Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa
File:                     a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa (raw, json)
Hash identifier:          0dg6/wmHHTCzE3jaFp/ZwCjvMntGlMsOw7sP3LeiYyQ=
Subject key identifier:   44:EA:F3:69:62:75:34:44:CB:AD:B5:88:67:21:D9:29:47:12:7D:80
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285847DF2F4B974CBEA7CA8DF30840
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20249
IP address blocks:        169.196.72.0/23 maxlen: 23
                          169.196.72.0/24 maxlen: 24
                          169.196.73.0/24 maxlen: 24
                          169.196.76.0/22 maxlen: 22
                          169.196.76.0/24 maxlen: 24
                          169.196.77.0/24 maxlen: 24
                          169.196.78.0/24 maxlen: 24
                          169.196.79.0/24 maxlen: 24
                          169.196.116.0/24 maxlen: 24
                          169.196.156.0/24 maxlen: 24
                          169.196.198.0/23 maxlen: 23
                          169.196.198.0/24 maxlen: 24
                          169.196.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:4b:97:4c:be:a7:ca:8d:f3:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=c33272f1-2f71-4d59-9bbd-d70838c4878d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d5:43:71:49:7e:62:38:14:5d:4c:68:f6:c2:
                    61:4a:be:d0:4a:5a:39:88:fc:db:54:dc:9b:2d:4e:
                    a4:40:18:0c:91:d5:0a:6e:c3:10:b0:fd:f1:20:ea:
                    f1:46:df:b2:e0:43:16:75:94:83:36:54:0a:52:c7:
                    01:f2:70:91:ce:56:b2:59:9f:d9:b6:8f:68:35:de:
                    6d:a4:37:f1:28:95:d9:a3:bd:f7:cf:6c:74:7a:8e:
                    5e:6c:9a:9a:c5:d1:f6:20:02:83:d1:98:81:80:3d:
                    6d:68:45:2a:cc:d6:57:1c:57:15:55:52:c4:56:cb:
                    b6:a4:86:ee:b2:03:a5:6f:2e:03:63:51:0b:e3:cb:
                    2e:13:54:c6:01:ad:80:1d:99:e9:19:c1:6d:dd:f1:
                    54:b2:81:d6:dd:50:af:c3:45:84:6e:26:9d:28:74:
                    46:da:08:95:31:28:dd:5e:24:c9:d4:53:df:93:aa:
                    04:09:21:50:ad:47:b2:b1:35:ba:d5:a2:03:2e:c3:
                    38:a0:94:fc:51:01:74:a1:b3:bc:b2:f3:f0:07:71:
                    17:68:6b:87:d2:bc:58:8b:f4:48:36:d6:5b:79:8b:
                    ed:cd:89:49:e8:a7:f5:c4:3a:86:ca:0d:d9:b4:89:
                    fb:f0:38:49:49:5e:2d:a4:fe:bc:82:44:cc:c1:03:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:F3:69:62:75:34:44:CB:AD:B5:88:67:21:D9:29:47:12:7D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.72.0/23
                  169.196.76.0/22
                  169.196.116.0/24
                  169.196.156.0/24
                  169.196.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:56:de:09:24:0e:e4:63:bb:e9:4d:59:5a:df:ac:5b:76:
         1b:18:08:00:0e:ef:5b:69:15:aa:28:90:7f:2d:3b:6b:a6:14:
         20:b1:e2:b4:c5:93:3b:fc:9e:2d:51:b3:f8:27:d0:6d:57:f1:
         f4:be:d7:a6:63:35:d1:65:00:cf:e1:85:93:ea:48:ed:b7:61:
         05:e9:4c:fc:9c:03:7d:2f:f1:2e:53:9a:be:17:9f:1b:c6:8e:
         6b:1a:02:01:cb:76:5b:ba:d9:2e:fd:13:3a:9e:46:8e:76:de:
         e9:b5:82:27:15:e0:61:d9:43:53:8a:d4:59:2f:c9:34:1c:47:
         ab:45:91:f8:35:38:5f:f3:84:5c:e6:a2:2d:4d:ba:80:c1:f5:
         e0:97:15:c0:e7:1d:dc:cf:3c:ab:88:45:19:d4:d2:61:48:7e:
         98:ba:f2:3a:2a:d0:cd:20:bb:b0:df:14:89:5a:1f:a8:f2:cc:
         45:96:88:15:71:a2:7e:85:f6:3e:a2:19:2f:d4:1c:f4:36:01:
         5a:95:6e:79:ec:19:45:2c:35:e2:b6:ca:33:01:08:db:2b:d4:
         22:04:11:fc:6d:3f:1f:f1:4c:3a:95:80:00:a6:52:a9:be:ae:
         3d:06:fe:fc:a2:c9:44:2d:dd:8d:82:2e:e5:4a:1e:08:52:4d:
         45:4c:b8:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:15 2024 by rpki-client on console-ams.rpki-client.org