Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
File:                     0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa (raw, json)
Hash identifier:          PYNfO65dwkF16Kv/KZZZN8MLmQotoJumiiUReeXo7yA=
Subject key identifier:   A6:2D:62:DC:76:19:36:4F:8C:66:4A:AA:41:C4:E4:0A:C6:40:B3:C9
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F4328584710AB58E1148E56B7856E6000
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
Signing time:             Sun 01 Sep 2024 02:38:08 +0000
ROA not before:           Sun 01 Sep 2024 02:38:08 +0000
ROA not after:            Sat 30 Nov 2024 03:38:08 +0000
asID:                     912
IP address blocks:        64.72.224.0/24 maxlen: 24
                          64.72.226.0/23 maxlen: 24
                          67.21.192.0/24 maxlen: 24
                          67.226.190.0/24 maxlen: 24
                          72.15.144.0/20 maxlen: 24
                          74.122.128.0/21 maxlen: 24
                          162.213.8.0/22 maxlen: 24
                          173.212.191.0/24 maxlen: 24
                          192.69.132.0/22 maxlen: 24
                          199.7.232.0/21 maxlen: 24
                          199.68.176.0/22 maxlen: 24
                          199.68.181.0/24 maxlen: 24
                          199.68.182.0/24 maxlen: 24
                          199.188.70.0/24 maxlen: 24
                          207.54.126.0/24 maxlen: 24
                          208.66.0.0/22 maxlen: 24
                          208.83.208.0/24 maxlen: 24
                          208.83.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:10:ab:58:e1:14:8e:56:b7:85:6e:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Sep  1 02:38:08 2024 GMT
            Not After : Nov 30 03:38:08 2024 GMT
        Subject: CN=364a5103-8493-495b-8c5a-d22fc2383490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:bc:34:09:0e:bd:17:58:c2:af:f5:47:84:
                    c7:1b:dc:01:f1:5c:85:a9:6a:0f:20:1d:57:63:ac:
                    f6:d5:da:c1:b1:c5:a5:c9:bc:b2:17:74:4c:d9:c6:
                    82:fe:dd:8e:42:7e:b0:9f:ad:08:9f:e0:8f:44:91:
                    24:ce:9d:bd:b4:be:17:1e:d3:e2:0d:c6:12:f7:5b:
                    9c:16:83:14:f3:1a:02:eb:e8:79:b0:cf:23:e0:74:
                    2d:31:91:f3:7f:49:d5:33:de:b5:49:f7:96:19:eb:
                    10:b0:b0:63:98:b4:99:aa:df:56:8d:c7:9c:a2:c1:
                    44:70:42:0d:25:ad:c2:4d:d0:b7:2f:18:d4:58:d9:
                    c3:38:73:79:73:04:28:57:55:7d:0f:1a:cd:b1:16:
                    c3:f3:fc:5c:8f:eb:76:68:24:d0:f9:d2:3f:1d:5f:
                    d7:6a:a7:0e:37:9f:96:bf:45:67:da:c4:ef:f0:b2:
                    7d:40:07:ef:05:2f:8d:d8:64:5b:6c:b2:da:40:9f:
                    8d:c1:74:f5:81:14:df:93:68:3d:ca:0b:d1:8f:51:
                    28:41:0f:cd:31:28:aa:da:41:5b:7e:5e:82:3d:c4:
                    1f:f6:dc:52:1f:79:ac:b9:3d:db:31:73:f0:8f:85:
                    64:fe:e1:8e:14:22:0a:e3:dc:30:53:dc:64:57:4f:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2D:62:DC:76:19:36:4F:8C:66:4A:AA:41:C4:E4:0A:C6:40:B3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.224.0/24
                  64.72.226.0/23
                  67.21.192.0/24
                  67.226.190.0/24
                  72.15.144.0/20
                  74.122.128.0/21
                  162.213.8.0/22
                  173.212.191.0/24
                  192.69.132.0/22
                  199.7.232.0/21
                  199.68.176.0/22
                  199.68.181.0-199.68.182.255
                  199.188.70.0/24
                  207.54.126.0/24
                  208.66.0.0/22
                  208.83.208.0/24
                  208.83.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:63:ff:3f:86:86:4f:31:e9:94:22:0f:28:73:97:fe:83:bd:
         9b:61:b0:17:10:cb:c0:60:bf:fa:a2:13:ff:e4:ff:da:d8:a5:
         90:d6:56:c8:c1:7c:74:81:f5:2f:d1:53:13:d1:40:66:14:8b:
         d6:22:28:64:b1:1c:08:f6:7e:68:7a:66:17:b2:37:20:09:30:
         bc:73:c6:90:bd:ae:10:d0:ed:a9:b7:2c:94:c8:54:ad:db:6f:
         95:8f:36:e8:11:89:98:65:fd:fd:e4:2f:3a:a5:1f:80:81:48:
         fa:f4:a3:66:c3:67:d2:a7:df:ba:2a:1d:78:45:b8:31:24:65:
         26:9e:74:32:87:d6:f1:66:7a:e3:2e:dd:70:f6:42:39:28:e9:
         89:a6:10:d1:8c:1a:83:dd:a8:4c:d7:a2:05:41:8c:81:da:60:
         cf:83:fe:4f:cf:fe:ef:6e:5d:d8:31:41:d7:5b:cf:d9:2d:06:
         db:6a:62:35:c2:ac:fe:a3:1c:e7:01:70:88:9c:6b:c0:c7:72:
         9c:ea:91:43:a7:68:3c:ee:5b:8c:3c:b3:5f:a3:05:94:77:1b:
         1c:24:b3:99:0f:94:51:35:45:29:75:89:a1:92:c8:d0:90:1d:
         2f:68:50:7f:9d:25:72:bc:43:3d:ec:3d:96:af:15:92:98:8f:
         2f:d7:80:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:10 2024 by rpki-client on console-fra.rpki-client.org