Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
File:                     1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa (raw, json)
Hash identifier:          ODGZ6gkDfAeE8Tg23mhu26m49HbWWeDevmMPw69FQ9s=
Subject key identifier:   12:3E:DB:5F:16:19:FE:62:9A:2D:95:27:8D:D6:2D:7A:B3:6D:AC:E4
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F43285847B10160633B6CB9A6980E0090
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     46261
IP address blocks:        23.190.80.0/21 maxlen: 32
                          45.43.192.0/19 maxlen: 32
                          64.187.224.0/20 maxlen: 32
                          104.153.80.0/22 maxlen: 32
                          104.166.64.0/19 maxlen: 32
                          104.247.192.0/19 maxlen: 32
                          107.161.112.0/20 maxlen: 32
                          137.83.79.0/24 maxlen: 32
                          144.208.91.0/24 maxlen: 32
                          160.202.64.0/18 maxlen: 32
                          162.210.36.0/22 maxlen: 32
                          162.217.172.0/22 maxlen: 32
                          162.219.24.0/21 maxlen: 32
                          162.223.28.0/22 maxlen: 32
                          162.244.132.0/22 maxlen: 32
                          162.248.208.0/21 maxlen: 32
                          170.75.144.0/20 maxlen: 32
                          172.82.128.0/18 maxlen: 32
                          199.101.96.0/21 maxlen: 32
                          199.233.232.0/21 maxlen: 32
                          216.115.184.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:60:63:3b:6c:b9:a6:98:0e:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=476c7647-20f2-4f2b-b702-8bb4d4e2ab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:ba:3a:b5:5b:a5:9f:35:ca:fd:f2:e1:2c:
                    5c:d9:c2:7e:8d:b6:14:1e:32:71:34:99:62:21:14:
                    df:a1:96:aa:d8:f6:57:53:8b:c5:16:39:9a:c5:cd:
                    a4:e6:f0:37:65:94:52:5b:3a:04:f3:b9:ee:a0:97:
                    91:76:93:b5:23:17:c6:3e:d3:a6:13:a2:0c:42:fe:
                    08:cc:49:38:c6:1d:9d:13:05:3c:12:16:df:47:bb:
                    f8:92:44:8e:41:b5:ed:1f:c7:77:7e:d4:e2:4b:88:
                    1e:b6:52:1e:cd:31:c7:3b:5b:88:54:6e:f1:5b:dd:
                    78:e5:b2:2a:e6:11:75:7d:36:3a:bc:5b:a0:42:36:
                    40:f0:fb:66:d7:fb:70:3a:9f:fe:56:d3:70:96:76:
                    e2:3e:d2:37:fc:71:54:11:df:5c:4f:b3:07:30:1d:
                    85:e2:07:6e:9b:d9:16:81:c7:51:77:dd:b9:cd:3d:
                    97:90:37:7d:3e:50:ee:d2:99:5a:2d:c9:73:4d:6f:
                    c5:ef:da:2e:78:59:ad:22:9d:48:7a:2d:8e:04:a4:
                    63:42:9c:5a:a6:32:6f:1f:ad:71:b1:91:df:8e:8c:
                    86:c4:34:d1:f0:3a:ca:1b:a5:a9:14:7a:b2:fa:13:
                    54:3d:5b:e3:46:92:39:b2:ac:f8:3a:55:e7:9b:65:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3E:DB:5F:16:19:FE:62:9A:2D:95:27:8D:D6:2D:7A:B3:6D:AC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.80.0/21
                  45.43.192.0/19
                  64.187.224.0/20
                  104.153.80.0/22
                  104.166.64.0/19
                  104.247.192.0/19
                  107.161.112.0/20
                  137.83.79.0/24
                  144.208.91.0/24
                  160.202.64.0/18
                  162.210.36.0/22
                  162.217.172.0/22
                  162.219.24.0/21
                  162.223.28.0/22
                  162.244.132.0/22
                  162.248.208.0/21
                  170.75.144.0/20
                  172.82.128.0/18
                  199.101.96.0/21
                  199.233.232.0/21
                  216.115.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:cf:92:34:3c:3e:bd:30:69:44:6a:2c:01:55:f2:9f:2b:
         75:35:d4:c1:c7:c7:48:75:a3:1e:1d:4a:9a:56:b1:6e:74:dd:
         47:d8:13:62:2e:ea:72:0a:35:80:1b:d6:54:f3:dd:fa:d5:31:
         8d:2b:9c:2a:ec:e3:55:e5:c6:1c:67:98:80:3f:3c:a0:ad:0c:
         8b:94:38:63:dd:9d:cd:09:80:75:c7:8b:3a:f6:43:c1:3a:bd:
         80:19:84:a7:58:78:4b:9a:1b:90:23:08:db:29:69:26:c8:08:
         ff:2d:7b:8c:08:e5:38:36:77:dd:f4:d6:2b:87:47:b9:89:52:
         c7:1a:5e:c0:8a:ad:b4:a4:48:8f:93:66:02:76:18:13:b8:69:
         93:99:5f:11:cc:9f:68:21:7e:f4:94:ae:56:7d:fd:01:b0:09:
         e0:7f:c4:66:c6:a7:10:cf:11:60:d5:cf:5a:54:5b:62:d1:c1:
         1f:04:9b:bb:5c:6d:d6:a7:4e:92:28:4c:43:51:a5:4f:7b:6d:
         d5:b8:d3:d3:b3:4f:c0:ca:85:45:e7:ea:e2:bb:66:00:c2:e9:
         22:66:86:1e:02:8a:a2:9d:1e:40:c2:b6:69:b9:e2:0e:ea:be:
         07:d7:b2:ad:bf:cb:26:05:00:87:9d:97:56:77:d5:3c:42:3b:
         36:f3:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:50 2024 by rpki-client on console-fra.rpki-client.org