Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa
File:                     094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa (raw, json)
Hash identifier:          H4kn8vYbC70tsRPhibFUB6XaLzDg+9YLgqhjsSniYOQ=
Subject key identifier:   0E:1C:A6:18:F6:A8:32:52:8A:C8:18:E5:5D:C1:C2:68:2C:4F:04:31
Certificate issuer:       /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
Certificate serial:       010D0C9F4328584762D6563EF15850088781B180
Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     20283
IP address blocks:        64.90.64.0/19 maxlen: 24
                          68.170.112.0/20 maxlen: 20
                          69.168.240.0/20 maxlen: 24
                          161.199.130.0/24 maxlen: 24
                          167.94.42.0/23 maxlen: 23
                          167.94.52.0/23 maxlen: 23
                          167.94.62.0/23 maxlen: 23
                          167.94.76.0/23 maxlen: 23
                          172.87.0.0/20 maxlen: 21
                          199.59.116.0/22 maxlen: 22
                          205.214.160.0/20 maxlen: 20
                          209.212.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:56:3e:f1:58:50:08:87:81:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=faf7eefc-b04a-47a9-93b4-186e1fa9d780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:c1:4f:bb:a2:16:d8:6e:08:b0:6b:21:cd:
                    46:eb:3e:c7:8a:7d:2a:b9:ba:b6:55:06:7f:37:a1:
                    16:84:1a:be:e3:21:6c:b3:e9:f4:30:10:c1:5d:e2:
                    62:7e:f2:5f:90:bb:c8:6b:c5:8d:37:98:a6:f9:1c:
                    d8:2e:7f:fc:08:e3:bf:4c:10:11:38:f5:80:fb:51:
                    77:38:99:13:a1:37:93:b9:39:e1:e9:4e:23:7c:4a:
                    1f:a7:b9:4f:3f:c8:53:63:00:a6:53:c9:fd:5f:f7:
                    1e:6f:02:62:3f:32:6d:a3:37:80:11:6f:21:87:fc:
                    4b:dd:d4:fe:f5:1c:26:50:b0:44:87:2c:c5:f8:6f:
                    cd:ea:5d:5f:79:40:8d:56:a5:af:f6:db:b6:79:4d:
                    77:eb:ff:cb:ad:5b:2a:2d:82:50:9d:0f:48:ea:60:
                    a8:78:3f:7a:1b:26:67:72:ad:17:d8:bd:f5:8b:69:
                    9f:18:e2:d7:37:13:db:5b:7a:9d:6a:27:5f:60:85:
                    d6:d5:14:5a:08:ae:5a:ca:83:42:78:1f:d2:d3:75:
                    6a:07:1d:a8:84:08:61:9e:dc:f4:89:ca:a9:54:92:
                    49:45:1e:31:74:da:41:54:3c:2f:3f:09:d9:57:65:
                    34:9f:5d:61:d7:0b:d9:e6:ad:f4:b5:69:a0:2a:e5:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:A6:18:F6:A8:32:52:8A:C8:18:E5:5D:C1:C2:68:2C:4F:04:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl

            X509v3 Authority Key Identifier:
                keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.64.0/19
                  68.170.112.0/20
                  69.168.240.0/20
                  161.199.130.0/24
                  167.94.42.0/23
                  167.94.52.0/23
                  167.94.62.0/23
                  167.94.76.0/23
                  172.87.0.0/20
                  199.59.116.0/22
                  205.214.160.0/20
                  209.212.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:87:26:dc:8f:41:5e:10:f8:cf:9e:68:49:cf:2a:d6:cc:
         d5:65:43:78:a0:db:7d:fd:0e:57:9c:49:d7:1e:2a:6c:b9:01:
         70:0c:b7:00:71:90:17:32:3a:cd:3a:f8:b8:24:f8:ff:97:5c:
         93:3f:e4:3f:7c:67:c2:9f:9d:99:ff:b0:d3:04:3d:6d:df:3c:
         d5:fd:ad:50:fa:54:84:37:83:54:e3:e6:bf:6c:28:2d:14:86:
         21:54:45:df:2e:4d:23:7a:6e:a0:c1:d7:cc:ee:32:25:7b:5e:
         7e:46:8c:77:9a:ae:e5:a4:94:7a:07:21:b3:80:a5:65:e3:32:
         2c:a0:ea:ad:3b:3c:40:80:4f:13:29:9e:be:57:e7:76:5c:45:
         2d:e7:79:5e:72:11:60:c2:72:51:1d:e4:c1:e9:7e:da:a5:db:
         e1:32:27:23:0c:3c:31:57:26:d9:51:67:bc:6b:f0:32:09:da:
         09:8e:20:3f:43:11:49:f6:23:9c:31:9c:42:bb:d2:4e:9d:1e:
         41:ae:90:15:ee:1a:97:f1:75:d4:70:18:33:3d:c6:a2:21:e7:
         38:0b:9f:8e:40:95:ea:80:b5:f8:33:db:11:90:65:88:89:86:
         06:e3:e1:41:82:63:ff:f0:43:3d:90:55:88:c9:c3:46:ca:d6:
         ab:ae:a2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:40 2024 by rpki-client on console-fra.rpki-client.org