Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/52df7b1a-51be-36d9-b447-64893a51f4ac.roa
File:                     52df7b1a-51be-36d9-b447-64893a51f4ac.roa (raw, json)
Hash identifier:          8ymdJB/7ByUCrYd7hYWmk+McPK+JVxgGxKP7UIU2yXc=
Subject key identifier:   69:45:6B:FD:2B:5C:D7:29:8F:C6:E7:28:DA:B3:FF:8F:90:D2:74:F9
Certificate issuer:       /CN=9a5b5033-d8da-42ef-92ee-144938eb4535
Certificate serial:       010D0C9F43285847C1DF546A4433A003D0517EC0
Authority key identifier: 61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/52df7b1a-51be-36d9-b447-64893a51f4ac.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     30174
IP address blocks:        68.70.32.0/20 maxlen: 24
                          162.220.128.0/22 maxlen: 24
                          162.251.40.0/22 maxlen: 24
                          162.255.28.0/22 maxlen: 24
                          192.76.4.0/23 maxlen: 24
                          209.203.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:54:6a:44:33:a0:03:d0:51:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5b5033-d8da-42ef-92ee-144938eb4535
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=1b4da8f0-0d45-4ed7-b460-edd9266d484d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:e9:c3:3e:8b:57:e4:3e:92:26:21:8e:00:
                    f4:b1:83:25:aa:47:89:f0:f1:e1:64:88:83:50:4b:
                    c2:bc:28:92:23:5e:53:4f:81:1a:dc:41:8d:76:cf:
                    72:0e:e4:4f:bd:31:d9:36:5c:c2:10:19:28:0a:93:
                    76:69:bc:72:3c:e3:48:37:6e:00:65:de:60:07:22:
                    4d:ab:34:e2:bf:47:84:e1:3e:bd:5e:d5:fe:71:af:
                    a6:ad:25:4a:b1:c0:56:e3:80:be:f8:f2:33:e4:6a:
                    60:dc:48:e7:10:f2:c5:ae:2b:ae:c4:12:ef:36:dd:
                    33:2b:73:07:53:24:43:d4:54:52:92:79:eb:38:bb:
                    b8:66:7c:c6:67:bb:57:90:e8:9a:2a:2e:d2:07:22:
                    cc:e9:af:e3:4a:33:cf:27:99:d9:7f:ad:a4:75:0f:
                    ab:4c:dd:5b:c1:45:18:4d:3c:5b:42:6b:94:8a:a2:
                    35:2f:93:39:e0:32:ad:23:f5:69:a2:fe:72:37:d3:
                    4e:74:22:46:2e:d8:72:96:28:e2:15:f7:29:2d:31:
                    9b:5e:d8:9f:3b:be:67:80:40:45:ca:ef:10:46:5d:
                    e5:aa:a8:6a:cc:e7:f3:2e:7e:f9:9d:d2:b3:06:ae:
                    e8:80:40:2d:d4:a8:d1:13:7a:8d:05:36:70:2a:44:
                    44:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:45:6B:FD:2B:5C:D7:29:8F:C6:E7:28:DA:B3:FF:8F:90:D2:74:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/52df7b1a-51be-36d9-b447-64893a51f4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl

            X509v3 Authority Key Identifier:
                keyid:61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.32.0/20
                  162.220.128.0/22
                  162.251.40.0/22
                  162.255.28.0/22
                  192.76.4.0/23
                  209.203.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:b1:10:88:6f:6a:d2:a1:8c:85:7b:af:78:17:96:0c:3e:
         c4:f2:f6:71:0a:d0:f9:0f:81:4f:58:d2:fe:fa:bb:19:09:fb:
         aa:ec:cf:c5:b7:58:dc:e4:20:b8:fa:ac:5e:86:e0:ec:5c:39:
         33:38:2f:dc:4c:74:5a:12:06:da:23:d4:ea:cf:bf:1f:3b:13:
         88:d8:cd:e6:02:8b:44:33:40:37:f1:c5:aa:ce:c7:a0:36:b6:
         3a:00:a9:e9:f6:8a:5c:81:ca:2f:7e:15:6f:74:ba:cc:47:e4:
         a6:76:70:8c:14:3a:7a:29:9a:fa:2b:2c:d8:1b:a0:ad:86:7c:
         f1:cd:0b:4a:01:f1:dc:99:41:e3:37:02:22:bf:36:89:ce:6b:
         6b:cc:55:d9:10:7c:1a:3f:10:1c:30:08:d0:64:20:07:ba:60:
         60:88:e4:d0:4b:c9:c9:01:e2:9b:c0:e5:04:c1:80:d2:48:51:
         f4:65:ce:23:34:fd:57:9f:3e:2f:7d:96:3f:e9:83:d6:8f:cf:
         e8:27:41:ee:9b:3b:9c:4a:ff:e8:1a:24:cd:af:0c:32:8f:4d:
         8b:e6:c4:2f:f1:48:5c:28:e8:47:31:f2:78:d6:6a:1c:b7:05:
         03:93:71:90:0c:0e:22:77:9a:18:0a:11:dd:82:aa:6b:96:52:
         61:87:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:07 2024 by rpki-client on console-ams.rpki-client.org