Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa
File:                     3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa (raw, json)
Hash identifier:          vwRlsZIs24fB/X6o14+Noq6JaLqrRSDAX+S+kWunWp4=
Subject key identifier:   34:8E:1F:CC:36:0F:6A:36:B3:1E:8D:34:C6:3B:23:5A:B7:1F:08:F4
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858478E1BCDFB448A35C566435230
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     20473
IP address blocks:        207.148.0.0/19 maxlen: 32
                          207.246.64.0/18 maxlen: 32
                          208.167.224.0/19 maxlen: 32
                          209.222.0.0/19 maxlen: 32
                          216.155.128.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:cd:fb:44:8a:35:c5:66:43:52:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=52a14cb1-7fa5-4783-ac80-bd8368806403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:c1:be:ed:4b:d3:71:c9:7f:d3:43:30:2d:
                    3d:27:07:24:89:2b:73:bd:96:45:39:e9:3a:4f:8b:
                    15:86:ff:86:f4:1c:b5:7a:52:e0:ac:ab:d2:02:f8:
                    4e:ce:b3:2e:7e:93:20:b2:8e:9e:f2:8c:e8:7f:5c:
                    c9:4a:33:59:60:f4:4a:97:4f:6b:18:04:a7:2f:99:
                    89:45:68:17:b0:60:bc:01:91:d4:df:89:83:20:67:
                    48:72:55:ee:a8:5f:c6:99:ad:09:fb:ff:b2:e0:22:
                    20:6d:3d:f1:ef:63:c6:99:ee:b9:d2:61:8c:d3:db:
                    9a:e4:57:a7:c0:86:35:a5:ca:9f:dc:fd:e9:c3:ae:
                    da:fc:3f:09:64:98:a6:e1:ac:d8:53:56:00:8f:41:
                    cd:06:99:9a:57:08:a9:4e:0c:87:83:12:43:b7:69:
                    33:81:72:13:61:98:a5:b9:da:03:89:ad:88:49:b2:
                    f9:9e:e8:40:8c:27:e3:8b:fe:49:0a:bd:d4:c1:b8:
                    15:c4:23:b3:6d:30:42:bf:43:f8:25:ce:23:91:86:
                    af:c5:21:a9:d6:61:97:3b:d5:ff:6c:2a:37:73:21:
                    65:3e:83:a8:d4:7c:95:76:ed:99:8a:16:16:ff:6b:
                    6b:a6:0a:86:86:03:43:30:b3:94:18:79:95:3c:d7:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8E:1F:CC:36:0F:6A:36:B3:1E:8D:34:C6:3B:23:5A:B7:1F:08:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.148.0.0/19
                  207.246.64.0/18
                  208.167.224.0/19
                  209.222.0.0/19
                  216.155.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:21:0a:d8:48:9d:71:29:ad:b7:20:37:d0:16:ad:60:29:
         51:f3:80:5d:1c:00:90:26:f8:52:eb:9f:60:1a:5a:42:e5:1a:
         7a:83:00:28:1c:89:92:ca:80:5a:9d:7f:d5:d5:61:b0:8d:cb:
         f4:49:58:0f:92:28:c4:c9:0d:b1:f9:0d:b0:23:76:0a:42:94:
         40:fc:f0:17:ca:52:09:32:56:75:89:fb:b4:87:e5:57:ae:e6:
         4a:26:af:94:1e:81:d6:d9:51:c9:a8:c2:e7:d4:8b:f4:87:55:
         ca:fc:b9:4d:dc:1a:a3:18:a4:1a:8d:b0:fd:94:6b:c7:68:e3:
         f4:0f:c2:46:d6:a0:17:0e:32:e6:fb:7b:63:8a:68:70:ce:f9:
         6d:e9:0d:b8:03:87:33:ee:bf:23:c2:9b:19:15:37:4a:bc:67:
         97:bc:b4:15:fd:e1:5b:6e:00:e1:ab:2d:aa:20:38:0e:83:6f:
         6c:96:ca:1e:37:4b:3b:7a:a2:dc:44:85:27:ac:04:87:60:76:
         3c:6c:88:42:c0:a7:18:d3:2c:b6:ba:a7:83:cf:69:58:d5:32:
         24:42:ce:d2:1d:35:04:0b:95:0f:cd:7e:7b:73:87:cd:54:7e:
         89:4d:21:25:6a:97:15:5d:19:e5:51:c5:28:06:08:05:5f:9d:
         4f:e3:4e:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:52 2024 by rpki-client on console-ams.rpki-client.org