Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa
File:                     0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa (raw, json)
Hash identifier:          vVEosbqUk9zFeIhgvL8AmRc1wlnAg2IP4nJDOcJz/wU=
Subject key identifier:   8D:F3:E0:DD:F1:2F:A2:01:04:4C:17:08:DF:34:89:28:A9:7D:21:E2
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847DF2F58B7454E3B4AC2910F80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     62468
IP address blocks:        107.151.192.0/24 maxlen: 24
                          107.151.193.0/24 maxlen: 24
                          107.151.194.0/24 maxlen: 24
                          107.151.195.0/24 maxlen: 24
                          107.151.196.0/24 maxlen: 24
                          107.151.197.0/24 maxlen: 24
                          107.151.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:58:b7:45:4e:3b:4a:c2:91:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=3752bad5-00af-4cb1-b6db-c55e53af600e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:db:54:b7:ea:09:c9:47:23:b0:f0:6e:40:
                    80:1e:cb:b8:45:cb:2e:ad:32:af:8a:2e:1f:9e:a9:
                    71:75:22:b6:0b:95:67:60:ac:2b:34:e0:7d:1e:9e:
                    5e:71:41:e7:24:b6:0a:54:16:4b:99:db:2c:14:0a:
                    09:bd:61:32:88:22:cf:f5:07:40:85:5e:f0:cf:17:
                    0b:66:da:4f:14:d5:85:9f:27:a9:85:ed:fc:67:48:
                    d6:a7:89:ec:1e:0e:1a:42:85:ce:75:c4:58:25:b3:
                    32:31:7d:a2:cc:96:c0:fb:e8:c4:3c:8b:a6:53:e9:
                    32:50:5c:6d:dd:45:d7:60:97:a9:a5:5c:15:0a:2c:
                    3f:8c:a1:6f:2b:13:0d:eb:a9:fc:fd:33:48:77:b9:
                    e4:5d:98:21:fd:5c:97:7d:cf:40:5d:5d:e8:c8:32:
                    69:d8:43:98:c4:be:15:22:b6:da:2a:58:d0:6e:7c:
                    04:4f:a6:85:2b:11:dd:a1:f5:71:db:d9:3a:ef:e9:
                    72:9e:2a:55:5a:79:f1:45:b5:fc:e7:65:bf:ec:29:
                    46:0d:ca:7d:78:7f:20:19:d4:6b:fd:41:4a:21:3b:
                    12:50:9d:f5:46:b6:8d:68:fb:cd:f1:99:37:55:55:
                    7f:d9:75:26:3c:b9:5e:d8:19:85:dc:e4:f4:f7:b5:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F3:E0:DD:F1:2F:A2:01:04:4C:17:08:DF:34:89:28:A9:7D:21:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0d1a32b3-b2a6-330c-a0c7-db6195c564bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.192.0-107.151.198.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:2d:a4:bc:30:36:b9:b3:6c:df:db:7e:ce:73:1c:42:bd:
         7b:15:a8:5e:ae:5d:d2:14:9f:2c:1b:48:5a:d9:bc:8b:1c:b5:
         b0:79:98:8d:6b:65:f0:6c:a0:09:ca:89:00:62:78:8d:e8:f4:
         ce:37:89:48:06:74:d0:cf:d8:71:f8:d8:38:83:ca:f6:02:9b:
         7c:e7:0a:51:e5:f6:41:bf:63:1b:9b:d8:24:eb:e0:c1:a2:02:
         45:e4:c1:d8:7d:a9:c4:4d:d5:8d:f7:18:1e:4a:20:09:63:2a:
         53:a6:6f:b3:d8:34:27:1f:79:ee:cb:fe:40:6e:35:a1:d8:8f:
         99:40:ab:cd:34:60:39:48:24:c3:9b:91:a5:3e:15:b6:f6:6d:
         8e:18:c7:87:0b:9c:ff:80:78:a1:bd:9a:e7:1c:ab:ec:6b:12:
         7c:32:03:60:3e:73:b3:4f:00:57:05:d7:57:4f:df:b0:79:b2:
         ae:ea:1e:d2:0a:5e:7d:83:3b:54:0b:b7:8d:21:69:b1:e4:eb:
         f3:21:a3:85:b0:1a:2f:62:3a:cc:4e:52:a2:cc:77:f8:be:21:
         c2:a6:81:48:6f:1e:2c:ba:2d:90:8a:51:5b:76:55:1f:3a:07:
         f9:ed:7a:c4:ff:f7:6e:7d:85:aa:2a:23:97:82:c7:4a:c5:c3:
         81:de:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:14:57 2024 by rpki-client on console-ams.rpki-client.org