Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
File:                     8457e11b-32d1-34c0-81ea-624f8e85267e.roa (raw, json)
Hash identifier:          gnsvBf9RQLhwuIP/BuCRADdohE+xp2/Dyb3y51a1Cqk=
Subject key identifier:   85:9D:85:8A:83:5B:28:47:6D:F9:98:EE:F0:32:CA:2A:DA:7A:00:77
Certificate issuer:       /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial:       010D0C9F4328584737907E604CC2D753D4F49F00
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     55254
IP address blocks:        72.46.80.0/22 maxlen: 24
                          104.37.112.0/22 maxlen: 24
                          162.211.184.0/22 maxlen: 24
                          168.100.192.0/19 maxlen: 24
                          172.96.20.0/22 maxlen: 24
                          205.201.30.0/23 maxlen: 24
                          205.220.192.0/20 maxlen: 24
                          216.10.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:7e:60:4c:c2:d7:53:d4:f4:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=966da975-dac9-4ba6-a86e-b8ca6e1145f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:65:6a:f9:3b:12:50:fe:c1:64:66:4b:19:
                    3c:e7:24:62:27:03:98:81:d2:e3:39:c7:e3:5d:49:
                    52:2d:53:5b:f1:7f:be:5f:b6:39:55:bc:4c:f1:ec:
                    98:3a:a2:cd:f0:41:b5:58:e8:15:10:51:0b:ba:f7:
                    49:62:da:1b:04:08:71:7b:0a:36:1f:dc:2f:1f:0d:
                    c5:68:06:06:f4:35:56:87:98:d4:ff:f8:bb:18:3b:
                    c4:0a:87:17:b1:82:83:4e:ec:95:6d:75:d0:9b:9b:
                    40:f8:df:73:0e:a5:d6:2e:5d:87:a3:b4:51:63:0d:
                    f8:eb:22:11:a5:92:3f:12:f8:02:ce:23:d1:bb:a9:
                    05:98:0d:af:49:fd:91:6c:44:2c:c1:76:91:11:93:
                    58:ce:86:9e:69:eb:80:8a:ee:ee:d4:ee:71:86:0e:
                    8c:3f:e5:98:34:b1:0d:b6:a9:85:56:36:47:f7:d3:
                    fb:ea:66:55:e8:76:40:c1:08:ca:28:c8:e9:bb:67:
                    98:fe:5f:37:e5:d8:1d:c5:71:5a:2d:b5:3a:3d:4c:
                    90:f6:67:1b:5e:2c:e6:7a:b8:dc:73:6a:62:a1:e9:
                    73:68:e3:18:fd:90:52:90:0e:20:b5:07:02:7b:f5:
                    bc:ef:d8:4f:7d:ee:9d:12:ab:f0:33:01:3c:6c:fe:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:85:8A:83:5B:28:47:6D:F9:98:EE:F0:32:CA:2A:DA:7A:00:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl

            X509v3 Authority Key Identifier:
                keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.80.0/22
                  104.37.112.0/22
                  162.211.184.0/22
                  168.100.192.0/19
                  172.96.20.0/22
                  205.201.30.0/23
                  205.220.192.0/20
                  216.10.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:87:c2:8c:c9:5c:2f:f9:36:93:e4:70:8f:a2:87:13:8e:a0:
         9b:a9:0b:bf:ac:be:76:b9:57:aa:6b:99:03:26:86:20:90:c0:
         74:25:05:46:5a:cf:84:89:0f:e0:54:e0:86:7e:e8:cd:5d:39:
         1b:2b:cc:fd:41:1c:3c:63:b7:e9:04:80:92:9a:0a:8b:12:3b:
         9d:d1:6a:51:ea:b9:35:0c:e4:8c:e6:3e:c7:e9:3e:63:6e:b0:
         cb:ec:02:f4:e2:8d:7e:fc:30:b2:0a:8b:9f:c1:ad:a7:cb:92:
         2b:ee:94:28:bb:e2:b7:a1:6b:86:3b:06:3b:1c:c9:ce:34:f5:
         6f:b9:5c:df:4e:2e:f4:11:90:0f:1d:60:8c:d2:88:1a:7a:e0:
         a2:44:59:bc:90:e5:be:80:1b:ca:2d:0d:7f:e9:48:03:73:84:
         d3:5c:b5:77:a0:a2:26:49:ac:94:55:83:a6:02:a6:4c:2d:68:
         d4:98:de:0f:1e:f3:d1:ff:88:f3:4a:ec:18:ac:49:20:07:d1:
         b4:0d:93:9e:ea:b0:1b:51:42:ce:07:d9:ee:ca:87:79:fd:c5:
         e8:00:0f:89:66:0e:26:66:a9:c4:54:8b:57:7c:f0:de:6e:95:
         37:d9:7e:5b:4b:23:5b:88:d4:d8:de:0f:c6:d5:6a:ba:48:96:
         66:af:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:20 2024 by rpki-client on console-ams.rpki-client.org