Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
File:                     563e4146-93d5-346d-b331-7b58a7727771.roa (raw, json)
Hash identifier:          ftI/T25I/+jYNG7q8X8HvzsHVo9FahuIuWaS7+eJCx0=
Subject key identifier:   4F:41:0B:3D:4A:19:23:06:1A:42:EC:A0:21:2B:DE:CB:0F:0E:13:A7
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F432858473095F42E6CE4BB6852184780
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     393238
IP address blocks:        162.253.44.0/22 maxlen: 24
                          192.154.14.0/23 maxlen: 24
                          192.199.180.0/22 maxlen: 24
                          192.236.0.0/24 maxlen: 24
                          199.10.4.0/22 maxlen: 24
                          199.188.64.0/22 maxlen: 24
                          199.189.228.0/22 maxlen: 24
                          205.143.47.0/24 maxlen: 24
                          207.191.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f4:2e:6c:e4:bb:68:52:18:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=aa6eb3f0-15dd-4399-b89b-3f5d4c33405c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:57:1f:e8:ab:8f:e5:d9:09:82:80:cf:b5:
                    4b:b7:14:d8:3f:ed:b3:04:5a:f9:54:ca:6c:b8:09:
                    25:37:f3:f3:aa:a8:6b:11:3b:77:b4:29:c7:73:92:
                    56:d7:34:bf:ab:18:f4:19:8a:97:9c:b7:7f:2c:ad:
                    fb:db:d4:24:90:80:32:96:49:eb:3f:93:56:85:27:
                    36:d1:90:ce:7f:e2:7e:55:7d:3b:f2:df:35:14:d5:
                    94:7f:e1:5f:86:17:d1:b6:68:78:a2:40:2e:69:de:
                    57:a8:2c:9b:9b:3a:25:76:71:bc:67:1b:fd:c0:7d:
                    7f:ea:1b:4d:74:36:8e:c9:2c:03:59:1b:5a:5d:1d:
                    e2:d5:a9:d2:d0:c6:a4:c7:2f:fc:b1:65:a9:6f:ee:
                    71:55:a7:dc:d7:c6:c6:cf:a7:a6:6e:ac:b6:25:0d:
                    be:92:5b:c8:3c:dc:2d:16:cc:30:9a:d1:78:cf:35:
                    65:20:58:1c:84:e3:18:16:10:4e:c8:bb:94:48:c8:
                    15:4b:48:fd:7f:a4:64:6e:b6:a4:be:38:11:03:62:
                    9e:46:2a:ce:fd:ee:4c:f1:50:7d:0a:30:0d:e8:50:
                    af:c0:4d:30:8e:a4:32:9a:1f:37:a1:67:d6:dc:fa:
                    ab:f0:11:02:f5:b4:12:a5:40:a2:f7:28:80:6a:21:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:0B:3D:4A:19:23:06:1A:42:EC:A0:21:2B:DE:CB:0F:0E:13:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.44.0/22
                  192.154.14.0/23
                  192.199.180.0/22
                  192.236.0.0/24
                  199.10.4.0/22
                  199.188.64.0/22
                  199.189.228.0/22
                  205.143.47.0/24
                  207.191.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:18:53:6c:f8:02:55:ee:5c:7d:1c:da:88:9d:c0:6c:33:3d:
         e2:51:dd:78:88:25:a5:9a:ae:10:f4:43:f1:ca:aa:9b:40:d2:
         6d:ba:c7:75:96:17:5f:64:7a:24:6f:f9:6f:5f:71:53:27:c4:
         81:8a:a5:bf:a3:fc:84:e4:fd:cd:e9:16:28:9a:94:a7:f0:ff:
         4b:37:a0:03:45:0c:d3:26:92:2b:d0:91:bc:e9:30:3b:02:44:
         37:82:93:1d:a2:dc:52:91:ba:6b:2b:6a:c3:45:7c:54:a1:3d:
         be:92:ea:dc:1f:b5:fb:cc:65:91:01:39:fd:1a:8a:54:c2:66:
         c3:44:5e:74:2d:28:d6:d7:a4:4b:0a:db:72:75:e1:51:c1:29:
         1d:f1:5d:f4:ee:37:6a:44:31:cc:a7:cb:b9:62:53:ce:62:0a:
         09:62:8a:36:8e:39:ee:fb:7a:5a:26:b1:c8:42:f0:d5:c5:be:
         bd:75:1c:f7:a4:e6:2c:8d:24:fb:62:cf:96:9d:ba:64:01:7a:
         65:bd:97:ef:c8:bb:d3:78:ef:16:c0:a1:53:97:2b:3d:e9:e0:
         bf:5d:be:8d:3f:b6:30:ae:24:d2:c0:99:9e:36:e2:8a:5c:01:
         a5:34:06:16:88:18:2d:15:a6:47:03:2f:ee:f1:4e:48:b9:d7:
         09:98:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:20 2024 by rpki-client on console-ams.rpki-client.org