Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa
File:                     edc4d5df-d459-3a48-842a-38fdbe6d709e.roa (raw, json)
Hash identifier:          DRNqgFxlgxRSdekhdjgG7I/kTtwIgM64RNsi6avA794=
Subject key identifier:   03:A6:91:E8:16:30:5D:C0:64:61:84:05:AE:AB:B4:90:83:26:1D:09
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858477230E806C434C1A13F075880
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     46261
IP address blocks:        216.158.192.0/24 maxlen: 24
                          216.158.194.0/24 maxlen: 24
                          216.158.195.0/24 maxlen: 24
                          216.158.196.0/24 maxlen: 24
                          216.158.197.0/24 maxlen: 24
                          216.158.199.0/24 maxlen: 24
                          216.158.200.0/24 maxlen: 24
                          216.158.201.0/24 maxlen: 24
                          216.158.202.0/24 maxlen: 24
                          216.158.203.0/24 maxlen: 24
                          216.158.204.0/24 maxlen: 24
                          216.158.206.0/24 maxlen: 24
                          216.158.208.0/24 maxlen: 24
                          216.158.209.0/24 maxlen: 24
                          216.158.212.0/24 maxlen: 24
                          216.158.213.0/24 maxlen: 24
                          216.158.216.0/24 maxlen: 24
                          216.158.217.0/24 maxlen: 24
                          216.158.218.0/24 maxlen: 24
                          216.158.221.0/24 maxlen: 24
                          216.158.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e8:06:c4:34:c1:a1:3f:07:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=582a85b1-18f7-49cd-a441-d2b3ede6f600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:85:82:98:7a:45:98:d5:72:b1:f7:be:06:
                    03:b4:9c:ea:25:38:78:ee:a2:cb:7f:c6:b4:b6:42:
                    77:e2:e9:24:1d:90:15:88:40:dc:ef:7f:97:07:6a:
                    1c:61:5d:dd:62:f5:cc:eb:0c:19:73:4c:4f:40:c3:
                    f5:21:f7:c2:28:ba:fc:88:4f:34:f8:5b:67:d3:cc:
                    30:81:82:44:0b:d5:b0:81:3c:25:82:9b:e8:2e:68:
                    d8:9f:a7:1c:ec:6e:cb:bc:24:fe:d3:bc:29:c1:2e:
                    c6:d1:7b:6c:07:f1:9f:c4:10:9e:2e:c9:d1:32:b8:
                    ca:c1:85:79:fa:22:0f:a8:f4:47:b8:cc:ea:4d:0d:
                    24:7f:e5:cd:de:9c:f2:9b:8b:19:d5:c6:1d:a9:9a:
                    9a:76:4d:25:70:c4:df:54:6e:d6:d2:eb:6c:ac:4b:
                    fe:9a:b4:78:b7:8f:e6:54:94:80:43:72:48:9a:2a:
                    0c:0a:32:ea:55:8c:72:7f:a6:5d:50:15:62:ae:8c:
                    76:ab:6a:d1:57:82:fb:87:65:80:e5:56:29:c5:f7:
                    d7:2d:cf:6b:dc:b0:f0:93:09:c4:82:50:a7:75:11:
                    cf:8c:67:ba:07:b3:66:87:e7:99:a3:59:28:01:96:
                    bd:a5:91:67:2d:28:52:3f:cc:ee:10:2d:ce:72:a2:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:91:E8:16:30:5D:C0:64:61:84:05:AE:AB:B4:90:83:26:1D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/edc4d5df-d459-3a48-842a-38fdbe6d709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.192.0/24
                  216.158.194.0-216.158.197.255
                  216.158.199.0-216.158.204.255
                  216.158.206.0/24
                  216.158.208.0/23
                  216.158.212.0/23
                  216.158.216.0-216.158.218.255
                  216.158.221.0-216.158.222.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:c2:9a:20:31:c5:0b:e3:92:72:b6:46:4a:ab:a4:66:75:
         50:da:20:aa:c7:0a:f6:db:43:7b:f3:28:e1:a2:43:56:0a:36:
         c6:ed:d5:8c:1d:4f:dc:4f:cd:a9:34:c4:23:60:f7:7e:25:63:
         95:5e:54:60:04:7b:8a:4e:0a:26:d1:3a:19:40:3f:79:95:2e:
         f4:ba:b7:6a:02:e8:9a:c9:66:cc:c2:77:7e:c3:af:69:d0:86:
         5b:82:aa:fe:89:b0:34:4e:90:4d:f3:87:bc:80:e0:75:42:90:
         7e:83:8f:76:23:d2:e5:ae:84:fb:af:93:7f:34:75:13:61:33:
         cb:a3:21:8e:15:78:bb:8a:57:a6:63:e1:be:a1:1b:a6:9f:65:
         58:9c:47:19:15:90:eb:8e:dd:6d:75:aa:4f:4f:78:af:92:b7:
         02:18:10:43:2c:89:9a:cc:7a:b0:87:6c:b8:d1:19:f6:67:88:
         bf:73:6e:76:78:b5:11:85:59:5a:3d:8a:fa:dd:fa:9e:bc:65:
         44:65:52:eb:5c:34:21:64:15:bc:e4:0a:3b:4b:fa:c5:7a:eb:
         f4:31:63:9a:d9:55:e6:99:46:86:d5:6b:f4:65:4d:42:f7:65:
         54:22:d6:d8:ea:70:14:c3:f5:1b:2a:af:10:87:d9:7a:d1:38:
         c1:53:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:57 2024 by rpki-client on console-fra.rpki-client.org