Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
File:                     d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json)
Hash identifier:          mxH2n6fxY3VNni+iV7TfGBuiwRioIt4vmL5+YyYzZds=
Subject key identifier:   7C:E6:AE:AF:C8:C7:B8:0F:5B:61:E6:C6:57:DF:AD:62:0D:D5:0B:A4
Certificate issuer:       /CN=7b840891-ef20-464d-970d-ffec736f7949
Certificate serial:       010D0C9F4328584754E0C7CB6CA06DC6B9FD3700
Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     30500
IP address blocks:        74.123.68.0/22 maxlen: 24
                          198.134.28.0/22 maxlen: 24
                          208.77.196.0/22 maxlen: 24
                          208.123.208.0/24 maxlen: 24
                          208.123.210.0/23 maxlen: 24
                          208.123.212.0/22 maxlen: 24
                          208.123.216.0/22 maxlen: 24
                          2605:e680::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:c7:cb:6c:a0:6d:c6:b9:fd:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=a9c23fcf-d650-4255-aef0-8731e03b2e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:18:c3:76:87:54:c0:6f:75:69:17:ce:79:
                    55:32:fb:8a:4f:48:f4:67:b0:22:4d:ca:ca:a7:10:
                    30:d4:f3:a2:13:94:ec:b4:c7:3a:ac:e0:58:5d:6b:
                    35:0f:34:93:f7:88:01:67:9d:25:0d:21:b9:65:54:
                    30:0a:d5:fb:86:8d:61:0b:cd:82:18:02:97:cb:25:
                    40:c9:7b:30:a9:ef:b6:97:71:11:c2:19:cb:8a:ba:
                    b8:ea:eb:7a:f3:33:6e:cf:c0:04:78:4b:96:82:23:
                    f3:a5:e6:68:6f:74:f3:a0:76:24:85:7d:90:32:2c:
                    1d:f3:8c:78:9f:e1:50:89:6a:8e:38:02:f5:91:82:
                    bb:22:1f:e6:89:fe:c5:ed:fe:c6:46:f7:c1:d3:7f:
                    1c:4e:2e:a3:b1:f1:4d:7c:9a:38:ef:c2:5e:3d:a5:
                    43:a0:c4:8b:6c:12:fd:45:7f:77:ec:33:17:6f:70:
                    a8:24:5c:15:19:3c:7a:8a:40:f8:d9:91:73:4f:ca:
                    a3:b7:68:52:29:ea:09:f6:e1:cd:c9:f2:10:00:98:
                    70:a5:1a:3e:ba:cb:4e:dd:d2:0b:8c:d6:54:6a:07:
                    eb:d7:29:f4:3b:e3:86:ea:9e:7d:24:a4:c9:63:43:
                    f5:65:a3:ad:63:ae:9a:35:0e:17:ad:e7:8e:87:e2:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:AE:AF:C8:C7:B8:0F:5B:61:E6:C6:57:DF:AD:62:0D:D5:0B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl

            X509v3 Authority Key Identifier:
                keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.68.0/22
                  198.134.28.0/22
                  208.77.196.0/22
                  208.123.208.0/24
                  208.123.210.0-208.123.219.255
                IPv6:
                  2605:e680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:ab:1e:bd:57:f8:c6:21:fa:19:e6:bd:7c:a7:60:4d:51:
         19:35:50:fa:e9:7f:ed:1a:4f:93:d6:a5:e0:e7:fb:e5:63:9b:
         eb:75:5c:ea:58:e2:62:6f:4a:f6:08:fd:f2:5a:dd:1f:3f:d0:
         82:94:c0:82:9e:9c:40:31:8c:fc:d8:bb:39:08:33:db:67:dc:
         5d:68:75:7e:60:46:a2:e3:fa:e7:8b:25:04:40:9d:0b:ba:b9:
         72:63:fb:6e:a6:71:67:25:80:35:90:ae:87:d8:07:6d:ec:3d:
         fb:e6:42:6b:5d:71:66:12:a3:70:52:71:93:6d:54:6f:ac:62:
         c8:6c:a1:47:56:3c:2c:28:ff:7b:a4:42:b1:7d:f2:fa:cc:59:
         fb:3f:f4:37:3e:e9:d4:f5:50:bb:98:1e:8b:20:38:84:f7:b6:
         6c:bc:7d:ac:a7:f3:bb:55:8d:c2:5e:fa:95:b5:3c:81:af:d0:
         e4:26:b8:70:6c:81:1e:2c:fa:2e:20:e5:bd:45:07:01:d1:23:
         46:cd:7d:e2:38:e6:e9:31:b5:5f:e6:4a:8d:53:e2:b5:df:5e:
         5a:b8:0d:de:45:d2:ad:a8:39:c3:f7:a2:40:b5:58:4e:35:cb:
         14:60:da:9f:13:79:49:cb:25:93:f2:26:e5:53:a5:56:09:6f:
         50:09:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:44 2024 by rpki-client on console-ams.rpki-client.org