Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa
File:                     8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa (raw, json)
Hash identifier:          EebVGKdmy737lkGnnPQgXL/0V2Tbh0gf0OJjY39Ubps=
Subject key identifier:   28:0C:9B:BA:F3:B6:F0:AF:4C:AB:20:38:1F:1A:DE:32:5E:9C:96:68
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858462B8ECF443520FAFAC2DF0B80
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa
Signing time:             Tue 11 Jun 2024 01:00:24 +0000
ROA not before:           Tue 11 Jun 2024 01:00:24 +0000
ROA not after:            Mon 09 Sep 2024 01:00:24 +0000
asID:                     398101
IP address blocks:        50.62.80.0/21 maxlen: 24
                          64.202.184.0/21 maxlen: 24
                          72.167.20.0/22 maxlen: 24
                          72.167.220.0/22 maxlen: 24
                          72.167.224.0/22 maxlen: 24
                          107.180.68.0/22 maxlen: 24
                          107.180.72.0/22 maxlen: 24
                          107.180.80.0/22 maxlen: 24
                          107.180.84.0/22 maxlen: 24
                          107.180.88.0/21 maxlen: 24
                          107.180.100.0/22 maxlen: 24
                          107.180.104.0/22 maxlen: 24
                          132.148.164.0/22 maxlen: 24
                          132.148.168.0/21 maxlen: 24
                          148.72.20.0/22 maxlen: 24
                          148.72.64.0/22 maxlen: 24
                          198.12.224.0/22 maxlen: 24
                          198.12.228.0/22 maxlen: 24
                          198.12.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2b:8e:cf:44:35:20:fa:fa:c2:df:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jun 11 01:00:24 2024 GMT
            Not After : Sep  9 01:00:24 2024 GMT
        Subject: CN=1551e87c-e616-424e-9b90-cd137941b3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:e1:ca:e4:14:0c:1b:56:ce:2c:86:60:c3:
                    ef:4e:d4:f3:78:1b:4d:60:94:a0:3c:2f:78:c8:35:
                    39:08:68:4e:6e:92:d7:23:ce:2d:b9:d6:36:6c:c2:
                    d2:4b:2c:11:1e:82:40:66:a2:8b:00:90:d0:07:8c:
                    18:59:a8:01:03:bc:15:81:ce:ac:06:b4:98:5b:1a:
                    67:ac:ab:e5:4a:6d:2c:b0:e9:6a:2c:b7:29:dc:ca:
                    fb:e4:bb:09:4a:7b:10:72:28:9a:13:97:1c:99:b1:
                    54:8a:16:c9:ef:e5:12:02:e9:57:b8:0a:31:f4:57:
                    6c:3d:a4:05:63:28:10:76:ee:ef:b8:e5:51:c9:8a:
                    7b:d1:2d:79:10:22:86:10:78:aa:07:68:4c:cd:de:
                    27:2a:77:77:d7:de:23:49:3c:08:f3:f6:43:a2:27:
                    3c:4c:49:3e:ba:3b:d4:bf:b7:1f:f2:21:bd:20:89:
                    f8:1b:61:c0:28:62:cc:66:09:4b:84:e3:f3:3c:c4:
                    70:3a:fc:7f:8e:3d:ae:96:3f:fa:2f:6b:a1:91:08:
                    69:a2:df:af:a8:82:26:30:43:a1:a0:85:15:1c:a0:
                    04:a5:8b:36:34:98:9a:23:d0:be:8b:fa:5b:25:b1:
                    8b:a1:5d:ff:30:df:b3:a2:bb:9d:42:99:1e:cc:b6:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:9B:BA:F3:B6:F0:AF:4C:AB:20:38:1F:1A:DE:32:5E:9C:96:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.80.0/21
                  64.202.184.0/21
                  72.167.20.0/22
                  72.167.220.0-72.167.227.255
                  107.180.68.0-107.180.75.255
                  107.180.80.0/20
                  107.180.100.0-107.180.107.255
                  132.148.164.0-132.148.175.255
                  148.72.20.0/22
                  148.72.64.0/22
                  198.12.224.0/21
                  198.12.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:f3:2e:ee:3c:51:25:3c:f0:13:35:9b:e1:5d:3f:d4:5b:
         b5:25:2e:37:63:6a:cc:73:c5:9b:4e:76:d8:44:66:fa:c4:4f:
         0b:d8:d1:3a:4a:7a:ef:97:47:0c:8c:96:05:72:44:d1:58:60:
         2c:af:d5:5c:7c:4f:8e:23:ee:c1:60:4b:33:85:24:62:7a:c0:
         3a:f4:10:28:8e:45:31:10:46:90:a2:e2:c9:d9:7d:d2:64:89:
         d1:af:be:12:71:b2:22:39:6e:a3:a8:9a:f8:c0:00:c0:82:fe:
         7c:a2:5a:c2:08:67:ea:54:e3:73:5d:60:6c:b6:53:59:fc:d5:
         9d:41:38:40:74:60:24:5b:20:68:4b:c2:60:b3:9f:e7:84:bc:
         a2:92:38:1b:8f:2d:6e:3d:d3:48:37:f7:85:bd:ae:b9:b1:25:
         94:c3:bf:2f:40:3f:00:cb:f3:76:c4:36:fb:be:46:96:e4:99:
         9f:22:c5:f1:dc:24:0d:ee:a6:b8:4d:85:3c:10:b9:ca:e4:88:
         a7:2b:c5:fe:d5:fd:57:f3:ba:35:c7:83:de:a1:a4:4c:14:f7:
         b6:5c:34:56:0f:c7:46:38:76:f2:87:a0:0e:bc:38:13:7d:4f:
         29:11:d4:44:0b:4e:1e:78:9e:41:dd:8c:bf:84:8e:06:fc:46:
         37:52:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 16:35:54 2024 by rpki-client on console-ams.rpki-client.org