Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
File:                     87da4f25-f5c5-376e-a232-31fdb9491bd9.roa (raw, json)
Hash identifier:          AzD33PFNmRibucWo4G7DKfNgRdWkQCDIYAGQYtdRpSI=
Subject key identifier:   CC:0A:03:3E:97:E6:3F:6A:56:B9:2F:83:F0:59:12:AA:A2:47:E0:1B
Certificate issuer:       /CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
Certificate serial:       010D0C9F4328584765A0F1AB3A083CF1C7C6CAA0
Authority key identifier: A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     15317
IP address blocks:        162.221.224.0/22 maxlen: 24
                          162.252.20.0/22 maxlen: 24
                          173.214.240.0/20 maxlen: 24
                          192.133.136.0/21 maxlen: 24
                          199.182.160.0/21 maxlen: 24
                          216.172.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f1:ab:3a:08:3c:f1:c7:c6:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=7c88b8bf-0b0f-4399-a645-c4b6a28da2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:c1:95:29:5c:f9:c7:96:19:7a:ca:b2:77:
                    8a:72:29:f5:7f:45:a1:36:6b:3d:3a:95:f6:40:29:
                    2c:6c:a7:df:e2:53:c9:47:49:95:d6:ab:99:fd:1b:
                    73:84:f2:5c:d1:11:f7:0f:55:a0:b2:d3:9d:44:94:
                    56:55:81:65:c1:41:59:69:36:22:02:00:57:b6:a7:
                    a0:fb:5b:39:4f:40:46:f5:3a:77:23:85:07:ab:12:
                    72:8c:81:74:de:28:77:3e:49:69:92:d9:b2:af:47:
                    7b:c3:b2:86:c0:b3:2a:08:5b:43:d9:dd:a3:a2:5e:
                    d0:85:9f:6c:3d:27:a4:b3:d3:2b:0d:90:ea:e6:39:
                    07:ab:4f:70:74:db:66:9f:cf:de:52:c7:a1:86:00:
                    0b:a8:6f:2e:d1:be:7c:aa:58:c3:0e:c3:96:03:de:
                    d3:32:a8:c5:25:c8:8a:2c:c5:82:71:7a:23:02:77:
                    48:42:42:2d:18:16:47:7a:00:83:05:cc:ce:f0:8c:
                    bc:f0:59:ac:85:e2:ab:14:b6:55:fd:b7:a9:42:02:
                    75:50:4e:67:b4:cd:c0:0c:2c:b8:04:12:5d:a7:06:
                    5b:1f:cd:6b:a6:5d:ef:e1:01:32:f3:6e:63:3d:20:
                    5f:0f:8a:43:3d:5c:7a:5a:fe:90:a0:1a:29:12:16:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0A:03:3E:97:E6:3F:6A:56:B9:2F:83:F0:59:12:AA:A2:47:E0:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl

            X509v3 Authority Key Identifier:
                keyid:A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.224.0/22
                  162.252.20.0/22
                  173.214.240.0/20
                  192.133.136.0/21
                  199.182.160.0/21
                  216.172.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:2e:35:c0:2b:f0:d1:ba:b2:0d:ca:cd:8d:15:79:29:87:
         dc:9c:64:7f:db:8a:a0:c7:df:86:95:27:97:f7:0f:aa:16:72:
         c7:96:5d:ef:c4:39:ed:c4:b7:25:28:80:77:a5:34:f1:63:86:
         32:a4:95:2b:19:65:9e:90:1a:59:28:5d:12:33:13:e2:f9:86:
         4f:55:d5:38:71:b3:f0:b0:3b:d1:38:63:1d:81:f0:14:c8:99:
         b1:45:0f:e1:ec:1c:3f:dc:25:b5:62:c8:bc:19:83:8c:4b:bf:
         67:c1:5e:2e:ab:b3:30:32:2d:09:ff:25:e7:b7:70:39:3f:7b:
         db:39:c1:d8:48:73:b9:84:87:49:e2:13:05:b3:a3:0e:cb:84:
         3d:af:50:65:9d:73:08:4d:c1:64:49:14:8f:6c:ef:68:19:ed:
         af:db:aa:72:7b:2e:15:b6:7a:76:67:aa:b1:ff:e8:97:19:6f:
         87:6a:d0:4c:66:ca:e5:31:68:38:60:ed:aa:77:da:d2:f7:53:
         9e:7e:6b:ce:75:2a:03:b2:12:09:e6:ad:07:50:98:14:99:ba:
         c6:06:c9:7b:d7:9c:b4:b0:7b:16:f9:86:ec:54:08:0f:7d:80:
         c6:af:97:08:25:f3:96:f9:14:8f:18:bf:fd:bb:8d:b6:30:38:
         8e:a1:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:11 2024 by rpki-client on console-ams.rpki-client.org