Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
File:                     ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json)
Hash identifier:          lEkEq7nzTZ+B9fJa1iTTeLw37VeCqExq2hfILXlzgIM=
Subject key identifier:   47:3F:E7:23:1B:B7:08:CD:26:B9:CA:E4:48:21:5F:1D:90:E6:39:FD
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F432858474850C342041911E6862FBE20
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     21693
IP address blocks:        170.152.0.0/16 maxlen: 24
                          192.234.136.0/24 maxlen: 24
                          192.234.137.0/24 maxlen: 24
                          192.234.138.0/24 maxlen: 24
                          192.234.139.0/24 maxlen: 24
                          192.234.140.0/24 maxlen: 24
                          198.179.151.0/24 maxlen: 24
                          198.179.152.0/24 maxlen: 24
                          198.179.153.0/24 maxlen: 24
                          198.179.154.0/24 maxlen: 24
                          198.179.155.0/24 maxlen: 24
                          198.179.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c3:42:04:19:11:e6:86:2f:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=64a1d67c-af73-4d08-82c5-1f80fc1fe512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:b6:5a:45:bd:89:f7:24:7c:36:5e:c6:7a:
                    6b:12:50:08:63:88:57:58:80:36:2f:e3:1a:0d:fb:
                    17:16:b7:35:5c:40:c3:f2:b3:19:61:cb:d5:d5:29:
                    75:a1:4a:dc:7e:f3:1c:66:db:a4:63:3a:49:c1:5c:
                    9e:f7:b8:fd:a4:42:6c:3c:6d:f2:c5:e9:32:66:33:
                    e2:de:83:83:3d:37:55:3f:2d:07:03:1e:f5:d9:1a:
                    12:94:f5:8f:79:b7:cb:8d:48:79:71:3c:d3:7f:bf:
                    c5:42:04:2e:e9:3c:ec:d4:f1:35:19:f4:6a:17:c8:
                    29:c9:80:cb:9e:09:8b:04:57:6d:c5:cf:25:42:a0:
                    80:da:9c:34:41:fb:43:b7:43:64:0b:e6:ba:26:4f:
                    9f:95:b5:c6:2c:8f:66:24:53:fc:88:31:3c:80:a7:
                    cb:68:91:fc:33:3d:7d:b4:51:c3:84:95:ef:78:b6:
                    f1:1d:2d:ce:93:9e:28:4d:76:2e:ae:66:d7:2b:23:
                    14:74:1d:2c:ab:bd:b5:da:ef:30:a4:5f:32:85:db:
                    bd:f4:92:c4:b3:57:bd:6b:21:ce:7d:4b:1f:59:cd:
                    54:f7:6f:85:ce:8c:8a:92:81:17:6b:b8:d6:ef:57:
                    bd:15:c3:27:ad:2b:9c:78:cc:84:62:61:ac:97:c2:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3F:E7:23:1B:B7:08:CD:26:B9:CA:E4:48:21:5F:1D:90:E6:39:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.152.0.0/16
                  192.234.136.0-192.234.140.255
                  198.179.151.0-198.179.156.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:58:7d:1a:f9:26:a1:b6:c4:c7:84:12:9e:9d:55:ae:2e:83:
         5c:d3:88:d8:e8:70:ca:58:60:40:e7:04:5d:61:01:0f:9f:06:
         ac:b9:45:fe:f7:32:1b:15:e5:f1:bb:75:3d:0c:a6:a2:05:97:
         fd:07:4b:dd:95:1c:c6:2d:24:2b:9f:65:0a:89:00:f1:89:84:
         00:a4:1e:62:99:9c:1a:d7:22:8d:a4:b8:ba:01:50:31:fb:7c:
         90:83:fc:c1:e5:66:8a:42:a6:50:12:06:67:d2:e8:b4:c3:a8:
         ee:25:4b:43:b2:b6:7e:d9:e1:c3:a8:6a:68:f2:fb:25:b0:8d:
         83:13:4b:94:32:eb:26:0e:28:bf:72:86:7b:0e:c1:63:8b:00:
         b9:b9:85:8b:9a:d0:7b:23:32:f0:77:06:f1:ed:aa:66:bc:89:
         b9:36:fb:2c:e2:99:b8:12:30:9a:87:2d:8d:42:14:7b:1a:77:
         7f:08:a5:57:af:ed:9d:67:ca:78:46:80:6d:3d:03:44:43:75:
         68:4f:07:f8:7a:97:9b:c8:1c:18:28:6e:ae:e1:26:11:d6:25:
         c6:da:e3:4f:38:f3:0f:8d:75:39:ac:04:ce:3c:ae:a7:d6:91:
         02:a4:e3:37:9a:17:4e:69:60:37:e0:da:fa:b9:3b:90:d1:9e:
         68:7d:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:40 2024 by rpki-client on console-fra.rpki-client.org