Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
File:                     e986cb99-90f6-3599-9f1f-a52d8d946895.roa (raw, json)
Hash identifier:          hERnqSLt4cZUfvQcgrZCuqAhNlhbEvCKHTbjlUNS12w=
Subject key identifier:   9D:74:C2:0D:5B:00:11:B6:E8:95:18:C2:95:71:C6:AC:8A:41:41:70
Certificate issuer:       /CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
Certificate serial:       010D0C9F432858473BC09D1D7DC14EA56168CFC0
Authority key identifier: 4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
Signing time:             Mon 16 Sep 2024 13:00:42 +0000
ROA not before:           Mon 16 Sep 2024 13:00:42 +0000
ROA not after:            Sun 15 Dec 2024 14:00:42 +0000
asID:                     13150
IP address blocks:        45.62.176.0/20 maxlen: 24
                          149.20.192.0/20 maxlen: 24
                          150.195.192.0/20 maxlen: 24
                          199.27.32.0/19 maxlen: 24
                          216.194.96.0/20 maxlen: 24
                          216.205.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:c0:9d:1d:7d:c1:4e:a5:61:68:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
        Validity
            Not Before: Sep 16 13:00:42 2024 GMT
            Not After : Dec 15 14:00:42 2024 GMT
        Subject: CN=5e3e86a7-be19-4380-816d-46fef9aca06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:c1:b7:4e:73:07:e2:65:70:cb:8a:aa:40:
                    9e:c5:74:c4:a2:cb:c9:a8:17:18:30:78:43:42:24:
                    21:53:47:65:41:69:a2:0f:33:24:51:b1:8f:b7:c2:
                    6e:88:80:a6:7b:19:3a:10:44:da:14:dd:63:94:df:
                    ee:56:a5:2e:64:4c:01:e4:3d:01:95:1c:d3:3a:47:
                    80:59:b8:20:2d:3e:76:4a:aa:34:7f:98:d5:f4:51:
                    bb:0c:c1:72:56:5c:8f:7a:41:18:44:0e:dc:f9:8e:
                    9c:be:f7:60:3c:10:e3:f3:13:e3:5b:a8:29:d9:23:
                    c8:9a:aa:17:f1:77:bc:43:b2:ab:f1:df:87:db:19:
                    f7:b4:8f:2b:16:9a:e3:ab:df:47:7d:e8:8b:c2:39:
                    a1:00:5c:4d:71:b9:80:f9:38:29:17:41:a5:5e:7d:
                    7d:80:6e:dc:94:10:c7:35:d9:9d:04:0a:e2:1a:0d:
                    88:b2:93:ba:ea:11:66:ad:27:ac:05:68:8f:6c:82:
                    29:43:64:1a:1c:06:9d:b2:e9:94:4a:5f:51:a1:ab:
                    b6:c2:19:d9:c3:61:78:10:4d:53:3e:b2:63:56:55:
                    16:91:a1:b5:ff:a1:fe:a5:c3:4a:51:4a:6e:5e:93:
                    16:90:cd:d5:d2:ea:97:ab:dc:ef:aa:43:de:3c:a9:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:74:C2:0D:5B:00:11:B6:E8:95:18:C2:95:71:C6:AC:8A:41:41:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.crl

            X509v3 Authority Key Identifier:
                keyid:4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.176.0/20
                  149.20.192.0/20
                  150.195.192.0/20
                  199.27.32.0/19
                  216.194.96.0/20
                  216.205.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:79:e2:5f:c9:31:da:c0:13:45:15:6a:a9:f5:67:ba:27:
         f4:bd:72:f7:47:34:30:ce:e6:be:02:41:95:68:b0:cc:cb:b2:
         03:cc:35:80:c1:a9:ae:2a:07:0f:b9:1c:a7:e5:cd:ac:ec:28:
         d1:b7:8a:42:44:a6:2d:c0:30:bb:51:ca:1a:a3:fd:26:90:72:
         35:c6:4f:f4:a3:ae:69:24:70:d8:43:98:a8:8a:ac:41:a4:b4:
         d1:28:28:f4:4c:a7:d0:bc:c8:e0:ed:1a:ed:c8:b7:73:1a:27:
         d8:d6:d9:7d:a5:df:32:59:b0:a1:b1:b2:40:f1:15:91:23:19:
         3b:07:69:b3:bb:72:34:d6:50:82:a9:6c:73:6b:87:60:4b:4a:
         ff:7f:e0:d1:22:64:07:e2:d1:c2:2d:3f:0c:a4:88:98:6a:ab:
         a9:9f:85:39:ad:59:12:f7:61:02:5b:ae:3f:dc:0e:fa:ee:73:
         1b:17:f3:06:70:d0:b7:d7:1c:56:56:ad:39:2b:fd:cc:94:c7:
         ae:fb:96:68:33:b4:b7:76:ef:0c:a0:4e:1d:71:7a:83:3d:69:
         c9:38:9d:08:cd:8a:49:c8:14:e7:9c:7c:28:f3:0c:ff:33:a1:
         7b:d0:e3:38:cd:a2:70:79:89:99:7f:af:ca:74:6e:ec:b3:24:
         f0:8a:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:28 2024 by rpki-client on console-ams.rpki-client.org