Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa
File:                     81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa (raw, json)
Hash identifier:          BA+abRLryy614f3tKvQ/TuIqkZtUDLTPmCNhMu1iIzo=
Subject key identifier:   29:8B:DC:26:FC:F4:07:C0:B4:63:7B:4C:8F:41:57:D5:74:E5:CF:81
Certificate issuer:       /CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
Certificate serial:       010D0C9F4328584793B1239AD44828F617E6B100
Authority key identifier: 32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     36861
IP address blocks:        204.58.156.0/22 maxlen: 24
                          204.58.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:23:9a:d4:48:28:f6:17:e6:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=8ea1af28-35fc-4299-ae79-9d058d8e6a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:79:f2:dc:15:4f:e7:cc:d9:a9:80:4e:5f:
                    a4:9d:b9:71:09:6f:50:b2:d7:86:b3:2f:a2:32:4e:
                    83:f0:2b:2c:58:3d:82:a5:a2:58:3a:14:6a:40:f5:
                    88:e0:9a:b9:08:9d:93:10:11:2f:6a:61:e5:88:89:
                    62:f6:c8:aa:f6:46:5e:41:3c:18:0d:cf:cb:26:cd:
                    4d:6e:1a:9b:dc:1c:14:bd:bc:33:24:ea:e2:64:86:
                    1e:08:ac:0b:5c:3c:02:0a:48:af:2a:48:d3:07:a0:
                    59:3a:3d:5d:62:60:7f:62:4b:4d:68:d0:66:88:9f:
                    c2:79:d0:7d:13:9e:eb:22:84:02:b5:f4:70:89:0f:
                    c0:a6:c3:29:6b:7d:7f:82:fc:13:4e:ef:66:8c:5e:
                    de:c2:83:c0:e9:fa:a9:73:15:85:fe:b1:97:f0:8e:
                    1f:bd:e2:a1:f9:df:9b:45:d4:d8:03:a1:84:b3:98:
                    16:5b:fe:21:cd:38:69:24:62:50:71:20:54:87:05:
                    97:04:56:21:06:f1:64:00:0c:d3:a8:e5:bf:9e:d3:
                    4b:2b:a7:fc:a8:4c:4f:76:be:78:49:d6:7e:5f:36:
                    2a:68:0e:5e:df:a0:47:3d:e2:b8:8a:85:29:f4:64:
                    0e:d1:63:46:75:ff:f0:32:86:50:c3:67:91:4d:fa:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:DC:26:FC:F4:07:C0:B4:63:7B:4C:8F:41:57:D5:74:E5:CF:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.crl

            X509v3 Authority Key Identifier:
                keyid:32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.58.156.0-204.58.167.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:f5:b5:8e:cc:ab:69:f6:8b:cc:d7:cd:60:c0:48:66:ab:
         5e:01:9a:e1:c4:47:7f:6b:68:4d:12:aa:9f:42:fc:63:97:6c:
         45:66:08:92:00:65:26:b0:bf:ec:eb:bd:94:a4:37:bb:7a:1d:
         7a:58:6f:4a:42:c7:31:b7:0d:ed:78:91:01:39:0c:07:f3:b8:
         ea:d7:ee:2a:e1:41:9a:3b:7c:e5:b4:64:5e:95:45:1d:5e:9e:
         1b:27:8d:c8:79:96:c5:45:54:bd:34:90:c9:42:39:c1:f3:03:
         4e:7c:b3:5a:6a:56:64:3f:6f:48:83:6d:f5:21:76:fb:ca:5b:
         d5:1d:a6:53:e9:37:45:13:04:e7:fe:49:ae:e5:05:53:1d:05:
         6a:57:9b:c4:c9:59:59:a7:5f:53:b4:11:bf:e4:18:57:b5:63:
         c4:0e:a7:96:4a:29:8d:48:ad:78:99:db:17:84:43:cc:e0:c5:
         85:78:55:a4:3e:47:c7:49:85:47:41:09:cd:a4:9c:77:e2:cd:
         70:7e:8c:cd:78:da:91:bb:aa:90:4d:70:a2:cb:53:da:ee:f7:
         43:89:de:c5:23:26:43:80:e9:43:85:8b:8a:e4:96:db:3c:9f:
         f8:a3:53:09:cc:69:94:b0:69:69:c5:e6:ff:76:76:3b:e3:d8:
         da:73:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:42 2024 by rpki-client on console-fra.rpki-client.org