Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/7ff3e562-0211-3d71-9baf-accf86d08d95.roa
File:                     7ff3e562-0211-3d71-9baf-accf86d08d95.roa (raw, json)
Hash identifier:          U4NfSBI8dECbBCb1Oj3ygKpHEomUUObXIrUOro3NOE8=
Subject key identifier:   9B:E0:AA:F1:58:00:E8:67:7C:C3:BD:08:4F:08:2B:AD:69:8D:13:0C
Certificate issuer:       /CN=736df059-86cb-4a7f-b49e-44e0134dfbca
Certificate serial:       010D0C9F432858477BF65FDD9B0F7127EC3285C0
Authority key identifier: 59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/7ff3e562-0211-3d71-9baf-accf86d08d95.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     23260
IP address blocks:        72.14.112.0/22 maxlen: 22
                          161.199.184.0/22 maxlen: 22
                          162.216.216.0/22 maxlen: 22
                          192.80.176.0/21 maxlen: 21
                          208.118.144.0/20 maxlen: 20
                          216.173.144.0/20 maxlen: 20
                          216.247.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:5f:dd:9b:0f:71:27:ec:32:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736df059-86cb-4a7f-b49e-44e0134dfbca
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=ae28fce1-eced-4435-b0f0-da263faa1682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:48:7a:e2:67:50:fc:62:0a:4d:f2:37:36:
                    db:17:a6:d7:65:94:b1:d0:32:07:9f:d6:7e:09:9a:
                    65:ee:d8:91:3b:ce:83:a3:5c:cc:56:a3:6d:7b:62:
                    f1:19:21:af:21:b5:42:53:61:9f:5c:aa:99:93:83:
                    31:72:52:58:47:20:c0:1f:70:d2:6d:dc:8c:d7:a3:
                    99:77:2c:f7:da:fc:33:ac:5b:3c:32:7f:d3:d3:dd:
                    e3:bc:a1:7d:ea:11:0b:14:bc:f7:32:1c:d0:6a:5c:
                    61:45:0b:d3:7a:de:11:84:a8:30:d1:fe:e3:fb:69:
                    cd:e2:c4:ca:da:ef:ed:cc:bc:05:5c:35:30:5d:3f:
                    0a:1a:b5:54:45:71:40:49:50:02:53:ec:67:bd:cd:
                    19:43:47:37:c9:5c:5b:c1:c0:f5:4f:98:78:24:07:
                    60:82:fc:8c:8f:0e:62:49:0e:7f:2f:9d:d0:91:1d:
                    f2:a5:c6:2a:18:b9:b3:7d:a1:ad:e2:41:36:2e:ba:
                    4d:88:2e:d4:94:3a:fd:26:39:3c:67:fc:80:d3:da:
                    69:67:37:e7:f0:6d:d9:4e:d5:1b:8a:3a:a9:5d:38:
                    f7:65:b3:66:36:34:e5:7d:2b:e2:78:9d:27:a4:52:
                    28:52:7a:a9:cd:fc:92:78:a7:92:51:5b:c3:ea:2b:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E0:AA:F1:58:00:E8:67:7C:C3:BD:08:4F:08:2B:AD:69:8D:13:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/7ff3e562-0211-3d71-9baf-accf86d08d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl

            X509v3 Authority Key Identifier:
                keyid:59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.112.0/22
                  161.199.184.0/22
                  162.216.216.0/22
                  192.80.176.0/21
                  208.118.144.0/20
                  216.173.144.0/20
                  216.247.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:6f:74:be:67:eb:5b:be:2a:31:81:8a:99:7c:1c:c4:d9:
         e2:d4:97:bb:6d:b6:88:5c:c3:e2:e0:fa:63:61:e7:38:1e:56:
         bc:4c:fe:e5:bb:4f:c0:33:ab:72:eb:7d:07:d9:49:16:d6:aa:
         b6:7b:9b:a7:04:82:03:de:6f:28:33:51:bb:7a:33:f3:53:f0:
         b3:c8:3a:46:aa:03:8d:e7:fb:f3:54:6d:46:fa:5b:54:95:3c:
         6d:3f:8f:8e:a1:d3:ec:7b:61:a6:05:cc:57:ad:d2:ec:ed:cf:
         72:f3:6c:42:ea:b9:c3:a5:4c:b1:1e:8c:5e:26:94:70:f8:33:
         e5:52:09:20:ac:d4:5e:b2:09:10:f1:97:3a:03:9a:e1:07:6a:
         47:5c:4b:47:be:35:93:90:c7:81:d4:14:26:1e:31:96:0a:69:
         fa:71:7b:03:8c:67:7f:db:62:8c:56:e5:00:45:8e:6a:0d:69:
         3e:a0:15:b2:17:b8:18:5c:a2:9f:03:c0:e5:c8:19:1a:31:13:
         8e:12:d2:ca:d8:ea:43:82:91:51:ea:38:f9:d6:91:4c:f6:31:
         e1:08:f5:52:8d:0d:ed:6c:b3:de:66:c9:78:ea:73:74:87:ea:
         7e:92:73:0c:4a:b6:41:c2:47:d4:a2:2a:4f:4a:c3:84:24:48:
         b8:3c:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:53 2024 by rpki-client on console-fra.rpki-client.org