Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
File:                     511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa (raw, json)
Hash identifier:          76UC46hGLfKxNMoVVXZ0dRpLjrynFrN+r89VsskKNXU=
Subject key identifier:   84:69:BB:B3:3B:23:F3:19:6B:30:7A:85:70:E7:B0:23:FF:12:54:27
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F432858478F812D703F0F54F077B36C40
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     46475
IP address blocks:        63.143.32.0/19 maxlen: 24
                          64.31.0.0/18 maxlen: 24
                          69.162.64.0/18 maxlen: 24
                          74.63.192.0/18 maxlen: 24
                          162.253.40.0/22 maxlen: 24
                          192.169.80.0/20 maxlen: 24
                          208.115.192.0/18 maxlen: 24
                          216.144.240.0/20 maxlen: 24
                          216.245.192.0/19 maxlen: 24
                          2607:ff68::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:2d:70:3f:0f:54:f0:77:b3:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=574b3ff3-2631-4632-ab32-59d5f8a4a128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:ab:80:7f:fe:a5:40:bf:1c:a9:54:88:b4:
                    a0:6b:95:02:ac:36:e0:32:5d:aa:21:f9:a9:df:64:
                    09:3f:9e:2f:eb:b1:90:6b:d9:d0:be:87:30:48:49:
                    04:33:e2:62:af:77:e0:af:3b:3b:a8:62:8b:ef:23:
                    31:a0:4b:09:7e:63:f0:05:da:18:b8:f7:75:4e:aa:
                    3d:5f:7f:47:bb:fd:06:a3:73:43:c5:2a:c1:a6:73:
                    c5:8e:a4:16:95:9d:9f:d9:80:c6:c0:10:0d:72:af:
                    8f:1c:fc:ba:54:e1:45:77:9e:ea:bf:32:02:96:35:
                    ba:18:63:40:64:b8:d8:59:82:0b:09:ca:61:50:89:
                    03:8b:2b:8d:81:78:e6:6f:fe:30:05:15:1a:95:f0:
                    b9:93:d6:dc:59:e2:6f:5a:ed:37:53:74:0f:f2:88:
                    7a:8a:67:61:d8:d8:5b:cb:13:05:97:14:4d:1b:b1:
                    0d:dc:46:eb:12:cb:ab:d1:a2:3b:c5:fa:99:33:84:
                    56:68:20:9c:59:75:9e:32:18:35:25:47:48:08:aa:
                    72:0d:67:88:8d:b5:79:bb:7d:6b:72:fa:7f:f8:83:
                    71:ad:70:10:4d:11:3b:c9:7f:1f:8c:9b:3f:4f:52:
                    46:91:c7:42:e6:ba:a9:5c:67:28:00:e8:9f:23:8c:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:69:BB:B3:3B:23:F3:19:6B:30:7A:85:70:E7:B0:23:FF:12:54:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.32.0/19
                  64.31.0.0/18
                  69.162.64.0/18
                  74.63.192.0/18
                  162.253.40.0/22
                  192.169.80.0/20
                  208.115.192.0/18
                  216.144.240.0/20
                  216.245.192.0/19
                IPv6:
                  2607:ff68::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:a0:92:64:07:83:4a:24:5c:fa:f1:9d:47:99:18:a6:72:
         95:7e:11:49:12:6c:1b:86:29:8e:ed:db:bc:35:b7:7c:24:01:
         57:80:c3:e2:cb:c1:af:36:43:af:2e:d0:dd:05:10:8a:c9:89:
         19:d5:c5:0d:f7:87:57:d8:c3:75:ff:06:ba:68:08:12:17:7b:
         6a:ff:01:c6:a5:7c:d1:28:41:54:96:a1:db:27:1a:fa:0a:b6:
         37:51:5c:05:bb:eb:9e:04:fd:17:c9:01:19:7d:a8:f1:55:81:
         e6:f7:7d:46:22:60:06:ed:7a:5d:1a:12:32:dd:21:81:c8:2c:
         36:fb:84:91:7f:1b:31:06:75:9b:d2:12:52:dd:e8:b9:5d:4a:
         c0:1c:a4:07:75:9b:78:c4:41:c2:a4:af:7d:10:72:56:a1:85:
         6c:9a:15:8d:cd:a3:9f:4c:1d:d8:32:ff:4e:62:e5:6e:55:18:
         aa:d1:7e:6a:26:e2:86:17:1e:b5:3e:c6:44:34:85:fe:4c:17:
         73:89:4c:dd:91:b0:a4:d6:d4:60:d2:d8:5d:af:60:64:44:a5:
         63:e4:a0:e9:cc:ff:2e:6f:d2:90:90:5c:42:07:11:a9:22:fb:
         23:8b:f0:bf:22:40:06:48:c6:21:82:79:96:ef:aa:ce:48:0c:
         6e:72:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org