Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8fd8e604-1e3e-3da1-9f5f-8efd7f39b772.roa
File:                     8fd8e604-1e3e-3da1-9f5f-8efd7f39b772.roa (raw, json)
Hash identifier:          IFVTN9yUajbyZxO5VX9n3qdG6ttIi+3jLUqTLvRCR+Y=
Subject key identifier:   69:FD:5B:21:FC:25:6F:E0:3E:71:1F:8B:C1:F6:72:52:3F:BF:46:AD
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F432858472C65C2061F83BB130FB59A10
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8fd8e604-1e3e-3da1-9f5f-8efd7f39b772.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     715
IP address blocks:        63.246.32.0/20 maxlen: 24
                          66.96.112.0/20 maxlen: 20
                          66.102.32.0/20 maxlen: 20
                          66.185.112.0/20 maxlen: 24
                          69.166.12.0/22 maxlen: 24
                          198.49.1.0/24 maxlen: 24
                          199.184.181.0/24 maxlen: 24
                          199.184.184.0/24 maxlen: 24
                          205.207.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:c2:06:1f:83:bb:13:0f:b5:9a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=ced91f3b-41c0-4f02-aa94-0f8d3ca994af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:42:5a:b4:22:99:59:52:28:53:54:63:ae:
                    e5:06:8a:4c:92:c4:31:02:c0:14:65:d7:a5:1d:88:
                    fb:c9:87:f0:14:93:e3:d9:fc:b5:b4:6e:2e:87:ab:
                    8b:5a:2f:dc:af:aa:08:00:00:61:19:8e:bc:a9:3c:
                    a0:8d:ee:6d:10:d5:0c:bb:e5:aa:1e:2a:ec:8d:a7:
                    b0:19:34:35:56:f5:a3:b2:36:7d:de:3f:bc:66:7e:
                    59:a4:b6:0c:1b:85:1a:e0:1b:23:54:52:02:5e:79:
                    e6:80:c5:34:a8:7d:dc:4d:eb:8c:fd:80:0e:25:07:
                    bd:b2:3e:b0:46:de:41:f3:05:09:7e:52:de:36:1b:
                    00:44:e1:7e:60:07:25:31:bc:92:70:77:e8:1c:80:
                    c0:f3:bb:e3:37:7c:cd:e6:7f:90:88:43:46:1b:fc:
                    13:2a:8f:c6:df:c7:71:f0:1b:99:54:4b:5b:39:71:
                    78:46:3b:12:e4:fa:ef:3c:55:c6:18:0f:38:36:f2:
                    f0:79:87:f0:c3:b5:bd:83:69:d4:a2:1c:65:0c:80:
                    d5:81:fa:b4:a0:3f:3d:65:d9:c9:ad:25:8d:d8:85:
                    25:eb:14:82:70:9b:6c:27:ef:ab:0f:92:82:a3:43:
                    a7:a7:76:be:2a:30:f1:4e:0b:98:dd:25:b4:92:99:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FD:5B:21:FC:25:6F:E0:3E:71:1F:8B:C1:F6:72:52:3F:BF:46:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8fd8e604-1e3e-3da1-9f5f-8efd7f39b772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.32.0/20
                  66.96.112.0/20
                  66.102.32.0/20
                  66.185.112.0/20
                  69.166.12.0/22
                  198.49.1.0/24
                  199.184.181.0/24
                  199.184.184.0/24
                  205.207.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:2a:a3:4f:ff:8a:1e:49:b8:6f:a9:cc:9c:70:31:b6:ec:8c:
         8b:d4:00:56:b5:65:a2:3d:a8:63:69:b7:07:61:b4:c2:ff:d4:
         98:b8:4f:69:3f:f1:ee:bb:5a:70:fc:52:c8:c8:2a:9c:da:ad:
         52:d7:84:6a:3a:58:e6:73:04:d2:ea:2b:5f:4e:7e:a0:4c:4f:
         40:a6:6d:1b:1e:4b:69:53:9b:54:93:be:90:ac:22:07:74:71:
         b8:ef:33:0e:7d:70:3b:e0:83:b7:7b:4c:d9:9d:33:dd:0c:be:
         c4:9f:40:6e:a7:e4:99:94:86:5c:21:1f:24:b1:0d:38:4b:69:
         c5:80:bd:87:c3:6f:39:12:5e:1a:03:fa:97:81:60:4f:5a:70:
         b5:3e:f3:ab:29:ef:52:e1:1b:0d:a6:9e:1e:69:8d:15:e3:03:
         9f:0e:bc:72:bc:95:61:c8:9c:97:db:1e:39:e3:5f:da:a6:73:
         fb:03:9d:88:8a:c4:c0:1d:ca:8e:1e:82:51:4a:3f:81:f7:c4:
         60:1b:0c:ca:36:8d:e9:87:c9:bc:fb:c9:cb:88:df:0f:8a:f1:
         6f:af:79:89:e8:ef:c0:9a:3a:e3:90:1c:3a:2f:60:67:8a:9c:
         3b:33:36:f0:9c:0d:eb:a7:08:89:9d:ab:2f:7b:57:47:e4:7e:
         2b:bc:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:20 2024 by rpki-client on console-fra.rpki-client.org