Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d818611d-f64c-3aac-a9bf-864e92ddd44d.roa
File:                     d818611d-f64c-3aac-a9bf-864e92ddd44d.roa (raw, json)
Hash identifier:          3Yg4bs6sBqla3b7hqTvM1AGrrmEySrjyb/Gascf1lEw=
Subject key identifier:   44:9C:63:22:B1:C4:93:E2:73:8F:84:1A:B7:93:E8:73:B9:E7:F9:69
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285847A30C008097400B9634619D00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d818611d-f64c-3aac-a9bf-864e92ddd44d.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     400754
IP address blocks:        50.62.80.0/21 maxlen: 24
                          64.202.184.0/21 maxlen: 24
                          72.167.20.0/23 maxlen: 24
                          72.167.220.0/22 maxlen: 24
                          72.167.224.0/22 maxlen: 24
                          107.180.68.0/22 maxlen: 24
                          107.180.72.0/22 maxlen: 24
                          107.180.80.0/22 maxlen: 24
                          107.180.84.0/22 maxlen: 24
                          107.180.88.0/21 maxlen: 24
                          107.180.100.0/22 maxlen: 24
                          107.180.104.0/22 maxlen: 24
                          132.148.164.0/22 maxlen: 24
                          148.72.22.0/23 maxlen: 24
                          148.72.64.0/23 maxlen: 24
                          198.12.224.0/22 maxlen: 24
                          198.12.228.0/22 maxlen: 24
                          198.12.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:00:80:97:40:0b:96:34:61:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=5f728c75-b76b-49a9-88f4-a3fe6fe01048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:60:30:29:c2:11:a4:47:43:7e:5a:6c:de:
                    18:0b:7d:e6:25:44:f5:be:17:90:ce:b6:f7:df:c3:
                    62:65:98:24:d5:d8:6b:ba:38:26:2e:e6:49:31:2a:
                    52:23:cb:2b:e4:38:7e:a0:59:f9:7a:ea:92:93:8e:
                    b8:18:3a:bb:c8:c1:dc:89:01:82:48:3b:80:e6:b6:
                    52:01:1c:e7:c7:fe:79:09:4b:8f:7e:73:90:68:a2:
                    06:a9:a5:63:e0:50:0d:3a:4b:c9:48:f8:7a:0a:1c:
                    99:11:78:5a:85:45:ba:78:34:81:6e:27:64:47:6a:
                    62:d4:e6:9a:fc:27:72:f2:93:77:3f:f7:ea:72:c5:
                    01:9e:eb:27:4c:64:95:e4:01:4e:83:8d:6e:dc:8b:
                    bf:72:2d:03:45:1a:cd:1f:18:04:57:2f:36:04:d6:
                    fe:e3:cd:37:97:ec:e0:6d:57:97:67:05:23:ea:b1:
                    f0:a5:52:67:27:d4:70:2c:e2:d0:38:5a:22:6c:1c:
                    31:ef:5d:11:82:35:74:bb:89:51:4c:19:54:ea:6f:
                    98:b4:a0:ee:9b:73:b0:a4:42:a9:ef:d4:02:9c:1e:
                    3d:24:bc:80:02:4a:d4:64:6c:c7:41:8e:ba:4a:2a:
                    48:34:15:4b:ae:be:2a:d5:61:a9:0f:4f:49:ed:ec:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9C:63:22:B1:C4:93:E2:73:8F:84:1A:B7:93:E8:73:B9:E7:F9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d818611d-f64c-3aac-a9bf-864e92ddd44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.80.0/21
                  64.202.184.0/21
                  72.167.20.0/23
                  72.167.220.0-72.167.227.255
                  107.180.68.0-107.180.75.255
                  107.180.80.0/20
                  107.180.100.0-107.180.107.255
                  132.148.164.0/22
                  148.72.22.0/23
                  148.72.64.0/23
                  198.12.224.0/21
                  198.12.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c2:65:16:6c:b8:7c:23:83:62:a5:02:87:07:50:76:7a:ee:
         d4:2b:c2:6c:e3:a2:d3:ee:5d:1a:b6:a8:25:89:09:44:3e:15:
         06:a2:89:9a:53:e8:a0:8e:92:e4:da:8d:f1:07:28:1b:20:80:
         aa:48:75:e8:b9:37:6c:4d:9d:1b:6a:99:47:1d:55:18:d4:e3:
         a3:53:8d:b9:23:77:ac:ed:00:65:fd:17:70:39:ff:ce:69:4c:
         c8:2a:00:44:1f:bb:51:67:a3:fe:18:a7:6c:c7:82:61:c5:6d:
         dc:f7:d0:9e:c5:0e:67:e7:4c:f2:12:b7:b2:5f:5e:99:c4:61:
         89:c9:46:9d:e3:cd:b0:8c:74:fb:42:df:76:a9:e0:7a:18:fe:
         91:26:59:52:da:8e:1d:97:b4:cd:a0:8a:44:7a:1a:28:cc:bf:
         a4:2f:6e:c6:87:ae:3e:28:28:0f:6f:b8:96:90:18:01:11:f7:
         1c:6d:b0:7e:56:db:54:e6:a8:1c:e6:19:4c:db:d1:1c:db:32:
         4c:45:4b:ae:75:4e:26:0f:6f:10:f0:15:8d:54:20:3a:7a:2f:
         d9:7c:69:eb:47:c4:93:eb:3d:27:bf:87:6f:43:54:9e:8a:3f:
         9c:a2:be:45:f1:b7:76:51:02:1d:6f:43:3c:cf:2c:7d:29:47:
         5b:22:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:04 2024 by rpki-client on console-ams.rpki-client.org