Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
File:                     fa603d7b-627f-38af-83f9-1ffef126c099.roa (raw, json)
Hash identifier:          ITcOVPfOKf2uERFWjY0aTXhAFIvqEvuth1XjRHqCzpI=
Subject key identifier:   0D:79:9C:99:CF:E2:73:6E:85:11:85:62:B3:BB:78:D0:73:A6:4B:B1
Certificate issuer:       /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
Certificate serial:       010D0C9F432858475BDB7BBAA8ACB0829FB10600
Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     19201
IP address blocks:        64.127.160.0/19 maxlen: 24
                          66.171.0.0/20 maxlen: 24
                          170.62.0.0/19 maxlen: 24
                          198.183.172.0/24 maxlen: 24
                          199.30.120.0/21 maxlen: 24
                          199.127.220.0/22 maxlen: 24
                          199.187.248.0/21 maxlen: 24
                          199.201.76.0/22 maxlen: 24
                          208.54.160.0/20 maxlen: 24
                          2605:27c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:7b:ba:a8:ac:b0:82:9f:b1:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=ccae027d-abc9-4020-934a-0252555f92b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:fb:27:9c:34:06:f0:e3:c9:1d:3f:06:65:
                    06:6b:c0:b5:75:4c:b7:a9:7d:57:2e:51:5b:18:0a:
                    9d:ec:b5:f8:37:30:52:86:a1:96:8e:a0:69:80:45:
                    9f:cc:77:8d:45:4f:90:55:81:51:a0:5d:b5:d0:c1:
                    0e:6c:e4:42:70:c2:89:a9:44:72:69:1f:1e:1e:ce:
                    d0:c5:a3:69:bf:cb:94:22:d0:4a:92:24:db:6a:2f:
                    eb:4f:26:08:c1:09:dd:b5:42:38:5b:db:5a:c0:eb:
                    05:07:9c:cf:4e:f5:6c:8b:bc:66:2a:04:ad:b3:83:
                    31:b8:0d:34:61:5b:41:b4:d3:b4:97:1c:40:32:5f:
                    d8:40:af:ff:4e:02:15:bd:d4:26:3c:07:4d:40:43:
                    e7:4b:23:7f:3d:6d:e8:77:be:a1:39:8a:cd:eb:fc:
                    89:29:fc:9c:45:07:f1:cb:f1:d9:3d:5c:05:17:2c:
                    67:e9:e6:4b:c9:72:dc:92:10:39:27:ab:05:da:e4:
                    da:36:8e:b8:c8:58:ac:1f:aa:6b:df:49:16:44:05:
                    13:50:3c:ab:23:fd:d1:3b:b2:49:c5:8b:6b:35:c4:
                    84:ce:94:0c:c0:f8:e6:51:cb:73:f5:db:6b:b3:77:
                    cd:b9:b0:dc:6f:89:fc:90:ea:10:4d:21:04:a4:bb:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:79:9C:99:CF:E2:73:6E:85:11:85:62:B3:BB:78:D0:73:A6:4B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.160.0/19
                  66.171.0.0/20
                  170.62.0.0/19
                  198.183.172.0/24
                  199.30.120.0/21
                  199.127.220.0/22
                  199.187.248.0/21
                  199.201.76.0/22
                  208.54.160.0/20
                IPv6:
                  2605:27c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:39:96:1c:31:bd:2f:ca:df:a0:c7:7c:d1:fc:27:6c:b3:
         7f:0b:2a:7e:e4:1d:cc:7d:7b:df:ff:f5:4f:cf:73:5c:3f:6d:
         01:27:32:45:8d:27:a0:95:7c:d0:d6:30:5b:5d:09:5e:51:f4:
         bd:7d:a1:ba:e4:55:85:d6:76:43:2e:89:2a:9f:64:ea:86:a8:
         1b:2e:59:63:dc:de:0c:4e:ec:86:0b:1a:9b:92:27:77:0b:0b:
         9f:35:ec:59:5e:1d:1a:d2:96:11:ef:34:3e:b4:63:53:c3:28:
         52:c6:70:6b:30:74:71:89:94:d1:10:bf:bc:a0:ba:bc:d1:a6:
         d8:81:5e:f7:b8:62:99:d9:f8:0f:e0:be:9b:7f:ef:fa:29:b5:
         98:65:4a:ec:93:a5:0a:d9:3b:03:39:06:ff:77:6e:8c:38:71:
         42:d9:cb:62:e5:2f:19:2a:7b:50:9e:c4:41:ac:cf:a0:6a:13:
         9b:4c:d2:ca:70:6d:5f:a0:87:4b:00:9d:7d:0a:1d:de:96:eb:
         2b:f8:83:1c:31:5d:b7:03:fe:76:48:d2:2f:a2:17:d1:cb:8a:
         4a:98:46:87:08:1c:13:53:3e:e0:3f:1e:0a:59:e6:bd:42:1c:
         be:ab:c9:36:31:ae:d9:02:93:71:ef:38:b4:e9:27:41:9a:68:
         88:2c:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org