Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
File:                     a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa (raw, json)
Hash identifier:          iC699Y2P+5tRoRmcrfyVxGsDZ6xgd3CbcyF9zEJtYYA=
Subject key identifier:   44:12:54:04:8F:89:3C:87:74:BC:5F:BA:9D:B6:D5:CC:F0:84:9A:25
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F43285847A5D6AC5144D1BB88DBE84E80
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     36556
IP address blocks:        66.148.32.0/19 maxlen: 19
                          98.96.128.0/19 maxlen: 19
                          104.151.192.0/19 maxlen: 19
                          170.176.224.0/20 maxlen: 20
                          204.144.160.0/20 maxlen: 20
                          2602:fdfc::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ac:51:44:d1:bb:88:db:e8:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=bb503429-a00f-4fff-ae09-8f3a1311bd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:b7:97:b8:a9:9a:35:ed:d2:ac:df:c9:16:
                    0d:b8:69:96:83:2c:30:62:1f:27:34:f8:4a:fd:ad:
                    43:83:27:c7:2a:1d:92:45:c5:e4:93:0d:6b:4c:c3:
                    eb:0e:87:66:d6:b8:19:46:1a:84:cc:fe:1f:67:29:
                    44:3d:d2:ae:95:56:8c:22:0b:06:0d:c1:26:bf:b1:
                    b1:fd:81:2b:52:e0:b4:06:b8:20:1f:4b:00:7c:11:
                    c9:58:9b:d2:aa:28:68:9f:f2:7b:ab:fc:e2:aa:3e:
                    a0:ae:7c:65:e8:b1:8d:e1:d0:a2:c3:18:df:77:26:
                    46:de:54:12:85:8a:36:b6:f8:ae:bf:24:ec:9d:9e:
                    45:eb:62:90:85:fc:e6:af:ef:53:84:66:19:1f:b3:
                    c7:70:b8:29:25:ac:81:3a:2f:89:d1:6c:f7:cc:28:
                    27:56:9d:01:5e:32:f4:bc:e5:86:0f:fb:03:89:26:
                    9e:65:5a:97:08:38:41:a0:6a:42:f8:5f:13:00:d7:
                    a3:c9:bb:1f:8f:46:b8:4a:61:fa:0c:23:0f:c4:9c:
                    6a:bd:51:b1:04:d5:c8:37:ee:65:29:27:a4:e8:e6:
                    01:6f:89:1f:97:07:e0:28:c7:a1:0c:66:77:48:53:
                    80:27:a7:d0:d4:d0:2f:b5:45:db:67:38:09:90:5c:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:54:04:8F:89:3C:87:74:BC:5F:BA:9D:B6:D5:CC:F0:84:9A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.148.32.0/19
                  98.96.128.0/19
                  104.151.192.0/19
                  170.176.224.0/20
                  204.144.160.0/20
                IPv6:
                  2602:fdfc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:71:69:d4:27:1a:e7:63:3b:4f:d1:e3:27:ef:84:62:7f:54:
         35:bd:ad:53:ef:7c:b6:5e:6e:c3:55:83:16:7b:4a:7b:f4:8a:
         d8:92:0e:f1:42:65:47:e8:c8:bf:9c:88:13:fe:03:fc:d9:ae:
         8a:4e:04:b2:c9:3a:01:20:40:5e:c8:5c:fd:e5:63:81:91:7d:
         3e:ac:4d:9f:f3:83:b9:2e:8a:4f:3e:5f:7b:2a:c4:5d:43:e0:
         36:9d:5c:26:8e:f0:78:50:ce:38:eb:72:c0:fe:b3:9d:cf:e2:
         6c:d9:dd:fb:50:d1:dd:8c:68:26:35:b4:13:89:61:0d:c2:94:
         02:a5:0b:38:25:17:c8:b8:10:dd:3e:d1:33:af:64:08:61:0b:
         86:82:27:8f:2e:4d:ae:cc:cc:f2:54:d6:ad:18:e8:19:e4:cb:
         65:81:94:9d:68:01:d0:96:52:91:18:b5:53:cb:5c:a9:3b:a7:
         0c:5f:06:1f:35:d2:ce:94:bc:59:cf:f5:93:4f:29:b8:cd:19:
         c5:82:7f:74:4a:39:97:0d:95:bc:27:83:a5:ce:c3:d7:b4:c7:
         f5:cc:c5:1c:7b:8d:1e:a1:61:e3:b6:3f:3c:e2:0a:bb:d5:5a:
         9f:36:ca:04:96:98:52:c7:54:55:79:db:dd:1b:b1:0d:52:d3:
         fb:77:9d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org