1:fe:ca:41:25:65:18:ea:65:35:73:47:
         05:b8:2c:3a:93:de:2f:b9:e0:2c:34:a2:1b:11:30:11:b9:20:
         74:19:89:98:26:88:8b:c0:1f:58:49:03:47:ad:e2:07:9d:f5:
         c1:93:54:d9:6a:de:4f:3b:8d:01:43:3a:9f:d2:23:00:45:f8:
         bd:ee:60:5a:25:53:20:12:c6:1f:9e:1e:c8:18:54:6f:2b:b8:
         7d:2c:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:36 2024 by rpki-client on console-fra.rpki-client.org