Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
File:                     1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json)
Hash identifier:          bote1YugFYtLIOzsm+7JhlNBVWkOC5AWrKe5qSzGTW4=
Subject key identifier:   04:CE:56:A7:6E:93:5F:29:72:5A:B4:1C:F7:34:9D:8C:BE:72:BA:2F
Certificate issuer:       /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94
Certificate serial:       010D0C9F4328584773965863DAB37F8C7ED99200
Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     25715
IP address blocks:        173.225.32.0/20 maxlen: 24
                          199.36.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:58:63:da:b3:7f:8c:7e:d9:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=a07796ee-4bd8-4fd7-be60-d80c876bd2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:98:fe:a8:ef:d0:40:83:9a:2c:2e:2a:d9:
                    c5:57:68:a8:84:a1:23:1b:c8:cc:10:b5:18:07:cb:
                    48:7a:f9:72:08:85:3c:d8:77:29:f0:91:09:04:d2:
                    b0:5e:ce:f8:e7:a2:61:a8:2f:65:6f:a7:19:77:f3:
                    22:36:51:78:41:16:40:a2:2e:01:7e:8d:5a:27:9a:
                    79:87:73:e8:8f:ef:a7:51:40:f6:93:3d:83:ba:2b:
                    e8:06:e6:a4:10:35:cf:69:3e:6d:6b:ec:d6:3e:28:
                    ef:9e:19:e6:2c:9b:c9:26:b6:1c:6d:dc:e9:56:d1:
                    1d:93:d8:a2:78:1c:40:64:f8:e4:43:8d:01:2c:27:
                    a5:5c:16:7d:3f:6a:c4:dc:64:c0:6f:d0:55:2a:8e:
                    bc:2a:12:e4:b4:1b:be:5e:c7:aa:81:46:70:fc:92:
                    0f:99:6d:50:91:33:1e:1c:20:be:48:7f:a1:0a:63:
                    90:b8:83:f2:4e:ea:b6:8e:3c:d4:ee:1e:b9:05:20:
                    11:b5:26:a7:c7:d6:df:fb:a9:f1:c7:66:5b:ab:4e:
                    2b:d6:ba:a8:41:4e:56:9c:e8:90:d1:41:0d:fa:93:
                    77:53:6a:cd:a2:ae:a7:49:09:e8:2a:ac:2e:aa:f9:
                    63:7a:df:87:41:ae:66:36:54:60:66:65:d5:e8:2c:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CE:56:A7:6E:93:5F:29:72:5A:B4:1C:F7:34:9D:8C:BE:72:BA:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl

            X509v3 Authority Key Identifier:
                keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.225.32.0/20
                  199.36.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:69:5f:96:dc:6d:10:3c:6d:43:51:ca:23:5a:2e:7b:40:c2:
         ca:ef:71:70:ec:d8:e0:2d:cd:6b:19:77:d9:30:78:c7:bc:e6:
         29:c4:d4:9e:5c:92:c9:0e:68:78:8f:cf:43:c5:81:0f:34:c5:
         ec:03:3b:8d:27:69:12:e2:5d:3d:08:22:29:a9:81:cd:78:f2:
         70:63:fd:21:32:4d:2d:a3:0c:f8:50:40:fd:9f:58:b3:28:90:
         6e:36:3e:dc:39:69:b0:f3:3c:36:fc:83:1c:f3:66:8e:92:d9:
         40:09:7f:af:0a:f3:32:dd:aa:d1:9e:6a:50:06:7f:c2:c0:b5:
         79:e3:a8:c7:d0:4e:fd:b1:6b:3d:61:a8:11:2f:f3:db:5b:d3:
         c1:1e:57:7d:af:c6:4d:65:bb:da:d9:8a:1b:b9:fa:17:4d:de:
         79:8b:59:9e:89:34:a2:8a:13:e7:a6:af:06:5b:a5:87:eb:57:
         ba:ac:33:2c:0c:3d:03:06:b2:9a:10:44:82:8d:a0:1e:e6:81:
         1a:67:9f:16:46:19:65:0d:20:ee:2b:d6:9b:2a:ef:3d:93:76:
         56:77:a5:63:47:13:09:4c:39:0b:03:cd:dd:61:98:d7:d1:13:
         f2:2d:45:52:58:f7:b4:76:e8:61:23:35:55:8c:38:c2:77:7e:
         6f:94:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:55 2024 by rpki-client on console-ams.rpki-client.org