Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e8f34951-7f70-3706-bd2b-4ea2533600fb.roa
File:                     e8f34951-7f70-3706-bd2b-4ea2533600fb.roa (raw, json)
Hash identifier:          6ELCjwN4yYlMnv060EtMHZ1hhSGBI0axf800RD35xsk=
Subject key identifier:   D5:59:E5:F1:C6:7A:34:A9:AD:BC:44:C3:76:BC:58:CA:0B:73:8A:59
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285847C8D9E140A283A6D8FB3A3680
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e8f34951-7f70-3706-bd2b-4ea2533600fb.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     396982
IP address blocks:        142.4.0.0/19 maxlen: 19
                          162.144.32.0/19 maxlen: 19
                          162.144.64.0/19 maxlen: 19
                          162.144.96.0/19 maxlen: 19
                          162.144.128.0/19 maxlen: 19
                          162.144.192.0/19 maxlen: 19
                          162.144.232.0/21 maxlen: 21
                          162.214.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e1:40:a2:83:a6:d8:fb:3a:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=9af76e05-f7dc-461f-a2bc-db66f6920931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:5d:44:4a:9f:c9:74:66:48:84:0a:89:17:
                    6f:27:1d:f7:31:00:b2:83:3b:92:92:1c:8c:66:3f:
                    27:0c:c2:13:57:8f:de:34:f0:90:8f:64:1a:da:a2:
                    97:49:a2:44:44:ad:07:ac:11:95:3e:1b:da:ba:42:
                    6e:d4:8d:99:f4:1a:3f:f2:e5:3c:38:8f:70:e7:f2:
                    60:72:73:fd:bc:70:2d:fd:d1:04:be:28:09:2a:1b:
                    e7:73:97:9f:31:2c:e9:b8:0b:2d:f9:83:b0:62:4d:
                    30:df:1d:7b:ed:48:4f:34:3c:af:4f:0c:50:18:9c:
                    ce:e3:47:1f:55:63:e3:8e:45:a7:28:da:54:af:c7:
                    0a:db:fb:3e:fd:55:91:e5:f1:e5:3f:31:da:1b:2e:
                    c4:12:d1:2e:38:97:5b:a2:f8:50:51:29:12:57:77:
                    7e:22:b4:de:4e:84:7f:3d:48:22:fc:ed:1a:04:c8:
                    bf:81:53:61:44:58:c3:99:10:8b:4d:42:fa:f4:24:
                    59:67:2f:4a:ca:02:1e:66:2e:08:2d:af:93:9f:e6:
                    d9:6f:c4:f0:f6:4c:54:75:ef:59:90:60:aa:6a:52:
                    cb:08:97:7e:ac:77:e7:25:bb:f9:a8:c1:7a:01:a2:
                    19:7b:0d:f6:4b:b7:7b:fa:3f:72:fa:8a:28:aa:33:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:E5:F1:C6:7A:34:A9:AD:BC:44:C3:76:BC:58:CA:0B:73:8A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e8f34951-7f70-3706-bd2b-4ea2533600fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.4.0.0/19
                  162.144.32.0-162.144.159.255
                  162.144.192.0/19
                  162.144.232.0/21
                  162.214.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:c0:6c:7d:b9:c4:23:c2:f9:a3:7a:4c:6b:db:a5:d6:43:
         9c:ec:80:c2:9f:bb:ae:08:c3:44:aa:e1:c7:71:68:34:47:62:
         91:d6:81:f3:f6:eb:b5:10:73:d8:e9:dc:47:d3:72:6c:46:d7:
         27:5d:2f:f4:52:e6:14:71:c3:c1:88:3f:a1:50:1f:66:06:f5:
         37:11:05:cc:55:32:13:8c:5d:aa:6d:f0:5c:b7:ad:2e:dd:ce:
         d3:03:5b:72:d9:62:dc:08:65:c2:47:8f:f8:29:04:e4:15:88:
         0f:b9:47:03:de:1c:eb:6d:27:b5:9f:c6:12:b5:3d:66:7f:b8:
         2c:f9:9b:44:18:af:96:81:05:cd:d3:97:d9:b1:f4:d5:bf:97:
         50:4a:23:d1:51:2c:ad:c4:5b:64:72:8f:80:fe:90:bf:19:72:
         31:af:ad:c4:d5:32:cb:16:c4:bd:31:9a:3b:c4:dd:4f:61:8d:
         8c:72:57:83:3f:a5:cb:73:e8:43:6b:c1:6a:ca:7a:de:12:cf:
         c6:75:5f:17:e4:86:d8:b6:f0:f6:16:eb:99:02:d2:38:2d:42:
         19:a6:ef:fa:0f:b6:3a:33:55:a9:03:bf:50:67:e3:26:eb:f9:
         27:f4:84:7d:16:cf:da:b4:68:b2:66:e2:b7:63:41:19:6e:10:
         64:00:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:21 2024 by rpki-client on console-ams.rpki-client.org