Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
File:                     c185bc49-3533-373b-bbc3-00f946055c50.roa (raw, json)
Hash identifier:          sgaO1Cm4+9c2e+AB/o2PcmmgCHW1OxLCgl5y/v30P7c=
Subject key identifier:   A2:44:CD:99:C1:A7:AF:FB:9C:37:DB:6E:34:8B:C6:4C:5D:24:07:A1
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F432858474850BB3D172A575D74B6E700
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     22606
IP address blocks:        66.231.80.0/20 maxlen: 24
                          68.232.192.0/20 maxlen: 24
                          136.147.128.0/20 maxlen: 24
                          136.147.176.0/20 maxlen: 24
                          198.245.80.0/20 maxlen: 24
                          199.122.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:bb:3d:17:2a:57:5d:74:b6:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=0f4e9e8c-49cc-4829-858c-fca982e97dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:65:21:80:37:82:55:7b:e2:ec:5c:c1:24:
                    21:55:05:a4:16:99:34:09:88:24:b3:f7:b8:ea:3a:
                    67:0a:28:c0:b5:db:ad:81:93:80:05:bc:f9:c3:ed:
                    4b:24:df:cd:eb:26:f6:43:a9:80:ee:f2:ef:24:e0:
                    a9:a3:f9:93:df:80:93:f4:65:ac:73:72:88:f1:a0:
                    90:b4:ec:cb:d5:12:b5:31:1d:ea:65:87:f0:65:36:
                    2f:67:f3:20:3d:d9:bc:80:99:8b:a6:ca:a2:d8:d3:
                    8b:84:ae:d8:5c:24:93:4f:de:e9:d1:ba:50:b2:a5:
                    b9:e7:26:96:7d:17:82:54:ae:1e:ac:41:c7:54:55:
                    8b:7f:43:ad:0c:9b:34:c6:81:f7:ba:ec:a6:10:ee:
                    be:7f:45:2c:5c:fa:77:80:e0:3c:81:bb:a9:58:2b:
                    ea:ee:36:d4:9b:04:80:5d:82:1f:7c:41:5b:08:85:
                    dc:cb:ad:52:e8:3a:42:93:4c:2b:59:94:9c:1d:13:
                    7d:f4:d4:11:35:d6:00:e6:12:9d:9e:18:3b:a9:3e:
                    cf:0a:b2:35:80:1c:04:89:b4:56:21:de:85:f6:3e:
                    63:32:4b:fb:80:cf:b1:dc:af:ab:0f:9e:af:4a:47:
                    b0:e7:16:ba:f6:86:22:cd:50:c2:94:f4:7b:8a:d1:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:44:CD:99:C1:A7:AF:FB:9C:37:DB:6E:34:8B:C6:4C:5D:24:07:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.80.0/20
                  68.232.192.0/20
                  136.147.128.0/20
                  136.147.176.0/20
                  198.245.80.0/20
                  199.122.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:b7:66:3d:f5:b4:ad:9b:d8:c4:3e:7d:bb:86:59:ab:6d:
         cd:23:ff:a2:b5:4d:5b:72:fb:12:4a:d8:e5:38:17:b6:15:53:
         1a:61:0c:b0:47:52:9c:5c:85:42:2c:56:00:36:3f:7a:f5:3b:
         8d:4e:b8:4b:4f:4d:40:87:ec:9c:2f:08:60:be:c4:c9:f4:d3:
         96:ac:3c:71:65:82:a2:9b:6b:4c:43:31:d6:6a:90:22:5e:8f:
         47:ec:f6:a8:46:97:ed:18:e7:b0:ce:7a:e5:02:c4:8d:5d:a8:
         22:e7:b0:1c:fc:16:70:39:20:d5:2f:b6:6f:59:5f:6a:7b:7d:
         fc:5d:e2:eb:0b:a7:b4:70:05:62:40:e0:f6:c4:d9:64:72:9f:
         36:8f:17:e7:d5:10:ba:70:8d:08:9c:a1:c2:09:12:0e:14:8f:
         12:8c:63:89:70:8b:ff:02:cc:43:5b:17:20:df:b0:57:cd:37:
         f9:65:39:4a:95:e4:f0:5f:72:09:5f:a1:b8:9e:a6:85:04:56:
         6e:b9:2f:d2:a7:20:98:e6:9c:b8:35:fa:b5:e5:ce:2b:89:a3:
         d6:ae:22:35:12:2e:49:46:84:ff:ff:6d:5b:b5:d2:cd:e9:d1:
         05:cb:b1:f5:a3:48:92:49:07:23:cc:04:e9:cc:85:3b:5f:2d:
         0d:31:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:18 2024 by rpki-client on console-ams.rpki-client.org