Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa
File:                     8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa (raw, json)
Hash identifier:          yNLk/tA/FLBVeW9ussGDlbezpDX7zhIXI1+t8EBLJH0=
Subject key identifier:   C7:85:A0:F3:BC:96:22:1D:B3:2F:F1:62:E9:EA:F4:34:88:C4:94:EC
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F43285847ACD136B1C1953D09FF86A940
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     398090
IP address blocks:        104.171.200.0/22 maxlen: 24
                          192.222.48.0/20 maxlen: 24
                          198.145.39.0/24 maxlen: 24
                          209.20.156.0/22 maxlen: 24
                          2607:bb40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:36:b1:c1:95:3d:09:ff:86:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=feeb38fe-a824-40ad-b0de-3c8252d50491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:6e:10:55:8d:5a:a5:5c:6d:98:6f:58:ba:
                    da:da:5f:28:f9:5f:c0:08:d7:ad:1f:b2:5c:f2:5d:
                    2c:fc:51:02:69:f7:c4:2d:7b:bf:b8:6d:99:bf:1f:
                    1b:b9:bf:0c:14:32:19:a5:1f:36:c5:8e:17:4d:60:
                    b0:e9:75:88:49:a4:80:c6:bc:74:de:b7:b8:7d:d2:
                    5e:11:8c:7b:30:8f:11:1b:f1:d2:c3:bf:c4:a2:da:
                    92:30:b7:ca:b3:35:53:b6:de:c7:73:6f:7f:69:d6:
                    2b:14:19:c7:07:45:7d:e8:b4:5a:db:9d:62:6c:b6:
                    a6:e2:e1:87:20:9c:b2:cf:cf:9d:2e:64:c7:79:07:
                    0c:94:74:04:83:5e:1a:0d:1f:49:70:f6:a9:0f:ad:
                    76:37:ff:19:63:a9:eb:9e:47:80:d9:1c:bf:f1:da:
                    6a:35:3a:ab:cf:01:be:76:a6:16:25:46:2e:bd:be:
                    f5:db:e3:3d:c4:28:d8:20:da:5b:1a:81:92:32:57:
                    1c:89:31:26:bd:e8:57:22:8e:7a:cd:93:d8:3c:ae:
                    87:99:38:b6:d4:97:72:da:9b:4a:f7:4f:db:7c:e5:
                    dc:55:db:aa:ff:a5:69:5d:db:e1:12:82:f0:09:e7:
                    0e:45:9c:82:60:d3:74:93:2d:3d:04:79:25:b2:4e:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:A0:F3:BC:96:22:1D:B3:2F:F1:62:E9:EA:F4:34:88:C4:94:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.200.0/22
                  192.222.48.0/20
                  198.145.39.0/24
                  209.20.156.0/22
                IPv6:
                  2607:bb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3d:25:5f:e4:a3:c7:40:53:f5:05:0a:5c:f5:4a:da:d4:cd:
         50:d5:06:be:ba:4c:e2:cb:5b:77:40:6e:19:d4:9e:d2:9a:74:
         33:47:e6:56:91:0e:a1:81:50:80:64:04:b4:ff:71:c2:d7:a8:
         ca:ac:c0:55:9a:91:e4:a3:46:91:81:0d:10:04:a0:3c:3d:16:
         e8:a6:53:4d:d6:2d:fd:74:31:8f:ee:59:6b:46:62:e5:f7:8a:
         b7:77:c3:ad:be:c6:d0:64:f1:6c:58:9b:2a:a3:4e:fe:23:d3:
         30:29:c1:a8:3c:35:69:36:a1:b2:51:26:a3:e7:4a:93:6a:4b:
         40:1c:ac:d9:44:41:f2:b3:9c:ff:9a:23:d3:81:5d:54:3d:6e:
         90:62:4e:29:21:57:90:e0:3d:6e:4b:28:7f:36:a6:0e:d7:43:
         45:7c:f3:79:4d:d8:02:d5:1f:26:f4:a5:75:d5:e3:1a:bd:e6:
         8b:36:09:6c:4e:66:67:e0:92:fe:aa:e2:bd:d3:e4:fd:bf:5d:
         56:ba:1c:e0:b5:6b:b0:e5:65:e0:4e:73:d7:b3:9e:f3:98:90:
         b0:01:80:b7:28:be:ad:97:0c:e1:4e:53:16:01:4a:00:42:47:
         39:42:e5:22:61:78:5c:81:79:64:a0:cd:0b:26:6b:7a:88:27:
         c4:96:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:45 2024 by rpki-client on console-fra.rpki-client.org