Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
File:                     b0347528-51f9-3df1-ad01-53232c57299c.roa (raw, json)
Hash identifier:          jmfMdHLEcZH/7zul48o5sI4UZiiGTGevHVoTl4Mc3gw=
Subject key identifier:   02:54:8F:F8:56:60:AA:89:B7:5C:D9:44:1F:9B:8C:CD:19:43:55:57
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584797E1329C37E7AD4A58F7C800
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     55064
IP address blocks:        74.123.28.0/22 maxlen: 24
                          162.210.128.0/22 maxlen: 24
                          2620:a0:4000::/44 maxlen: 48
                          2620:114:a000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:32:9c:37:e7:ad:4a:58:f7:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=6d4d0a3a-43de-45f0-9db2-a77f8c63071e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:c4:31:8a:45:36:90:65:a1:53:53:97:83:
                    8f:ee:7b:6d:19:d4:f6:71:24:67:df:a2:03:b3:28:
                    f9:b3:3a:dc:4b:1a:e1:59:e9:75:42:81:6b:8d:46:
                    92:cb:23:92:bb:be:08:07:dd:69:fb:95:9c:80:dd:
                    39:8d:2b:b6:71:d4:0f:f4:18:b0:08:6d:13:69:d8:
                    9d:9a:05:22:a6:cd:e4:a1:6b:5c:75:cb:7d:79:9f:
                    99:ce:3b:e6:44:2c:be:80:26:26:e6:35:5f:2a:5a:
                    25:dd:15:cd:66:d5:f5:cd:39:5b:82:7d:23:0a:51:
                    24:92:3a:7f:e5:cf:d3:04:68:b4:06:65:5c:05:38:
                    c3:9e:b4:52:e9:4f:5c:c3:03:ab:7c:4e:af:45:1a:
                    8a:4d:ab:f5:6e:03:62:f3:de:68:fa:6b:6e:f9:ed:
                    b3:f7:e4:a1:f3:cc:ae:29:45:2b:66:4a:26:ab:08:
                    c1:e8:42:7c:bf:e5:25:7f:4f:56:d5:da:08:b2:21:
                    c3:7a:c2:79:89:6f:70:ac:08:57:2d:48:ef:c7:ee:
                    c0:78:51:27:b5:90:be:90:80:2f:6a:ad:7a:5a:69:
                    2b:a0:ad:b3:fb:31:94:67:2f:d6:68:98:60:90:90:
                    b7:68:32:e6:4f:93:3a:9b:75:fc:ce:bc:b7:02:b9:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:54:8F:F8:56:60:AA:89:B7:5C:D9:44:1F:9B:8C:CD:19:43:55:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.28.0/22
                  162.210.128.0/22
                IPv6:
                  2620:a0:4000::/44
                  2620:114:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:3d:7f:df:de:0c:da:00:af:b2:01:fc:40:ca:74:49:2c:
         11:61:84:ce:fc:c6:ea:42:2f:eb:40:4b:d3:16:51:dd:bd:f0:
         98:68:a3:44:27:11:9b:6f:10:6c:7a:ba:2c:52:3f:6e:0a:a1:
         63:56:35:d6:06:9f:d0:be:db:be:0f:06:78:3f:d0:df:b0:a7:
         62:0d:d9:fd:a6:47:3e:01:91:99:35:54:5d:25:7a:77:1d:6d:
         b9:1a:f6:0f:bc:27:af:43:b8:66:21:2c:b9:e9:26:22:37:7b:
         26:b4:d7:a7:d9:86:ac:05:16:13:59:90:83:37:ea:7a:e1:d8:
         6d:33:8e:df:ab:a8:37:9b:85:35:13:22:15:ae:fc:47:26:76:
         5b:0e:f8:18:0f:11:de:c8:3e:b6:ad:b0:4c:8d:42:7f:05:c7:
         ef:be:6b:d0:b0:ae:52:72:36:26:12:8e:a1:0b:8a:03:24:f8:
         ca:37:10:01:c6:50:33:46:f0:6f:b7:90:ee:12:5b:5a:78:76:
         1d:23:44:1b:4c:eb:08:48:71:6e:53:86:4a:b3:d8:bf:01:b7:
         22:9f:93:8d:cb:67:93:e4:54:18:fe:d8:a2:df:c1:19:2f:d9:
         7b:d0:b4:5d:35:fd:be:de:be:3f:95:7e:e2:e1:9f:ab:7a:b0:
         74:ea:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:20 2024 by rpki-client on console-fra.rpki-client.org