Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa
File:                     f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa (raw, json)
Hash identifier:          elUwWU6H3nbUwd2k4ZjGzI1OGgknDHabXYydiPGNn8s=
Subject key identifier:   5D:B7:F3:1D:E6:3A:3D:70:BD:D0:AC:D4:BE:A6:FD:7D:4E:DE:4E:06
Certificate issuer:       /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
Certificate serial:       010D0C9F432858478E1BCC358FD6E86B747C8380
Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     852
IP address blocks:        198.162.68.0/23 maxlen: 24
                          199.175.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:cc:35:8f:d6:e8:6b:74:7c:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=5e4cf144-fd01-4280-81c6-d064e171ef6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:4a:89:ec:2c:ab:ec:63:f5:46:a4:aa:b3:
                    f2:0e:96:db:38:e0:7f:f6:28:5a:b0:51:67:69:41:
                    a1:79:c7:24:26:0d:49:5d:79:af:5d:d3:9b:d5:8b:
                    7f:07:98:e4:e8:27:f4:1e:8c:6e:96:60:93:d6:18:
                    3a:f7:44:6f:9e:5f:bd:5e:d7:fd:a0:87:d7:88:61:
                    41:2d:fc:f7:1e:74:05:11:2e:df:6b:7d:44:17:66:
                    cc:ed:5a:26:d7:1f:94:d7:fc:79:83:b1:c2:e0:98:
                    dd:56:7b:0a:38:af:eb:3b:d3:27:3b:72:dd:63:c9:
                    15:66:4e:9a:12:8f:b5:89:64:53:23:90:9e:72:86:
                    fb:45:8c:8e:ad:a6:8e:88:8c:66:46:e3:6c:87:e1:
                    a1:53:b7:59:f9:d1:fc:71:cc:e4:4f:19:c9:62:38:
                    bd:c4:d9:5d:25:ba:b1:cf:e9:c0:e1:9a:ed:81:9e:
                    1a:1e:a8:fb:2c:1c:9f:d6:1e:28:ec:d0:92:79:c8:
                    16:73:60:fd:cd:a2:72:a1:d1:b9:ca:ca:24:5d:0b:
                    0f:29:74:d3:b4:08:75:47:15:06:7f:c8:37:37:28:
                    77:7f:02:38:f5:23:ed:ba:62:de:ea:ae:49:c2:45:
                    7e:8b:1f:ee:49:c9:a6:0e:ec:62:32:31:54:fb:95:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:F3:1D:E6:3A:3D:70:BD:D0:AC:D4:BE:A6:FD:7D:4E:DE:4E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.68.0/23
                  199.175.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:21:ab:ed:fd:bc:1f:7f:ca:13:30:27:d6:9f:18:07:e1:
         ac:59:ea:8a:60:d3:26:1c:d3:31:2c:c2:06:ce:83:b2:a3:15:
         ee:57:96:b5:d3:06:2f:61:c8:be:af:de:a3:7c:12:bb:2b:8b:
         54:4c:7e:18:69:ee:34:74:19:cf:e3:ca:f7:cb:86:00:8f:bb:
         f8:43:f0:29:a8:39:3c:9b:0f:12:cb:0c:ab:99:a9:ae:46:e4:
         91:fc:e7:79:ad:8f:ec:c4:d9:2d:f1:d4:b2:5b:b2:e3:4c:8b:
         d0:55:bc:73:c0:bb:dc:8b:c2:82:ca:83:99:2c:a0:72:75:32:
         7b:7a:11:84:10:23:8f:08:0a:53:da:7b:21:46:47:bd:5d:ab:
         db:ad:a1:f1:23:9e:94:94:da:eb:a8:86:37:68:45:40:92:34:
         f3:79:97:4f:2d:93:2b:02:da:41:a8:02:71:d9:71:5d:ed:d9:
         e1:63:63:36:23:33:9f:82:47:de:b2:87:dd:7f:b1:0e:ef:06:
         6e:b2:63:a8:f5:c2:82:cf:50:9f:65:fd:76:ff:69:d3:79:c7:
         6a:f4:e4:19:89:d4:5d:7b:99:61:2c:3d:33:3b:e0:9f:cb:b4:
         74:ee:86:dc:85:bd:22:a8:53:ad:06:07:56:de:58:7e:55:fa:
         9e:66:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org