Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa
File:                     65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa (raw, json)
Hash identifier:          jja0i02OeL8DIWU4coCarWGQDIBwEhg2V/TzqJkP45M=
Subject key identifier:   36:17:75:E7:2E:5A:68:1A:B6:EE:6D:14:E7:10:12:65:F8:FA:90:EB
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847D6CF412AF325450ADEB9BF00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     33686
IP address blocks:        208.107.248.0/22 maxlen: 24
                          208.107.252.0/24 maxlen: 24
                          208.107.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:41:2a:f3:25:45:0a:de:b9:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=757e100d-9331-4b83-9dbe-325996790e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:df:2d:47:01:fb:d6:ee:64:7c:2c:17:0d:
                    b6:e0:94:15:3b:98:3b:12:69:25:9e:9c:a4:25:a0:
                    26:14:95:0b:92:7f:79:81:b3:11:f7:d2:30:c3:7c:
                    0f:90:a6:9a:82:66:43:d4:b9:73:cb:e4:84:4a:01:
                    62:10:47:c9:6d:e8:5c:42:1d:a5:27:80:7b:42:6e:
                    21:4e:1e:df:7b:78:2f:8d:46:3b:f4:1f:74:e8:98:
                    80:c5:3a:78:85:c1:6c:77:8e:e2:d0:75:09:9b:0c:
                    ce:37:7a:eb:3b:09:5e:14:b3:69:db:27:50:ca:08:
                    56:3a:c5:b4:84:14:eb:27:26:61:b7:cc:66:de:85:
                    50:f3:49:75:b9:d1:30:b9:0d:da:1a:3c:09:20:ed:
                    a3:63:b9:a6:0e:ed:f4:a3:d2:86:51:88:ba:6e:67:
                    a2:d7:a5:10:f0:7c:64:41:68:04:2e:2c:26:3c:68:
                    6e:ac:f8:ce:32:41:b7:ba:d4:e2:1e:13:d6:a8:5d:
                    80:40:ba:67:3e:72:a0:50:db:6d:1f:50:23:1a:c2:
                    f2:0d:c2:0a:b9:92:cd:5e:85:39:1f:f8:b8:bb:6e:
                    b3:f9:c7:32:04:f5:2e:e0:7b:a6:db:4c:70:6a:d0:
                    cf:13:91:b7:6d:5f:ae:b4:40:d6:1e:9d:49:82:42:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:17:75:E7:2E:5A:68:1A:B6:EE:6D:14:E7:10:12:65:F8:FA:90:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.107.248.0-208.107.252.255
                  208.107.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:a0:e9:1f:e2:f1:b8:4a:68:83:c5:c8:a9:d4:75:00:42:
         ae:74:7a:a7:89:e1:e9:70:fc:75:a2:33:68:53:82:40:0b:cb:
         c9:be:90:9a:ca:14:3a:2b:d2:6b:ec:34:05:bd:da:e7:01:bd:
         78:de:d3:e0:88:e0:77:81:c8:29:c1:d2:5d:5b:42:10:49:fd:
         63:ad:1f:56:80:d6:d4:b1:7d:6a:94:43:24:f6:39:ed:c3:a7:
         21:d9:65:5f:c1:c9:10:f2:64:c3:f2:e9:97:66:6f:e0:4f:06:
         91:cd:2c:b5:b0:d3:f9:e6:69:73:34:fc:c1:df:a0:63:16:53:
         3f:bb:e8:3d:cd:55:18:6e:f9:aa:02:61:31:44:c0:6b:72:1c:
         9d:12:36:dc:75:77:63:e8:29:a0:e7:2c:76:0b:08:80:63:29:
         79:86:78:76:71:c7:1d:b0:2b:ba:85:3a:b7:b2:e0:4c:0e:fd:
         34:be:3a:28:4a:65:90:a9:e6:40:43:49:d3:71:88:f1:87:c2:
         c1:f6:9c:3a:32:c5:d6:a0:e3:e4:6a:8f:5e:2e:9d:0a:80:db:
         50:e0:45:0a:95:d7:22:31:00:ba:71:17:fd:6c:26:ca:68:cf:
         50:d7:3b:63:78:af:f3:08:d3:62:28:11:4c:b0:34:55:bf:6b:
         5f:34:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:45 2024 by rpki-client on console-ams.rpki-client.org