Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa
File:                     a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json)
Hash identifier:          2tXTZLgbLXfrlgdWhuP1+ZZa84Hy4avd6YcPwGC9UGA=
Subject key identifier:   11:9C:7D:EE:B6:B2:B6:5F:CE:6D:8C:5A:E6:4E:FD:47:2A:D7:21:21
Certificate issuer:       /CN=8df83f2e-e4b4-4953-8acc-7816b333d332
Certificate serial:       010D0C9F4328584722A07911693FD0E7A7F3A880
Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     46844
IP address blocks:        45.58.128.0/18 maxlen: 24
                          64.32.0.0/19 maxlen: 24
                          67.21.64.0/19 maxlen: 24
                          70.39.64.0/18 maxlen: 24
                          104.37.244.0/22 maxlen: 24
                          104.160.160.0/19 maxlen: 24
                          107.167.0.0/19 maxlen: 24
                          170.178.160.0/19 maxlen: 24
                          174.128.224.0/19 maxlen: 24
                          198.148.80.0/20 maxlen: 24
                          199.115.100.0/22 maxlen: 24
                          204.188.192.0/18 maxlen: 24
                          208.98.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:79:11:69:3f:d0:e7:a7:f3:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=28e51659-468b-4adc-93a8-348cd6c32c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:33:60:ab:eb:81:1f:9c:38:b0:e0:21:37:
                    81:56:dd:cf:27:d8:cd:01:d2:e8:b3:bc:db:70:58:
                    35:77:7d:65:ee:16:cb:db:1c:69:2d:fe:49:8b:10:
                    1e:fd:05:40:2e:4b:ed:d1:29:5e:79:54:33:0f:aa:
                    0e:aa:15:fe:43:50:87:82:c4:44:fd:00:63:48:82:
                    54:09:14:da:1a:19:a8:57:1d:9b:aa:bf:1b:11:ad:
                    28:15:86:17:20:40:81:69:76:ad:80:5d:f1:1c:8a:
                    27:4e:b2:cd:37:b6:b4:cf:a9:47:bd:08:74:05:77:
                    f0:cd:d5:29:d5:6f:fd:bc:90:4e:8e:4d:f0:a0:44:
                    95:8e:55:86:33:0b:22:ee:c3:9a:9e:9a:93:d5:d1:
                    fd:ea:bd:54:55:b8:62:2a:7b:80:19:79:09:d8:e7:
                    13:ef:e4:07:8e:86:82:a3:cf:27:bb:90:4a:82:fb:
                    88:f0:b9:b2:78:cf:3d:02:39:b0:9c:3d:11:cf:d3:
                    f2:4c:92:f2:29:80:72:11:85:78:12:d2:4e:ce:71:
                    ec:a9:85:44:c0:c5:dd:9f:ed:af:06:6c:1f:ea:93:
                    a4:ee:65:0a:77:b1:08:4b:76:fa:a0:05:f4:bd:39:
                    8d:0f:b7:dc:a1:4e:9a:08:41:36:6c:ca:d1:6d:0f:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9C:7D:EE:B6:B2:B6:5F:CE:6D:8C:5A:E6:4E:FD:47:2A:D7:21:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl

            X509v3 Authority Key Identifier:
                keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.128.0/18
                  64.32.0.0/19
                  67.21.64.0/19
                  70.39.64.0/18
                  104.37.244.0/22
                  104.160.160.0/19
                  107.167.0.0/19
                  170.178.160.0/19
                  174.128.224.0/19
                  198.148.80.0/20
                  199.115.100.0/22
                  204.188.192.0/18
                  208.98.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:84:1f:b0:19:94:45:fc:5a:d7:29:ea:5b:fd:50:0d:fc:54:
         14:8c:a1:ba:ad:c8:d4:76:ed:d2:00:1f:5c:d1:d7:07:a4:ea:
         c7:67:5f:52:8a:e4:e1:9a:1d:47:12:23:0d:6e:6e:77:75:94:
         5c:27:7e:e0:d8:6b:27:b5:db:d1:b5:20:ae:52:d6:55:3f:a1:
         df:1d:8a:e7:de:63:a2:48:58:e0:ed:09:38:58:a0:0d:3d:94:
         40:0f:cf:d8:b4:f7:fb:08:d7:36:63:55:34:b5:d1:f1:2d:82:
         2d:53:ec:84:22:e6:60:8b:90:d1:00:84:2c:f3:9d:5c:f3:c5:
         20:c9:6d:69:67:54:3f:b0:15:06:6f:ea:6c:64:a8:49:0d:28:
         c0:1f:ef:80:d6:71:ba:74:4e:f5:c5:5f:03:61:5b:da:55:48:
         91:54:b6:cd:3c:2c:63:a9:cb:33:cb:06:73:d0:26:56:46:e8:
         e8:44:5b:c0:62:b8:59:c4:dc:15:de:a7:b5:5d:a5:4c:9d:d1:
         9a:19:ca:2f:93:73:fc:ac:df:2d:85:3e:e0:d5:39:fc:f1:c2:
         e7:1b:be:4f:03:07:44:6f:74:82:1c:af:6a:19:dc:3f:d7:52:
         a3:e6:b8:37:31:71:8d:70:a0:17:c2:90:79:d2:19:9b:04:fe:
         e4:d4:2d:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org