Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa
File:                     19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa (raw, json)
Hash identifier:          th76dEk8Z5RKsFoGAc/ht6MRBxJe4trFJmkdxtlOHKE=
Subject key identifier:   DA:54:6F:E4:C5:92:7D:CE:FE:D7:DB:B6:D1:64:AE:7D:9E:DF:F4:A0
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285847686B8D78113D8480DEC6E500
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     55045
IP address blocks:        72.249.45.0/24 maxlen: 24
                          72.249.76.0/23 maxlen: 24
                          72.249.104.0/23 maxlen: 24
                          72.249.125.0/24 maxlen: 24
                          72.249.126.0/23 maxlen: 24
                          72.249.144.0/23 maxlen: 24
                          72.249.170.0/23 maxlen: 24
                          174.136.0.0/23 maxlen: 24
                          174.136.4.0/23 maxlen: 24
                          206.123.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8d:78:11:3d:84:80:de:c6:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=56b4053b-9e9b-4044-af94-4c28541c1f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:f7:42:5b:cb:86:ec:17:cf:5f:94:4e:38:
                    3b:93:4b:1e:7e:c5:9c:b9:bd:c9:9c:1d:a0:0b:32:
                    55:04:8c:51:5d:92:4a:46:09:6c:a3:b4:70:58:57:
                    e7:e4:86:bd:8d:7a:3b:25:1a:ac:db:ff:2c:8f:76:
                    e9:ed:22:b5:15:2a:47:42:67:96:a7:46:00:14:2e:
                    7f:50:b5:68:10:40:34:1c:f2:8a:84:6d:27:af:9d:
                    3e:52:25:ea:4a:21:29:e0:6a:d0:00:83:c2:74:0e:
                    0b:26:19:2a:ad:f2:a7:44:9d:66:46:2f:79:07:2b:
                    f2:51:15:a1:c9:00:ca:2b:84:3f:04:6f:a8:58:d4:
                    97:65:2b:00:a4:19:21:68:ec:3c:0a:1f:73:63:97:
                    05:1c:fc:c7:d9:f0:82:19:08:62:1d:73:a5:ba:b6:
                    26:de:09:60:0b:01:35:96:d8:c3:47:67:63:d6:12:
                    71:c1:53:ff:45:d2:7d:33:c1:91:f4:07:5a:d2:e6:
                    d9:d1:a4:9b:8c:f3:5d:d5:88:49:a3:55:a2:f3:1c:
                    83:38:96:9d:59:89:ff:f6:03:76:c5:d9:11:c8:cc:
                    ce:97:e9:e5:2c:db:65:e9:3f:3b:39:39:38:b0:08:
                    85:15:2b:74:19:a4:44:52:57:32:34:40:cb:69:ed:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:54:6F:E4:C5:92:7D:CE:FE:D7:DB:B6:D1:64:AE:7D:9E:DF:F4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.45.0/24
                  72.249.76.0/23
                  72.249.104.0/23
                  72.249.125.0-72.249.127.255
                  72.249.144.0/23
                  72.249.170.0/23
                  174.136.0.0/23
                  174.136.4.0/23
                  206.123.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:84:58:62:72:2e:c7:51:89:72:cb:66:52:f0:ce:3b:1b:22:
         03:22:db:bb:08:6f:83:dc:77:cb:61:a2:b8:9d:aa:d0:84:1c:
         15:61:1f:59:8d:98:df:a6:d9:55:0f:e3:0e:a5:d7:82:99:c8:
         8c:9b:85:d0:70:97:58:4b:bb:3d:11:f6:4d:31:a6:06:66:18:
         d4:5d:93:4c:94:a8:73:d9:27:7d:f3:97:b0:1a:03:67:74:48:
         e3:fd:17:6d:7c:33:0d:9d:6d:a2:d5:c0:08:c5:b1:57:42:b2:
         7f:cf:47:d4:84:c2:f3:25:5c:d0:26:51:f2:c9:72:89:a6:19:
         77:e1:a8:08:3f:98:08:ed:f0:e6:d8:f9:00:07:0e:ac:f7:1b:
         10:fe:c4:95:9a:3a:19:99:11:07:dd:9b:1c:bc:48:fb:38:58:
         96:2b:57:80:89:d8:dc:bc:aa:16:6e:3e:a3:5b:6e:7f:43:25:
         28:3a:ec:76:7f:30:3e:a4:f4:a3:97:27:9b:2a:21:2c:73:b9:
         5c:8d:62:e2:f5:b1:74:3e:a9:77:2f:d7:99:ee:b2:0c:45:83:
         c1:58:e8:01:40:f9:95:8a:89:65:6b:01:4e:05:e3:28:fe:01:
         19:0a:67:0c:d0:03:d1:7b:ae:b7:b3:54:3b:22:be:9a:5b:46:
         9e:99:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org