Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
File:                     ec532543-9dd6-3bcf-bdea-82dd95098083.roa (raw, json)
Hash identifier:          oIBwsxKGKVKcnE3EEW3mNj38EhgpUHg6K72Crf9qx3U=
Subject key identifier:   12:B1:62:02:B1:AF:C1:A0:5E:B4:D5:76:F9:15:49:F8:5F:28:87:C6
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F432858473A5B7CAFA34F5B2CA9F9E680
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     46375
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7c:af:a3:4f:5b:2c:a9:f9:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=909e8342-ef10-48bd-bedf-b03059392a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:26:97:e3:53:58:7a:cb:36:23:55:f0:77:c2:
                    49:38:59:1d:62:cb:97:97:cf:97:25:eb:d1:e0:7a:
                    a6:b7:e1:de:c2:d9:15:e9:65:20:35:f1:8d:2f:10:
                    52:1b:91:58:3f:b1:eb:a9:ce:a1:ac:2e:3f:51:4f:
                    b3:c8:20:b4:cb:d9:ec:e6:65:9b:67:9d:49:5b:dd:
                    a7:a6:33:bd:64:91:82:05:dc:4a:06:b4:1a:80:16:
                    7f:1f:01:90:f8:7c:74:0e:60:52:fb:fc:c8:0d:29:
                    f1:b7:81:80:d9:fe:31:26:aa:4f:11:ea:4b:65:f4:
                    92:a9:97:e5:0d:92:92:a5:cf:80:6c:bb:0d:da:1a:
                    f8:b3:75:56:2c:a0:78:ab:28:7e:1d:bc:b0:b3:18:
                    81:46:80:19:f1:56:d5:2a:ad:04:21:84:35:5e:fb:
                    e4:a8:e7:80:35:4b:28:a5:ae:37:35:1c:7b:f9:5f:
                    7c:1a:54:43:d3:d3:c0:5c:be:aa:49:09:2c:dc:d9:
                    fa:19:23:89:84:49:6f:57:aa:34:07:83:b9:f0:d7:
                    65:51:f4:a7:51:4e:c7:0d:b9:14:ba:17:78:c8:ac:
                    1d:4a:75:94:d3:0b:cb:c7:60:9a:19:fe:aa:bf:bc:
                    49:65:29:3a:73:ce:a8:e1:f2:f4:0e:e7:e0:5f:4c:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B1:62:02:B1:AF:C1:A0:5E:B4:D5:76:F9:15:49:F8:5F:28:87:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:39:26:9b:9c:a3:58:e3:79:f3:1f:db:42:49:87:85:05:
         6d:fb:7c:9e:fd:26:8b:44:72:31:2d:b9:74:e6:5f:30:46:78:
         a2:ce:bb:13:8a:cf:f1:3f:1e:48:b9:e3:27:c1:cf:b2:62:df:
         ec:1b:1c:bd:ec:e2:0c:26:25:03:49:1d:e5:1c:ec:d1:17:04:
         dd:d2:1f:61:b7:45:ae:1f:f5:b8:63:a6:97:37:c0:3b:cb:2f:
         3a:25:7b:e2:9e:35:61:53:14:03:74:98:cb:b8:7d:63:ba:5a:
         f4:b8:d6:c8:4b:a6:73:5b:a6:7d:e4:c8:a4:38:17:72:cb:f2:
         d0:54:f9:5e:4b:e2:ae:22:9d:36:df:93:43:35:d3:6c:17:18:
         b7:61:67:71:23:20:18:77:3a:9b:06:3d:d2:d1:a6:ae:ef:dd:
         c9:91:38:81:23:1d:d8:2a:b8:8c:21:c2:8b:fe:eb:26:45:21:
         07:74:31:af:c3:ca:d6:9f:60:9a:53:46:f7:f7:e4:25:12:eb:
         9e:f6:42:13:a9:fa:2e:c4:7e:96:d2:9f:77:63:3b:d2:05:09:
         13:e7:5c:ba:ef:a3:57:c0:e1:b5:c8:31:4d:6d:de:4e:69:cb:
         c1:2e:2e:1c:53:8f:d2:77:be:4e:c1:db:3e:3a:88:e1:80:68:
         37:cc:1f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:12 2024 by rpki-client on console-ams.rpki-client.org