Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa
File:                     a2820430-cffa-3a28-865a-d2bff6b67e7e.roa (raw, json)
Hash identifier:          R2t1txeliUp3jROkwf8CM38Xy4nshrp7c9i+Uk7b2As=
Subject key identifier:   E6:1B:2E:72:67:73:F7:39:71:8F:EA:21:4C:F9:BB:86:EB:7C:EF:A5
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F432858479516924864A61017CB847200
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     140042
IP address blocks:        104.251.224.0/20 maxlen: 24
                          172.81.102.0/23 maxlen: 24
                          172.81.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:92:48:64:a6:10:17:cb:84:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=d7e7121c-9dda-461a-9ecc-dbb64d200a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:64:3b:eb:24:d4:79:91:ee:dd:fe:af:6d:
                    d9:df:58:3b:29:a1:df:40:80:a4:54:44:97:d0:7f:
                    bd:ac:96:5c:02:c2:80:0f:ec:d1:99:64:70:4b:16:
                    48:82:5f:63:70:65:56:ac:33:01:c5:74:a5:49:c6:
                    68:b3:f7:d9:22:8e:80:b3:b4:1a:c2:d9:8b:2e:2a:
                    08:ed:40:82:0c:b9:62:2c:4f:77:80:50:7d:c7:47:
                    af:ea:aa:7e:88:03:93:02:57:e0:8c:5e:c0:d9:58:
                    b1:8a:cc:f3:93:14:66:7e:9d:7e:e1:96:7b:ba:88:
                    b0:8d:84:67:80:c9:0d:97:1d:23:b7:90:e4:43:fb:
                    b3:43:d0:c0:52:d1:04:3f:fb:35:88:a3:81:2c:e1:
                    63:ea:c9:b2:b3:49:3b:9c:35:a5:58:a1:fc:96:dd:
                    b6:b3:c8:82:40:ca:68:cc:d4:c1:d1:6d:d3:f7:fd:
                    75:c3:0a:5e:29:f9:0c:52:96:c7:01:58:d1:82:5d:
                    9a:0f:99:da:d6:55:df:d3:94:0e:d6:de:e7:88:04:
                    76:61:95:5c:75:21:e9:e1:1a:c7:c9:06:d5:7d:35:
                    96:71:51:0b:e7:84:fd:01:83:ab:d7:70:89:95:56:
                    26:80:21:38:be:ad:c0:54:07:ec:57:b3:a2:9f:02:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1B:2E:72:67:73:F7:39:71:8F:EA:21:4C:F9:BB:86:EB:7C:EF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.224.0/20
                  172.81.102.0-172.81.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:13:de:8e:5b:da:57:c4:3c:79:f3:6c:bb:60:cf:21:cc:
         95:57:0c:87:98:bb:f0:0d:b3:fa:a8:0e:79:d2:c5:56:ed:bd:
         34:51:0a:6b:e0:c1:5e:89:f1:7b:90:27:55:3c:14:a8:f3:d7:
         c3:41:91:b0:c5:00:3d:e8:86:a3:a9:d6:4d:72:d2:17:c7:a4:
         c7:e5:2c:66:9f:cd:7e:86:1d:9d:02:82:81:8a:76:a4:e9:cb:
         34:a7:2f:30:bb:58:1f:fb:5e:63:c2:3f:9a:35:d6:b4:73:26:
         9a:64:f6:51:7d:9f:8b:b4:cc:69:41:e8:a1:9a:66:22:d3:8c:
         5f:5a:22:ed:4c:96:b9:c8:be:47:51:30:bf:b7:bb:29:81:52:
         a0:af:47:32:67:5c:1f:9d:4f:02:d6:36:ad:c4:55:ba:24:d3:
         80:08:f1:f9:74:1c:7b:c3:12:e1:ff:21:96:d0:b1:fc:1d:1d:
         13:35:6e:ff:c7:b6:2a:90:1c:2d:9b:86:3f:da:25:53:93:88:
         fc:06:ec:51:2d:6b:0b:a3:e3:db:f5:15:f7:1f:4a:ac:d3:84:
         42:07:66:45:75:ab:11:78:60:72:d6:3e:dc:e6:93:4d:91:4f:
         5d:e2:88:27:56:34:d2:4c:c4:7f:b9:67:9c:e6:b4:7c:61:0f:
         7a:97:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:20 2024 by rpki-client on console-fra.rpki-client.org