Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa
File:                     f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa (raw, json)
Hash identifier:          8YSFGi9t3g/VEiPfT5jhLQQM1oEZMwzESJZazXH61kc=
Subject key identifier:   DF:4E:D0:7D:CA:A0:AA:4A:2A:7F:0F:4F:F9:14:8F:DD:2B:28:3B:BC
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285847362B5E278CCCA14C921E4200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     4997
IP address blocks:        66.213.144.0/21 maxlen: 21
                          66.213.152.0/21 maxlen: 21
                          66.213.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5e:27:8c:cc:a1:4c:92:1e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=ebc2a0f7-7f58-42da-8d49-92f41605f58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:8f:5f:ba:ac:91:fa:d9:96:57:d1:c7:d5:
                    d7:79:a3:1f:e5:29:ed:6d:04:e1:4c:f1:40:cc:96:
                    44:cb:a7:78:dc:e2:b1:a6:20:88:58:1b:a4:42:29:
                    64:3e:df:e7:f5:d3:44:8a:a9:57:1f:19:6e:82:73:
                    1a:ab:44:69:be:1a:ed:9c:55:b1:2f:a7:42:b3:0c:
                    62:2e:17:82:71:6a:51:f4:74:d7:cd:c0:d1:04:a3:
                    db:5b:ac:ee:43:32:a1:c3:fd:7e:21:9b:6d:cd:2d:
                    ca:ec:51:54:35:1b:f4:2c:42:89:a3:8e:c5:17:03:
                    2d:4e:f2:01:00:42:09:50:84:81:1e:bb:40:31:24:
                    46:6d:10:e1:e0:ad:38:72:b0:fc:15:d8:1b:fb:5c:
                    3a:a7:f7:96:c1:a2:6d:4b:fa:e6:03:da:b7:51:52:
                    65:e3:3c:e7:86:8b:6b:5b:e9:59:ac:12:81:fa:d7:
                    91:ec:13:01:5c:d8:16:a5:5b:86:b3:7d:de:45:c6:
                    2d:b3:4d:a4:c2:d8:3f:b9:e6:65:2b:3f:9f:f8:63:
                    06:df:d3:55:36:9d:b1:f2:ad:01:33:52:59:92:b3:
                    7c:5c:74:d1:c0:75:69:4c:4f:6b:f0:e9:71:40:9b:
                    26:75:54:c4:1b:e6:2c:e6:4e:8b:f9:c0:31:14:44:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:D0:7D:CA:A0:AA:4A:2A:7F:0F:4F:F9:14:8F:DD:2B:28:3B:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.213.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:96:68:0e:e8:96:eb:f2:6b:8d:3e:94:67:e8:21:a4:d4:
         15:aa:90:01:ce:cf:7e:79:73:53:d6:97:8b:2b:c9:a7:66:35:
         53:2e:19:3f:a4:52:d9:51:ca:40:94:cb:c9:b8:79:ce:10:3f:
         2b:ab:33:10:0d:8b:14:da:5a:82:61:7d:8f:6b:29:8b:78:63:
         a4:fb:e2:bf:4d:ee:d0:04:57:fd:8a:ca:f6:db:c6:91:e2:cf:
         7b:46:aa:a3:2e:3f:14:b8:3f:17:f3:84:7c:4c:c3:19:62:99:
         27:b2:19:da:66:40:cd:6e:f2:b9:87:f5:f7:a6:e6:99:7f:03:
         a1:56:1a:0c:f2:03:b9:81:b4:64:50:33:96:86:4c:0c:1f:2d:
         ee:e0:87:99:d4:3b:b9:12:05:ee:74:22:a6:bf:5a:55:d1:4d:
         d1:49:49:d8:1f:9f:63:b0:83:8c:43:39:a0:76:c8:47:38:dc:
         1c:72:27:b9:ba:f3:51:d7:13:58:00:b5:06:11:92:4e:5f:7c:
         1a:39:17:d4:c9:b0:36:53:fb:3c:97:70:dc:a5:af:04:fa:81:
         5d:3e:c3:e6:11:d4:63:df:3f:9d:32:0c:41:b8:90:3f:13:3e:
         1e:ce:57:49:f3:a4:16:66:05:ab:e4:bc:fb:6c:f2:b6:82:3f:
         ca:3c:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:59 2024 by rpki-client on console-fra.rpki-client.org