Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/46ac5db9-27ee-3312-930e-21c80d3a2fab.roa
File:                     46ac5db9-27ee-3312-930e-21c80d3a2fab.roa (raw, json)
Hash identifier:          qpOoaC8U+J7xOomBbWLExD1QWf9ChlXqEgvfP88Ppf8=
Subject key identifier:   86:DD:C1:DF:DF:4C:CE:FF:1A:CA:C1:5B:03:18:11:EF:E5:9C:0E:55
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285847B1015E17A090E28DC9C11180
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/46ac5db9-27ee-3312-930e-21c80d3a2fab.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     9009
IP address blocks:        172.102.201.0/24 maxlen: 24
                          172.102.205.0/24 maxlen: 24
                          172.102.206.0/24 maxlen: 24
                          172.102.210.0/24 maxlen: 24
                          172.102.211.0/24 maxlen: 24
                          172.102.215.0/24 maxlen: 24
                          172.102.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5e:17:a0:90:e2:8d:c9:c1:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=fad58c57-c1db-4310-b4b1-71979e8efc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:26:73:ff:58:65:4b:98:c0:50:57:67:65:
                    f4:9a:1c:06:87:5a:a3:9a:23:dc:d4:17:52:aa:12:
                    2d:98:67:5d:65:ce:39:cc:74:76:1f:bc:86:82:7b:
                    21:e1:c6:53:f6:d3:75:9d:67:80:40:5c:e7:a0:b1:
                    22:25:f1:6a:b6:4b:2b:91:e7:6f:c1:01:5f:1c:34:
                    53:c3:f1:45:3d:0d:db:34:62:32:4f:32:0f:b0:84:
                    45:64:77:6e:66:51:32:f3:b8:e9:7d:87:a9:de:97:
                    70:43:44:fb:a7:ea:d7:4b:a3:91:fe:b1:21:df:b9:
                    e5:33:fc:39:6b:57:20:f6:c7:20:f8:6e:65:18:ab:
                    95:16:8c:a8:db:4f:44:f6:7b:70:11:03:5c:63:80:
                    da:94:13:d4:80:ef:99:14:75:02:b2:0b:d2:33:f6:
                    35:32:bf:df:fa:4f:38:81:67:86:d1:be:59:5a:f1:
                    24:ec:6e:a7:be:5c:3c:38:9f:61:4b:91:a9:ae:a6:
                    74:81:9f:c9:a6:f3:a9:33:8c:14:4c:a6:20:24:0c:
                    81:5e:8e:de:27:41:c5:7b:70:2e:de:71:4a:b7:d3:
                    97:e9:56:51:e6:4e:6d:1a:70:98:85:f9:b3:d6:1c:
                    a1:d0:2c:ea:3a:0c:90:c9:e3:d1:1c:21:e6:7c:de:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:C1:DF:DF:4C:CE:FF:1A:CA:C1:5B:03:18:11:EF:E5:9C:0E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/46ac5db9-27ee-3312-930e-21c80d3a2fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.201.0/24
                  172.102.205.0-172.102.206.255
                  172.102.210.0/23
                  172.102.215.0-172.102.216.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:54:89:97:57:6b:f8:24:7f:00:0c:e2:c8:e9:95:94:52:18:
         7c:4f:37:e0:d6:24:32:aa:f2:2e:76:44:9f:c5:9d:43:16:1a:
         a6:f6:e9:43:4f:e8:46:a4:85:c1:27:34:b8:a3:3d:b8:69:ba:
         fe:e7:e4:26:79:3c:18:29:c8:2e:ab:8e:48:9d:b3:5c:e0:fc:
         6f:b4:8b:b5:0f:29:fc:3f:76:16:4c:f4:d3:c2:0f:c4:b2:ac:
         25:95:79:22:3b:e0:9d:8b:f8:6f:41:91:a9:fa:3e:8d:cc:52:
         f2:e9:54:83:85:bb:61:ca:75:1a:a3:51:4b:fb:80:66:5a:8c:
         e1:ec:ec:f7:4e:84:60:ec:df:64:0e:df:79:17:a2:d7:fd:62:
         40:d2:98:15:24:48:8b:3a:f7:e8:55:71:cb:74:88:f7:00:10:
         50:bb:bf:c0:f8:d9:6f:ba:a5:b9:30:04:f3:18:69:16:f9:ee:
         c0:20:ad:9c:4a:f7:07:fd:26:17:c3:ca:c5:9e:c6:87:4a:16:
         12:5b:07:e4:cc:dd:5d:15:f6:62:75:c8:01:01:38:70:a4:bc:
         10:25:b0:0c:17:07:83:c4:aa:a2:89:71:b4:88:38:80:a5:7c:
         f8:f0:24:20:0f:29:e0:18:c9:42:e9:56:6b:d9:eb:29:08:db:
         f0:1b:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org