Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa
File:                     2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa (raw, json)
Hash identifier:          683yS7zgLGhN4fEqoJPArkzhwLV9FAmUu9k9S6Eay2I=
Subject key identifier:   E5:EF:2A:07:FC:6D:B5:75:D2:D6:F8:1B:8E:6E:89:79:CC:89:69:6C
Certificate issuer:       /CN=792c5c41-497a-4325-83ea-87d8b3dfdae9
Certificate serial:       010D0C9F4328584789EBFAE644C8BFA98D2E0180
Authority key identifier: 7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     397412
IP address blocks:        64.110.128.0/21 maxlen: 24
                          98.96.0.0/17 maxlen: 24
                          136.244.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fa:e6:44:c8:bf:a9:8d:2e:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5c41-497a-4325-83ea-87d8b3dfdae9
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=08f54043-5929-4880-91cc-8b486a540edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:db:0d:bd:07:50:49:06:0c:48:91:01:66:
                    db:f2:1e:71:5e:e9:82:4f:59:87:aa:d6:0b:b2:bb:
                    c7:fa:0d:20:7a:dc:33:e9:01:59:85:9a:ec:d5:8f:
                    df:03:f9:41:9a:13:68:bb:fd:bb:74:59:da:ae:d5:
                    7e:48:2a:a1:40:18:44:b8:5f:87:50:72:d0:29:00:
                    02:30:95:79:ef:37:4c:6c:a7:e0:96:34:29:43:6b:
                    f3:96:04:c5:c8:07:30:b7:2a:af:91:80:d8:4b:c3:
                    f5:60:17:2f:5d:5d:36:89:54:17:a1:ad:bb:d6:bd:
                    82:8c:58:3c:82:21:1b:f3:af:53:44:08:a5:fa:1e:
                    16:79:fd:63:e4:1c:3e:91:1a:0c:21:df:23:58:1d:
                    41:5f:ed:e5:0f:67:9d:67:51:23:f1:3b:d1:59:cf:
                    63:f6:6c:42:27:42:27:29:a0:c0:55:f8:1d:db:80:
                    68:ba:4a:b4:56:67:b5:70:90:3a:2f:f3:90:a3:7c:
                    37:fd:56:8d:82:58:2f:1e:87:ed:eb:b6:18:f6:24:
                    b3:23:c8:a8:80:e5:d5:9c:b7:3e:d5:2f:19:17:72:
                    45:2f:66:ae:40:99:80:59:f3:0b:08:f9:5a:24:86:
                    31:5d:3b:94:fc:db:e2:0f:16:af:55:56:2f:33:7e:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EF:2A:07:FC:6D:B5:75:D2:D6:F8:1B:8E:6E:89:79:CC:89:69:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl

            X509v3 Authority Key Identifier:
                keyid:7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.128.0/21
                  98.96.0.0/17
                  136.244.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:71:08:d7:92:ac:71:dc:aa:c8:38:fc:7a:65:c8:cf:85:
         3f:2c:5c:0e:61:e7:17:9a:7b:aa:41:dc:8d:b9:35:08:e3:fe:
         93:14:5a:cf:fe:3c:11:cd:ae:d3:1c:18:2c:3c:f6:20:ce:7c:
         19:9b:77:2c:62:9d:75:0d:b9:85:b3:f0:54:a5:4b:66:61:8a:
         8a:cd:c4:2a:46:94:98:ae:3d:ee:50:7b:c3:80:dc:d1:2f:11:
         4c:d8:d0:30:23:15:78:63:75:70:d1:71:c9:84:0a:19:0c:32:
         b1:27:9f:64:ab:f8:f7:1b:ff:55:e0:fa:cf:f9:00:6c:c5:ae:
         75:01:12:7f:0a:db:3f:a2:b9:23:12:98:79:f9:fc:41:cd:ba:
         0b:19:e0:db:e4:64:a0:cf:f3:71:f0:99:64:d3:f4:29:c3:41:
         2b:ff:8f:97:b5:b0:c6:c8:28:d3:2d:fb:20:f2:e4:7d:b5:18:
         bc:53:16:4e:e8:57:42:5c:19:ea:d0:8d:a7:af:e4:96:2c:49:
         13:dc:aa:28:23:d8:2d:bc:e4:cb:a7:6b:83:24:df:a3:6b:e1:
         b3:b9:5a:e4:c9:e3:62:57:0a:9a:a1:2d:0a:95:e9:87:c3:7f:
         07:69:05:48:ff:65:be:4f:50:f1:cf:1b:47:66:fe:1e:73:dc:
         51:4d:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:31 2024 by rpki-client on console-ams.rpki-client.org