Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
File:                     ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa (raw, json)
Hash identifier:          wuHs9ErPueJRXqSPxVCynGh9p9m8V/v1VDKbuLyPqtg=
Subject key identifier:   22:D3:70:99:3C:FE:AD:43:6E:2A:15:26:8E:BF:E6:69:CE:6E:7C:D7
Certificate issuer:       /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial:       010D0C9F43285847600B90555EF31FED3B83EB80
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     19108
IP address blocks:        24.224.36.0/23 maxlen: 24
                          24.224.44.0/24 maxlen: 24
                          24.224.55.0/24 maxlen: 24
                          24.224.56.0/24 maxlen: 24
                          24.224.58.0/23 maxlen: 24
                          24.224.60.0/22 maxlen: 24
                          24.245.72.0/22 maxlen: 24
                          64.234.0.0/23 maxlen: 24
                          64.234.8.0/24 maxlen: 24
                          64.234.16.0/24 maxlen: 24
                          64.234.30.0/23 maxlen: 24
                          64.234.34.0/24 maxlen: 24
                          64.234.47.0/24 maxlen: 24
                          64.234.55.0/24 maxlen: 24
                          64.234.67.0/24 maxlen: 24
                          64.234.68.0/24 maxlen: 24
                          64.234.74.0/24 maxlen: 24
                          64.234.78.0/24 maxlen: 24
                          67.21.185.0/24 maxlen: 24
                          69.59.64.0/24 maxlen: 24
                          69.59.73.0/24 maxlen: 24
                          69.59.82.0/24 maxlen: 24
                          69.59.104.0/24 maxlen: 24
                          208.91.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:90:55:5e:f3:1f:ed:3b:83:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=86a167ad-0d38-4b90-a5a2-b30072f61599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:d5:a4:6f:6f:46:86:f9:65:b7:73:28:2d:
                    5e:65:a1:c9:37:3c:28:6b:4d:08:40:dc:d2:a0:fa:
                    9c:34:7b:96:53:33:f8:94:ee:41:fb:66:7d:90:08:
                    3d:5c:68:31:62:a3:95:07:cb:d6:b7:ed:90:47:0a:
                    6a:fc:32:2c:39:5a:2c:e4:16:ca:63:99:3d:70:ca:
                    94:3b:f0:cc:c1:f3:db:be:75:f5:f2:fe:2c:7b:04:
                    7d:07:82:a3:b8:92:51:7e:2e:85:71:7c:ea:ce:fe:
                    54:d3:0b:c4:8d:21:95:53:a9:ff:83:60:2d:32:e5:
                    84:d8:88:83:06:aa:bb:cd:86:2d:a3:f6:6d:68:ed:
                    10:b4:9f:fb:4d:9b:26:66:f6:89:c2:21:eb:a1:b2:
                    65:12:00:da:2b:87:e0:1f:17:da:aa:4b:48:82:27:
                    22:8e:fd:d1:5b:28:b2:cf:ec:48:d1:63:f3:87:30:
                    c5:5c:11:fd:4b:e6:44:cf:c0:f5:0b:a1:f4:99:09:
                    2d:ba:e1:af:6b:3d:8f:df:23:99:ae:d8:dc:5e:8a:
                    9d:b7:52:4b:3a:61:aa:3d:db:0a:38:6d:b8:08:64:
                    65:b3:22:e5:66:84:aa:4b:8a:06:bf:5d:2e:9d:da:
                    7b:12:c9:59:e5:95:50:09:cc:0f:79:f3:4b:a3:05:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D3:70:99:3C:FE:AD:43:6E:2A:15:26:8E:BF:E6:69:CE:6E:7C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.36.0/23
                  24.224.44.0/24
                  24.224.55.0-24.224.56.255
                  24.224.58.0-24.224.63.255
                  24.245.72.0/22
                  64.234.0.0/23
                  64.234.8.0/24
                  64.234.16.0/24
                  64.234.30.0/23
                  64.234.34.0/24
                  64.234.47.0/24
                  64.234.55.0/24
                  64.234.67.0-64.234.68.255
                  64.234.74.0/24
                  64.234.78.0/24
                  67.21.185.0/24
                  69.59.64.0/24
                  69.59.73.0/24
                  69.59.82.0/24
                  69.59.104.0/24
                  208.91.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b5:a8:e7:2c:51:46:58:af:af:6d:7d:e2:b5:34:7a:c3:86:
         b3:e1:89:6c:09:7c:00:9d:09:85:36:ba:fa:54:0c:f3:e1:03:
         dc:d7:08:a1:1c:2e:b2:0e:51:ef:d9:e6:8d:9f:4c:a9:d0:73:
         2a:91:1a:ea:90:8d:0c:b8:30:b9:5b:75:2e:77:d3:da:70:12:
         a1:01:dc:72:71:95:00:d9:10:db:4b:dd:9a:fa:a1:5b:9d:16:
         6c:f1:8f:c2:ae:74:da:d2:c0:bd:b8:a5:1a:f5:75:08:7a:b5:
         57:1d:a2:e0:46:7a:cb:85:78:7c:fc:5c:0b:9a:db:75:27:52:
         7d:dc:a0:db:bf:79:b7:f1:b3:c8:44:d6:62:ff:55:eb:41:bc:
         cd:41:8f:57:88:d5:f1:de:fe:3f:63:0a:b1:11:63:ec:b6:17:
         27:de:be:1e:6a:41:5b:0c:39:95:85:43:25:b0:72:d5:ed:6d:
         f5:d8:3f:6f:56:5e:03:7c:7b:be:64:8b:87:c8:53:69:8c:ff:
         d1:19:cc:f3:43:1c:ed:e3:84:79:1e:64:df:73:c8:07:22:0d:
         dd:06:dd:41:60:03:0c:e6:46:a2:ec:2e:35:13:26:f4:ad:ac:
         23:d5:20:66:d0:5c:39:de:d8:b3:09:7b:b8:1d:80:2d:8a:a9:
         ca:a0:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:44 2024 by rpki-client on console-ams.rpki-client.org