Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa
File:                     b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa (raw, json)
Hash identifier:          MqYynHdjhNAj58IDcngT6/2APcXqjXOk8WBGk2NxMwA=
Subject key identifier:   36:0C:CE:39:A1:78:43:61:E5:77:D4:24:D2:A9:3F:F4:56:1C:0E:93
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858476E01065A192337CD14D1EF40
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     33059
IP address blocks:        64.92.69.0/24 maxlen: 24
                          64.92.70.0/24 maxlen: 24
                          64.92.71.0/24 maxlen: 24
                          64.92.73.0/24 maxlen: 24
                          64.92.74.0/24 maxlen: 24
                          64.92.77.0/24 maxlen: 24
                          64.92.80.0/24 maxlen: 24
                          64.92.81.0/24 maxlen: 24
                          64.92.82.0/24 maxlen: 24
                          64.92.83.0/24 maxlen: 24
                          64.92.85.0/24 maxlen: 24
                          64.92.86.0/24 maxlen: 24
                          64.92.92.0/24 maxlen: 24
                          137.239.196.0/24 maxlen: 24
                          137.239.197.0/24 maxlen: 24
                          204.174.17.0/24 maxlen: 24
                          204.174.28.0/24 maxlen: 24
                          204.174.29.0/24 maxlen: 24
                          204.174.30.0/24 maxlen: 24
                          204.174.31.0/24 maxlen: 24
                          209.35.106.0/24 maxlen: 24
                          209.35.107.0/24 maxlen: 24
                          209.35.108.0/24 maxlen: 24
                          209.35.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:06:5a:19:23:37:cd:14:d1:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=a501ebe3-6d80-4252-8829-3f22f3564c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:61:99:0f:8c:db:50:f3:cb:c4:ff:f7:db:
                    c7:91:10:22:e9:02:18:f2:ef:82:2b:7b:18:e6:7b:
                    91:05:fa:92:66:f7:1a:04:78:e0:8f:59:30:0e:f3:
                    dd:ba:bc:c8:34:e2:47:0d:7e:53:55:30:fd:7e:3b:
                    e3:19:99:27:35:44:5f:e1:19:7a:4e:04:ed:e7:c6:
                    3a:90:19:d1:7b:c0:a9:c3:3d:9a:6c:6b:64:f6:eb:
                    04:e1:30:a4:01:82:f4:d4:ca:3d:88:a0:05:13:37:
                    bb:ac:e3:e5:d1:ca:d7:14:26:9d:27:fe:1f:bc:e2:
                    40:ba:c7:ce:be:ba:0d:5c:14:6a:41:28:64:30:58:
                    80:e5:b1:87:00:e0:92:fc:24:fa:b2:d9:08:90:c5:
                    61:5a:8f:aa:8d:8c:11:4e:83:85:af:3e:de:90:5e:
                    7b:78:bf:e8:b9:1a:bf:f9:39:a7:55:8f:1e:62:bf:
                    5c:be:51:81:42:1f:7e:8e:17:e2:4c:ca:b2:39:f6:
                    e4:cb:f6:ef:9f:eb:18:74:95:b2:15:06:55:b5:22:
                    d4:2c:9c:84:36:f2:1e:dd:95:de:91:d5:73:6f:7a:
                    40:29:4d:92:7e:97:14:43:45:8e:4c:5d:84:4f:80:
                    50:dd:fd:6e:cd:25:ed:d1:3d:b5:aa:a0:99:b2:17:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:CE:39:A1:78:43:61:E5:77:D4:24:D2:A9:3F:F4:56:1C:0E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.69.0-64.92.71.255
                  64.92.73.0-64.92.74.255
                  64.92.77.0/24
                  64.92.80.0/22
                  64.92.85.0-64.92.86.255
                  64.92.92.0/24
                  137.239.196.0/23
                  204.174.17.0/24
                  204.174.28.0/22
                  209.35.106.0-209.35.109.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:fe:d6:f5:3a:df:e5:02:28:c1:f1:59:26:62:2c:34:f3:
         88:db:35:be:31:c2:6e:9f:42:e3:ea:2e:aa:ea:71:99:e3:50:
         1e:23:23:8b:37:9f:8a:d3:50:42:7a:d0:da:f7:ec:d2:32:6b:
         c8:10:5a:6e:e1:a8:3b:7c:75:d9:e7:32:ff:41:93:aa:b4:f0:
         ac:3f:e7:a9:b0:41:7f:75:f2:8a:82:13:10:f0:63:6f:e9:10:
         17:28:53:2b:a2:28:24:c3:9d:dd:e6:ac:92:e1:e1:e5:98:d9:
         ca:3f:b2:c8:b1:9a:2e:b2:19:fb:57:45:0e:17:1b:bf:0a:1f:
         90:9a:86:e1:40:2d:13:f8:19:10:73:11:55:3f:7b:5f:40:0f:
         f2:3f:53:37:cb:96:fb:62:98:a0:14:3d:fa:3a:ea:ee:09:53:
         7d:3d:e3:68:bc:a3:e8:9d:73:0f:85:d5:7a:77:3a:4c:6a:a7:
         e2:b1:af:59:68:bd:9f:c5:22:f1:6c:16:c0:d9:e8:9e:8f:6c:
         8f:63:18:88:f8:f8:45:2c:09:db:b0:c5:71:d3:07:97:5e:a4:
         7b:f6:90:25:dd:e4:99:34:7f:2e:42:6e:75:0f:15:7e:d2:69:
         20:d7:33:ea:87:01:a1:b4:99:93:eb:e8:e3:1a:1d:55:ad:a1:
         7e:68:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org