Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa
File:                     f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa (raw, json)
Hash identifier:          C2rv/efvgHMxhOKj3RxWc/j8415wW/IHy7EBOovzxJw=
Subject key identifier:   03:71:44:4A:93:0D:A7:8C:E1:54:35:BE:EA:C6:7F:8F:1E:67:42:3C
Certificate issuer:       /CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0
Certificate serial:       010D0C9F432858478B510DE48237FA2E6595E180
Authority key identifier: 7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     22667
IP address blocks:        67.59.192.0/20 maxlen: 24
                          69.39.240.0/20 maxlen: 24
                          173.213.192.0/20 maxlen: 24
                          173.249.96.0/19 maxlen: 24
                          192.40.208.0/21 maxlen: 24
                          206.176.224.0/19 maxlen: 24
                          2604:8f80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:0d:e4:82:37:fa:2e:65:95:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=78879f6e-5041-4913-96f6-8a1db596bdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:23:7b:d9:fa:2f:59:b3:51:76:a5:64:fc:
                    6f:9d:8d:19:4f:c7:8a:d3:22:ac:75:b3:62:ac:33:
                    32:f8:42:37:77:a6:31:9c:9e:ab:9b:bb:bc:81:97:
                    e8:78:36:9d:26:54:4f:41:2a:85:81:e0:95:c3:31:
                    a5:da:9b:0c:d1:20:0d:2e:b8:1e:48:68:8e:c4:8f:
                    0f:11:c0:09:3a:70:ca:66:64:b6:0d:ff:1f:82:2d:
                    fd:eb:ea:0c:22:ff:66:1f:15:16:49:42:e4:de:0f:
                    46:45:de:8b:3d:71:f8:a1:bf:24:b9:d5:a8:b6:e8:
                    d8:75:dc:e6:d7:26:c9:32:f3:ee:6c:99:a4:1d:1b:
                    ee:ed:4f:e8:9a:b6:86:b7:30:e5:c2:d7:9f:63:3d:
                    96:6c:d0:88:39:49:97:0f:07:c4:b2:af:2b:ff:77:
                    c1:d3:fc:ac:cc:fc:61:e6:ce:50:da:e5:50:17:dd:
                    de:68:ce:f8:30:b4:74:cf:66:5d:0f:56:cb:89:18:
                    8a:19:6b:f3:58:0e:dd:9e:58:40:26:62:74:64:71:
                    4e:77:2a:6a:bf:d5:80:55:d1:46:20:8f:8a:2b:36:
                    46:ef:11:07:b0:78:4c:7b:26:49:df:cc:08:93:d3:
                    13:2e:00:61:51:b2:49:f3:4e:d5:d8:aa:35:de:51:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:71:44:4A:93:0D:A7:8C:E1:54:35:BE:EA:C6:7F:8F:1E:67:42:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.crl

            X509v3 Authority Key Identifier:
                keyid:7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.192.0/20
                  69.39.240.0/20
                  173.213.192.0/20
                  173.249.96.0/19
                  192.40.208.0/21
                  206.176.224.0/19
                IPv6:
                  2604:8f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:36:b4:d7:3e:78:39:b5:30:9f:33:72:7d:9d:6b:9a:eb:cf:
         11:95:a7:b5:fd:13:08:ac:42:de:bf:c0:a1:a8:24:37:7f:e4:
         14:a0:d5:3d:01:58:19:99:3a:c0:ca:f5:fa:0c:0b:4f:f6:9c:
         9b:38:f9:82:96:c5:64:4d:0f:43:a5:ca:c0:f2:53:04:8e:ba:
         a8:3b:e1:8c:25:27:47:dd:15:81:b6:d2:73:6a:fd:0c:52:d8:
         30:a3:cd:75:d8:14:4a:88:c4:f0:bb:40:b2:bc:22:80:5f:1d:
         6e:f2:d1:58:9d:65:eb:97:fd:44:0b:5f:aa:ef:ed:a8:a9:4b:
         f5:19:b8:97:3f:0d:05:7d:b6:c2:f8:63:86:d7:25:a1:05:1a:
         9f:b9:1e:54:e1:20:19:84:45:9d:fd:59:8b:0d:6e:0e:21:d3:
         57:ee:bc:c6:93:fc:2b:24:df:31:84:c6:db:73:28:d5:d6:a8:
         9b:0a:b1:51:4b:ff:0a:f8:11:2c:a4:b3:ac:85:74:ad:76:84:
         25:c2:45:87:91:ec:80:86:2c:02:b4:1e:01:a6:49:42:63:a7:
         96:52:ce:96:57:ad:67:45:17:a1:02:cc:9f:d9:3c:47:1d:2a:
         ab:2d:cf:ad:e1:27:4f:13:50:ed:95:f6:46:00:39:0f:f2:fc:
         30:c9:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org