Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa
File:                     6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa (raw, json)
Hash identifier:          vYH6ZJgITvE6zf07cgZDGsXs7XYMaYRPFuDofzg7dWc=
Subject key identifier:   04:6C:29:AB:97:D6:93:69:3D:FE:80:C5:2C:6C:CD:38:3C:9A:8C:AD
Certificate issuer:       /CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
Certificate serial:       010D0C9F432858475EA627740BC79F20C28B0880
Authority key identifier: B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     53684
IP address blocks:        199.30.56.0/22 maxlen: 24
                          208.66.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:27:74:0b:c7:9f:20:c2:8b:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=ed772e61-d928-4177-b5f7-68b2ffbb2ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:8d:d0:a3:d7:63:04:9a:08:df:d6:3e:1a:
                    f4:77:b9:7e:3e:ff:25:7e:da:02:8a:f9:96:7f:77:
                    b8:15:8a:88:c9:9a:e5:1e:13:e4:9a:e4:99:2a:75:
                    a2:08:c7:6f:0f:f0:75:1b:62:30:2f:7d:f7:df:c6:
                    6a:bc:ab:30:47:c5:00:21:0c:51:c9:9d:e2:3a:2d:
                    c1:c5:e6:b1:ca:fb:6b:4f:b1:41:01:c4:ef:88:4a:
                    19:c8:1b:ba:fd:18:60:59:6e:10:9f:f8:6c:0b:83:
                    30:09:6a:08:76:f5:e2:a6:63:93:f7:d7:9e:e3:c1:
                    aa:37:7c:d6:8f:64:c8:90:43:78:e0:06:7d:c1:b5:
                    8b:5c:d9:13:9c:e4:2c:d7:34:1d:09:b7:13:57:dd:
                    26:2f:1f:8f:bc:3b:88:26:c8:50:c3:8a:92:00:ac:
                    78:20:59:7c:73:29:9f:10:01:90:21:24:dc:82:55:
                    54:c7:e8:15:d5:3f:33:a6:c3:ce:80:83:60:d9:25:
                    d9:cb:e3:8d:84:0b:b6:b4:58:cc:21:54:21:e7:0a:
                    7b:cc:52:1c:a5:84:1a:cf:d9:83:ce:0b:9f:ef:35:
                    d3:07:6f:aa:97:8f:f4:53:1a:54:02:e8:0e:78:17:
                    30:49:96:99:88:69:9f:0f:14:c4:81:7a:56:16:02:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6C:29:AB:97:D6:93:69:3D:FE:80:C5:2C:6C:CD:38:3C:9A:8C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.56.0/22
                  208.66.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:38:57:6e:29:9e:54:67:dd:b6:51:3c:7a:63:b0:0a:21:e9:
         a1:86:c3:cd:6f:7d:39:f6:ac:13:da:d8:ff:bd:fb:c5:04:85:
         2a:1a:23:04:03:b0:b4:5b:98:e6:e2:fa:c5:36:b9:6c:9b:01:
         7a:fb:05:4d:9c:6b:6d:ba:8c:27:8c:79:02:c4:eb:27:4c:c2:
         d5:60:40:3d:51:18:b6:8b:8b:f9:00:25:d0:e1:10:39:f1:f9:
         a2:0e:0f:15:a7:8d:71:3b:b4:40:aa:3c:42:98:f2:4b:7a:50:
         5a:7f:73:4b:aa:3e:94:b7:9a:98:a1:f4:30:3d:01:5e:df:bb:
         ac:68:42:21:a8:f8:65:0e:b2:44:fa:af:45:07:f5:a6:c9:d5:
         0e:8b:1d:7f:cc:9f:ad:6a:fe:9d:c9:6d:3c:8c:32:62:22:81:
         e8:f2:45:36:49:e6:94:de:13:9f:8e:be:10:e2:da:d3:bd:2b:
         fd:e1:c4:75:3f:f1:6a:99:13:51:d4:4d:b1:28:16:b5:26:a3:
         15:bd:d9:2b:b6:f7:bc:54:a6:2f:6c:9f:19:46:1e:9e:ce:e3:
         3d:78:43:1d:db:59:c7:50:b4:03:10:43:5e:9c:7d:ec:1b:09:
         77:bb:32:0f:ce:f6:31:a7:04:de:8e:f7:de:5e:ed:55:1d:fc:
         b7:14:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:14 2024 by rpki-client on console-ams.rpki-client.org