Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa
File:                     16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa (raw, json)
Hash identifier:          RtnGkalBqTwIoAyb4H7xFzbtmKf4Qvs4pUFvhJQu4PA=
Subject key identifier:   3D:44:6D:1D:D1:4A:BD:4C:D7:6B:94:B3:FE:CD:52:D2:28:B0:1A:B6
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285847ED24C8B04BB491CC4F3ABC00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     237
IP address blocks:        35.25.0.0/16 maxlen: 16
                          35.37.0.0/16 maxlen: 16
                          35.62.0.0/16 maxlen: 16
                          35.63.0.0/16 maxlen: 16
                          35.64.0.0/14 maxlen: 14
                          35.68.0.0/15 maxlen: 15
                          35.70.0.0/16 maxlen: 16
                          35.71.0.0/18 maxlen: 18
                          192.122.181.0/24 maxlen: 24
                          192.122.182.0/23 maxlen: 23
                          192.122.184.0/21 maxlen: 21
                          192.122.184.0/24 maxlen: 24
                          192.122.192.0/21 maxlen: 21
                          192.122.200.0/24 maxlen: 24
                          192.203.195.0/24 maxlen: 24
                          198.108.0.0/14 maxlen: 14
                          204.38.0.0/16 maxlen: 16
                          204.39.128.0/18 maxlen: 18
                          207.72.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c8:b0:4b:b4:91:cc:4f:3a:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=16e5fe7e-cc52-47bc-a723-25744d5e47db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:ee:ab:59:16:8c:c4:af:81:dc:dc:84:00:
                    47:77:df:db:1b:2c:51:90:63:a1:5e:f7:bd:17:cc:
                    70:39:b7:6c:3b:3e:c5:5a:a5:4f:89:f7:54:c7:3c:
                    da:a9:78:32:7a:d3:96:a0:8a:b8:83:5a:63:cb:78:
                    19:4f:0e:5b:58:0c:21:6a:4d:65:b0:f5:f9:ee:4e:
                    7b:82:f7:6c:b2:a3:05:a6:07:ee:41:17:76:87:3e:
                    b8:ff:34:65:53:66:cd:25:6b:91:b1:ce:47:79:44:
                    e6:a0:66:e4:ee:f3:40:90:af:9b:69:bf:b5:ac:16:
                    a1:a6:4f:04:95:0f:98:b5:aa:c4:e4:34:83:4e:bd:
                    1f:ad:d5:3f:0b:9e:df:53:83:fb:be:e0:ea:d2:c9:
                    86:84:2e:fd:76:93:c0:69:1f:73:39:57:58:84:a5:
                    0b:a9:f7:d4:2b:90:7b:b7:9e:39:24:06:29:53:c8:
                    06:b0:e3:eb:63:a0:03:0b:bd:0a:3d:eb:41:d0:0b:
                    2c:50:8e:c7:38:2f:ff:6e:8e:1d:f9:ad:58:bd:60:
                    cb:93:27:57:87:52:20:be:83:89:3c:80:52:cf:0b:
                    29:29:49:1a:1c:96:92:16:c5:c7:25:40:c5:85:87:
                    f9:13:62:2d:73:e5:e5:2b:f8:71:34:a1:d1:c2:fa:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:6D:1D:D1:4A:BD:4C:D7:6B:94:B3:FE:CD:52:D2:28:B0:1A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/16b04eee-d55c-3fd2-bb8e-98d37ca474eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.25.0.0/16
                  35.37.0.0/16
                  35.62.0.0-35.71.63.255
                  192.122.181.0-192.122.200.255
                  192.203.195.0/24
                  198.108.0.0/14
                  204.38.0.0/16
                  204.39.128.0/18
                  207.72.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:fe:d0:32:45:5e:90:79:66:ef:10:2a:e4:7f:25:35:a4:
         f6:15:5b:8e:80:fe:9a:ac:20:25:21:cd:2c:60:d4:ac:73:9e:
         f2:73:52:57:41:3d:f5:f6:c5:f4:f0:7d:48:aa:f9:af:91:21:
         be:91:42:6d:df:56:d2:9e:05:99:89:95:83:f6:ce:36:23:b8:
         23:03:20:66:13:51:d6:32:be:6f:2b:c5:fe:3b:ca:07:74:b0:
         f6:26:db:37:35:eb:11:52:2b:16:a0:55:8c:c7:cc:23:c8:72:
         9f:41:a2:fb:84:03:60:85:ea:27:c6:06:91:b8:c1:c5:c2:74:
         68:5a:f4:51:be:ba:bd:4a:ff:b6:64:3d:23:8a:bf:d0:a4:61:
         2a:3f:ca:9f:e0:a1:18:87:7c:42:31:3f:e3:a6:34:3e:64:de:
         80:62:7b:f4:c2:88:df:02:a4:39:6b:8c:e9:6a:28:b0:3e:8d:
         76:fe:ec:1f:d5:3e:d9:2f:26:68:7a:bf:a9:9e:26:a6:3e:0e:
         43:f4:3d:46:cd:9f:ea:b2:23:dd:5a:eb:96:91:61:54:c8:a7:
         22:40:48:31:1d:13:89:99:3e:bb:fd:83:c7:88:03:77:41:91:
         9b:14:1a:14:b6:ae:ad:5e:24:43:f1:78:b5:00:c8:e2:93:fa:
         51:52:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:37 2024 by rpki-client on console-ams.rpki-client.org