Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/9ab9307b-9315-3665-99fc-7d047e3e54ff.roa
File:                     9ab9307b-9315-3665-99fc-7d047e3e54ff.roa (raw, json)
Hash identifier:          NW7b/vBRz0xKMwL1/c3ZRrc0zr5bQyLEij2QRLSynaQ=
Subject key identifier:   3D:2B:5E:77:B5:0B:5D:55:C4:79:8A:09:89:07:69:AD:F1:BD:87:74
Certificate issuer:       /CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
Certificate serial:       010D0C9F432858477BF65867423AEB0E83970500
Authority key identifier: 96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/9ab9307b-9315-3665-99fc-7d047e3e54ff.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     7954
IP address blocks:        104.254.52.0/22 maxlen: 22
                          207.167.116.0/22 maxlen: 22
                          2605:e380::/32 maxlen: 32
                          2620:8d:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:58:67:42:3a:eb:0e:83:97:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=6c5a9069-f45f-4a25-9b03-d785ca56f02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:b1:1c:e3:f6:ef:0d:0f:ac:c2:98:15:35:
                    96:99:ba:0f:57:94:11:c0:ac:21:58:5d:18:22:fb:
                    68:e8:45:52:48:d6:86:04:41:03:97:46:4b:fe:72:
                    3f:2a:63:aa:75:1d:2f:cb:ca:f4:98:7a:61:55:5a:
                    70:ca:ff:1e:37:cd:f6:6a:00:42:2f:d5:14:7e:cc:
                    12:6f:74:24:82:37:9f:1d:22:e8:6f:01:29:f0:6b:
                    5a:bd:8d:5a:91:e4:15:b4:b1:ab:83:fb:0b:8b:df:
                    ac:cc:64:4e:08:dc:ff:54:d3:05:25:5f:fb:7b:91:
                    1e:81:af:6d:5e:d8:66:cd:13:f4:85:f6:08:f9:f8:
                    f4:8f:28:47:fa:a7:08:7f:fe:ab:74:03:56:25:01:
                    6b:0e:30:45:ac:4a:4b:3c:59:fc:62:85:5d:0b:f0:
                    f1:7e:15:16:3f:c2:54:2d:b7:30:82:3a:57:3e:02:
                    a8:c7:f3:0b:ef:a0:61:15:ff:19:e1:03:d0:c4:a9:
                    1d:18:8d:94:ec:83:9d:fb:ca:19:97:6f:ce:15:d0:
                    2c:f6:15:4f:0e:bb:1a:d5:a0:11:1c:a6:c3:ba:d2:
                    92:2a:b0:2f:d2:1f:e9:c6:bd:66:d5:5c:f4:7d:08:
                    4f:ec:be:7f:29:fa:fa:e1:aa:92:15:a7:b8:e4:52:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2B:5E:77:B5:0B:5D:55:C4:79:8A:09:89:07:69:AD:F1:BD:87:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/9ab9307b-9315-3665-99fc-7d047e3e54ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.crl

            X509v3 Authority Key Identifier:
                keyid:96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.52.0/22
                  207.167.116.0/22
                IPv6:
                  2605:e380::/32
                  2620:8d:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:98:ab:e3:5f:63:c2:ae:64:ef:50:07:1b:8e:64:c2:99:44:
         38:4c:fb:d3:e6:27:4a:b5:69:14:60:eb:47:a4:b3:c6:11:25:
         9e:95:fc:93:82:7d:92:40:fc:94:d8:71:d8:5f:8f:3a:8d:8e:
         02:d2:ac:18:08:01:af:42:25:f6:96:33:55:6b:be:76:16:0e:
         3b:e1:55:33:34:ef:96:6c:a7:b5:c7:d5:4a:c1:5a:f6:e2:39:
         6c:6e:30:2f:0b:59:65:3a:05:f9:08:46:61:8f:14:63:82:69:
         9e:78:88:7c:35:50:c8:38:f1:61:94:4b:1d:e6:25:5f:cb:a4:
         a2:ea:c1:d0:97:a3:f1:3c:a8:d5:3d:83:a3:8e:27:ea:65:83:
         53:b9:2c:f3:79:61:3d:af:ea:cf:a0:75:b3:aa:e9:23:e7:28:
         cc:a8:c5:2f:d4:58:7d:84:64:06:63:62:88:67:19:e0:ab:d2:
         ce:bb:36:43:5f:c5:a2:8d:6d:74:72:aa:67:8f:63:76:30:18:
         cc:39:d8:b7:84:93:cd:0d:01:d4:d0:5d:66:b7:02:59:13:ef:
         80:0b:da:24:59:a7:2b:fb:3a:de:22:ab:f8:f3:09:69:28:ed:
         e1:7f:70:25:b4:9f:f1:24:d0:ea:15:51:61:6e:ab:c9:f7:6a:
         09:15:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:56 2024 by rpki-client on console-ams.rpki-client.org