Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa
File:                     3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa (raw, json)
Hash identifier:          uZ6oHG8KslUpA6She3q4Ss1EtXynrBg4jPbang5PVHE=
Subject key identifier:   4B:01:62:10:74:B1:01:3D:70:AE:CE:A0:28:57:47:BC:F8:48:BF:03
Certificate issuer:       /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
Certificate serial:       010D0C9F4328584754E0D0949E2FD68CA7F3E0C0
Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     19504
IP address blocks:        64.6.112.0/20 maxlen: 24
                          66.109.112.0/21 maxlen: 24
                          68.171.176.0/20 maxlen: 24
                          104.200.208.0/21 maxlen: 24
                          216.147.224.0/20 maxlen: 24
                          2604:1c0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d0:94:9e:2f:d6:8c:a7:f3:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=e3c4d983-d972-4039-b8dd-684772421fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:b6:4e:9e:8d:b9:8c:75:81:92:1e:0b:76:
                    d6:4c:98:fa:7b:d2:77:4a:74:65:d2:28:00:47:1d:
                    8f:52:8e:96:69:cd:41:d2:ed:11:42:4d:42:b9:89:
                    0e:1e:e4:eb:c8:a5:db:6e:dc:78:4b:ac:bb:a4:d3:
                    f4:2a:2e:98:4e:06:bd:89:60:9b:25:e5:f3:9e:68:
                    a6:a9:d8:bd:a0:ab:20:b3:50:9c:2d:ea:7d:b6:77:
                    de:e9:94:ed:e6:0a:fe:c3:5a:c5:53:97:85:c3:91:
                    74:f2:69:f5:70:af:e9:e7:87:50:51:9c:ee:61:a7:
                    97:d5:ba:27:ee:f5:4a:e0:15:ad:e0:23:4f:37:8f:
                    88:86:06:71:b4:1d:cd:e3:53:78:4c:11:f9:0f:fb:
                    99:6e:d1:e7:3d:a7:2a:00:88:53:07:4b:b0:e1:12:
                    76:dd:15:ea:40:92:73:11:c9:22:d8:85:57:9b:5d:
                    af:22:42:e9:00:16:e1:c4:67:5d:46:3b:7d:10:53:
                    97:f0:b7:c0:5e:0d:c7:0d:30:d7:99:a1:e4:26:89:
                    c8:40:a9:5b:db:28:a6:d0:24:ce:c6:a2:b7:1d:04:
                    3f:ec:29:12:76:73:6d:68:33:cf:f6:33:89:d9:30:
                    b8:30:9a:f3:50:b6:ac:a5:ee:da:28:5a:8d:50:33:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:01:62:10:74:B1:01:3D:70:AE:CE:A0:28:57:47:BC:F8:48:BF:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl

            X509v3 Authority Key Identifier:
                keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.112.0/20
                  66.109.112.0/21
                  68.171.176.0/20
                  104.200.208.0/21
                  216.147.224.0/20
                IPv6:
                  2604:1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:50:ce:cd:75:e7:08:89:cc:d5:2a:d8:ce:d6:6b:1f:42:4d:
         2c:9e:41:55:5e:97:dc:5a:68:d1:b9:ca:e7:16:fe:9b:dd:9a:
         a2:c5:29:e9:a2:7c:c3:76:23:4e:96:9e:4b:f5:12:ee:50:6a:
         68:43:32:b1:66:25:e0:25:4d:87:cc:a3:fb:0e:29:83:57:4f:
         3b:7f:cf:0f:5c:ca:90:fa:e2:f5:42:36:bb:63:a9:61:22:21:
         d9:89:10:35:76:30:b6:ed:07:d5:49:ee:d6:21:8d:b4:be:40:
         29:28:17:e0:90:83:22:96:cb:01:f6:44:68:36:25:48:a4:51:
         ee:a0:dd:59:2a:73:57:90:a2:d8:22:a5:d9:a6:e8:36:23:a0:
         df:74:ab:ec:e8:ac:5c:82:1c:f5:ad:36:ea:82:3f:5a:56:9b:
         47:b4:0e:c1:26:7f:da:87:a7:0a:70:d9:d5:c1:55:7c:86:86:
         63:8f:5c:dc:5f:9b:46:5d:1d:70:76:c7:a9:33:a0:c6:58:ed:
         82:53:ba:c2:a7:30:37:b1:ec:4c:d7:48:36:6e:e3:d7:1b:1b:
         43:e0:c2:72:36:ae:f6:f7:1a:fb:54:91:c7:a7:02:3f:a4:c6:
         14:b4:3c:19:96:ac:bb:2a:ee:cd:cf:a4:1b:61:0b:6b:e3:c0:
         4f:36:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:54 2024 by rpki-client on console-ams.rpki-client.org