Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
File:                     6806c449-9b48-3ef6-8232-47296eb5e804.roa (raw, json)
Hash identifier:          12u3EsJlwFJFehdGxc+X3Ylq5OYAnMiNixFS4EpgfQs=
Subject key identifier:   FD:9E:F9:D9:F4:9F:EF:CE:0F:02:30:BB:15:DF:B3:B8:C2:95:FE:0C
Certificate issuer:       /CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
Certificate serial:       010D0C9F43285847299B2A018BFD7E59F336E580
Authority key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     46886
IP address blocks:        104.36.252.0/22 maxlen: 32
                          104.193.128.0/22 maxlen: 32
                          158.51.192.0/22 maxlen: 32
                          165.140.16.0/22 maxlen: 32
                          170.178.140.0/22 maxlen: 32
                          2602:ffa4::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:2a:01:8b:fd:7e:59:f3:36:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=8a00bbd2-84f8-4b12-89f7-71d420d8b717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:8d:9c:86:98:93:16:f9:40:52:de:ed:7c:
                    fc:fd:00:27:41:19:5e:7a:a6:d7:8c:bc:3b:ba:e7:
                    9b:61:f6:24:bd:cb:c1:1d:b1:70:28:f2:41:2d:c0:
                    21:44:bb:ff:29:34:29:31:e5:9a:a2:dd:79:fb:c6:
                    2e:71:dc:bb:60:bb:a6:b5:bc:98:c8:b7:f4:d5:84:
                    b2:9a:90:66:5d:8a:b6:21:46:6f:df:cf:13:23:0e:
                    a6:9d:df:98:b7:a1:f8:bb:a6:5d:94:cb:55:ec:bd:
                    63:f5:dd:a2:f8:c9:41:30:0e:b7:90:36:ed:f8:11:
                    29:36:2d:f3:36:9e:fa:69:ac:c9:40:15:1f:e3:a1:
                    99:10:49:0c:20:55:d9:a7:57:12:72:03:dc:1c:d0:
                    c6:82:81:70:89:86:11:fa:e9:26:45:61:0e:17:46:
                    6c:02:a2:67:a4:b6:60:e5:a4:03:03:0e:38:3a:1e:
                    88:7a:35:84:05:1c:2d:ea:a5:55:38:12:f9:67:6e:
                    d1:68:f6:05:67:f5:ae:c4:32:20:a2:44:bf:09:64:
                    4c:b8:48:18:f9:ba:c1:57:f4:02:c2:4b:36:4b:41:
                    8b:13:87:e4:35:82:3e:ed:a4:ef:47:9f:99:d5:c6:
                    ff:54:2a:8f:b6:9f:89:0d:ed:0c:c9:31:62:fa:68:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:F9:D9:F4:9F:EF:CE:0F:02:30:BB:15:DF:B3:B8:C2:95:FE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl

            X509v3 Authority Key Identifier:
                keyid:AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.252.0/22
                  104.193.128.0/22
                  158.51.192.0/22
                  165.140.16.0/22
                  170.178.140.0/22
                IPv6:
                  2602:ffa4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:27:62:96:e5:e4:15:43:c3:db:8a:dd:f8:84:39:4f:bf:
         b5:04:e1:22:7d:46:ec:76:f8:5b:e0:51:2f:81:81:00:fd:1a:
         41:fa:fb:03:7f:90:f1:11:87:54:c3:dd:20:2e:f9:ea:f8:e9:
         e0:3b:a0:0f:12:3e:57:8d:d6:ed:57:26:06:b6:3b:44:3b:67:
         96:d9:aa:dd:fd:0f:65:de:f6:90:b9:87:32:40:5c:82:b6:9e:
         ad:92:6e:89:46:43:d8:79:a3:40:06:37:d8:21:cb:d6:37:86:
         74:0b:38:e3:02:6a:cd:dc:06:90:1a:c7:fa:9d:b6:b7:19:e1:
         e2:34:16:64:69:f0:04:d2:87:30:cb:ed:f3:ea:fc:a9:01:59:
         2d:fa:4c:bb:3a:a0:90:ae:dc:c1:e5:1a:2f:b4:e4:a3:97:cb:
         99:d1:11:a0:e6:54:a8:c2:c1:56:2b:63:97:02:da:c4:df:90:
         ea:32:30:86:4f:d4:91:70:e7:11:cf:29:06:d1:98:50:88:9d:
         e1:68:e8:fd:c0:37:a3:38:00:79:98:a5:fa:93:59:31:4b:3a:
         87:e5:ed:fa:08:46:a7:c1:7b:a0:23:57:78:e0:f4:69:76:3f:
         76:f4:de:98:dd:78:68:68:89:1f:cc:6e:05:df:18:b2:70:1e:
         09:36:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org