Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05/757369ee-a9c8-33ac-a4e0-645b0cddfa22.roa
File:                     757369ee-a9c8-33ac-a4e0-645b0cddfa22.roa (raw, json)
Hash identifier:          gZsCJvQS0Q4bnlFNffV9rWNUWPDaP/2FY4sbSXqRQxw=
Subject key identifier:   BD:E3:C2:4E:70:46:91:47:AD:E7:8D:0B:13:84:69:4F:55:22:81:48
Certificate issuer:       /CN=a13d1bfb-cc2d-481c-a141-9e06ea5e1a05
Certificate serial:       010D0C9F43285847208B3303BB590710BBCBF680
Authority key identifier: 59:E0:4F:0C:DF:DE:44:98:5D:E2:35:32:58:15:4D:F6:F7:B5:A7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05/757369ee-a9c8-33ac-a4e0-645b0cddfa22.roa
Signing time:             Fri 06 Sep 2024 19:06:17 +0000
ROA not before:           Fri 06 Sep 2024 19:06:17 +0000
ROA not after:            Thu 05 Dec 2024 20:06:17 +0000
asID:                     13438
IP address blocks:        74.114.204.0/22 maxlen: 22
                          162.208.0.0/22 maxlen: 22
                          162.217.168.0/22 maxlen: 22
                          192.231.249.0/24 maxlen: 24
                          199.73.56.0/22 maxlen: 22
                          199.115.216.0/21 maxlen: 21
                          204.48.54.0/23 maxlen: 23
                          205.210.188.0/22 maxlen: 22
                          208.77.208.0/22 maxlen: 22
                          2604:7d80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:8b:33:03:bb:59:07:10:bb:cb:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a13d1bfb-cc2d-481c-a141-9e06ea5e1a05
        Validity
            Not Before: Sep  6 19:06:17 2024 GMT
            Not After : Dec  5 20:06:17 2024 GMT
        Subject: CN=628765e5-7ab4-4d73-b6dc-69b386425826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:75:5b:07:35:dd:2c:9b:50:35:a5:05:17:
                    9c:2b:2a:76:4b:ff:2d:18:b2:2d:8e:3d:25:2a:7e:
                    f7:e9:3d:0e:47:07:bb:c4:99:0e:3b:dd:71:03:f2:
                    56:55:b2:0a:c6:03:4a:54:36:f0:7a:38:c2:4a:69:
                    2e:6c:66:ed:97:e5:27:78:96:59:fe:1e:12:c0:e8:
                    5b:fb:01:df:24:60:fb:13:f5:90:92:25:36:71:94:
                    39:ad:a6:04:91:b8:8f:06:0f:cb:47:4b:d7:35:7e:
                    98:08:59:11:1e:59:b8:25:f9:ae:71:9c:7e:d0:7b:
                    88:b6:2e:8d:65:f1:75:14:56:60:cd:0e:75:6c:be:
                    cd:3b:46:2f:a2:b0:de:c8:00:8a:f6:be:27:ef:bc:
                    1c:a8:f7:8b:4b:81:d0:d3:d5:82:94:90:47:54:6f:
                    bb:aa:76:4a:1f:0e:dc:1f:d9:38:02:61:eb:c7:70:
                    19:5b:e8:c7:d2:fd:f6:9d:82:bf:47:72:bb:42:ec:
                    3f:09:92:6f:f6:4d:21:a6:08:81:44:6f:85:8f:ed:
                    20:84:17:53:fe:e2:a8:84:46:04:ab:d5:98:ea:25:
                    6c:d1:2b:8f:0e:05:e8:b4:44:c8:6f:57:83:85:48:
                    2a:c1:b8:07:b5:53:17:0e:ad:46:2d:e0:f4:65:0f:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:C2:4E:70:46:91:47:AD:E7:8D:0B:13:84:69:4F:55:22:81:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05/757369ee-a9c8-33ac-a4e0-645b0cddfa22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05.crl

            X509v3 Authority Key Identifier:
                keyid:59:E0:4F:0C:DF:DE:44:98:5D:E2:35:32:58:15:4D:F6:F7:B5:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a13d1bfb-cc2d-481c-a141-9e06ea5e1a05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.204.0/22
                  162.208.0.0/22
                  162.217.168.0/22
                  192.231.249.0/24
                  199.73.56.0/22
                  199.115.216.0/21
                  204.48.54.0/23
                  205.210.188.0/22
                  208.77.208.0/22
                IPv6:
                  2604:7d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:11:d8:7a:45:5e:6a:e2:0c:a2:19:a5:7a:48:d9:d0:ed:3f:
         c0:de:5e:0c:dc:bf:0a:9c:01:ec:0d:cd:30:63:11:9e:44:bb:
         3f:e0:85:99:e6:a8:d4:ce:14:dd:6b:24:f5:e5:b1:9b:6f:55:
         0a:32:d1:67:67:4c:ef:89:f9:d0:f0:7a:a7:17:f7:ba:7d:56:
         97:19:fd:e2:78:6a:35:91:23:5a:6f:a5:60:dd:c5:89:2a:c1:
         ba:51:be:73:00:84:08:1e:1b:7d:7d:23:3f:cf:01:2a:33:bd:
         17:6c:7b:b7:16:97:0d:9b:72:33:ad:78:a1:80:b6:bd:32:bc:
         f4:21:e9:db:30:6b:c7:85:3a:99:2d:63:89:6b:7b:b4:fb:f4:
         52:15:fa:a9:10:db:33:a8:e1:58:dd:4e:e9:f2:a4:c1:a9:43:
         c3:55:4e:56:51:c6:99:f2:5c:c1:1d:02:84:7d:34:68:51:e5:
         29:e0:f5:f9:5a:b3:97:fe:9e:bd:d3:dd:48:4a:c4:9a:a0:5d:
         19:89:20:fd:59:2d:be:1e:5f:79:33:3a:a4:6f:0b:b8:e4:ee:
         f7:f4:b8:7f:b8:ea:cb:75:4e:cc:3e:79:f0:38:f8:e8:40:af:
         5c:0d:1a:f7:16:06:b5:44:a5:80:03:44:ec:32:8d:c6:5e:57:
         b7:03:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org