Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa
File:                     40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa (raw, json)
Hash identifier:          A1qkPe+YbFZuQHBOHjDRRPubGZQTcSyv42KnsdE2kIg=
Subject key identifier:   B2:99:D7:02:19:B9:97:49:06:50:99:F8:7D:C6:32:53:CF:EC:00:CB
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F43285847A5D69B6D799C78EFBBE80480
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     45102
IP address blocks:        47.52.0.0/16 maxlen: 24
                          47.56.0.0/16 maxlen: 24
                          47.57.0.0/16 maxlen: 24
                          47.74.0.0/16 maxlen: 24
                          47.75.0.0/16 maxlen: 24
                          47.76.0.0/16 maxlen: 24
                          47.77.0.0/16 maxlen: 24
                          47.78.0.0/16 maxlen: 24
                          47.79.0.0/16 maxlen: 24
                          47.80.0.0/16 maxlen: 24
                          47.81.0.0/16 maxlen: 24
                          47.82.0.0/16 maxlen: 24
                          47.83.0.0/16 maxlen: 24
                          47.84.0.0/16 maxlen: 24
                          47.85.0.0/16 maxlen: 24
                          47.86.0.0/16 maxlen: 24
                          47.87.0.0/16 maxlen: 24
                          47.88.0.0/16 maxlen: 24
                          47.89.0.0/16 maxlen: 24
                          47.90.0.0/16 maxlen: 24
                          47.91.0.0/16 maxlen: 24
                          47.235.0.0/16 maxlen: 24
                          47.236.0.0/16 maxlen: 24
                          47.237.0.0/16 maxlen: 24
                          47.238.0.0/16 maxlen: 24
                          47.239.0.0/16 maxlen: 24
                          47.240.0.0/16 maxlen: 24
                          47.241.0.0/16 maxlen: 24
                          47.242.0.0/16 maxlen: 24
                          47.243.0.0/16 maxlen: 24
                          47.244.0.0/16 maxlen: 24
                          47.245.0.0/16 maxlen: 24
                          47.246.0.0/16 maxlen: 24
                          47.250.0.0/16 maxlen: 24
                          47.251.0.0/16 maxlen: 24
                          47.252.0.0/16 maxlen: 24
                          47.253.0.0/16 maxlen: 24
                          47.254.0.0/16 maxlen: 24
                          72.254.0.0/16 maxlen: 24
                          139.95.0.0/16 maxlen: 24
                          147.139.0.0/16 maxlen: 24
                          155.102.0.0/16 maxlen: 24
                          163.181.0.0/16 maxlen: 24
                          198.11.128.0/18 maxlen: 24
                          205.204.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:9b:6d:79:9c:78:ef:bb:e8:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=e89cf763-7e8a-4ba9-8761-b32e68d38b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:e9:24:d1:b2:66:03:22:9c:02:3f:1f:19:
                    1f:56:b1:6a:90:f8:11:ea:6e:59:91:af:65:57:8f:
                    64:02:f9:47:c0:80:d1:8f:96:22:5d:ab:5d:44:e0:
                    3b:01:51:4f:97:3b:15:44:d6:02:ab:70:21:f8:6c:
                    96:28:ff:2a:13:e6:c7:73:be:c8:72:88:f0:d0:b5:
                    aa:31:93:70:ef:5d:9f:a3:f2:7b:9f:7e:33:53:27:
                    62:45:7a:92:50:80:83:43:68:1f:df:43:19:c1:e9:
                    95:6b:59:28:49:6b:99:21:8c:b0:82:19:5d:8d:a3:
                    b7:48:d1:0b:21:de:33:ff:52:37:56:22:ab:15:a4:
                    de:d3:c6:bb:b3:15:d0:dd:9d:af:4d:3a:9e:ea:4a:
                    dc:d9:d9:d5:d2:42:7a:c4:50:3a:35:dd:6a:56:0c:
                    ad:ce:b1:29:96:ff:61:0b:6e:b3:b0:79:51:cb:b6:
                    c1:2d:44:f1:09:65:6d:f8:b1:54:17:8a:75:4c:e3:
                    52:ea:e4:a3:35:2b:af:ac:2c:24:d3:f1:86:69:e8:
                    d5:93:bb:0b:18:3b:89:28:b4:db:ea:4c:b2:02:5e:
                    36:9c:62:5d:dc:1f:fd:15:91:b2:5b:2f:39:1f:09:
                    59:6b:9b:4d:1c:9d:99:64:d6:87:e5:dd:41:11:f6:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:D7:02:19:B9:97:49:06:50:99:F8:7D:C6:32:53:CF:EC:00:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.52.0.0/16
                  47.56.0.0/15
                  47.74.0.0-47.91.255.255
                  47.235.0.0-47.246.255.255
                  47.250.0.0-47.254.255.255
                  72.254.0.0/16
                  139.95.0.0/16
                  147.139.0.0/16
                  155.102.0.0/16
                  163.181.0.0/16
                  198.11.128.0/18
                  205.204.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:29:57:3d:5c:b3:bb:0b:6a:67:13:e8:45:6c:35:9c:41:
         7e:75:5e:8e:c0:0a:4c:d6:b2:8c:74:e2:5b:12:9a:49:51:34:
         5f:12:45:ee:15:fc:ab:61:57:cf:b0:33:92:e2:1d:bc:43:d3:
         4e:5a:e0:a2:41:14:04:4d:65:b5:f8:ec:36:4f:23:08:6f:70:
         de:68:5f:42:22:e3:2f:b1:7b:2b:0f:c6:66:a9:a4:85:6e:46:
         90:bd:00:da:2d:47:71:fb:46:bc:60:1b:ce:3d:68:82:c4:d5:
         01:48:2e:c4:f7:55:52:1b:aa:6c:6a:85:8c:bf:fd:32:31:c7:
         a2:08:6d:ce:a8:5b:1f:db:99:3e:ef:27:40:71:60:a3:ac:e3:
         9d:c5:46:30:8f:a7:f2:a2:8f:8f:7a:9e:96:d2:55:fa:46:1e:
         4e:9a:d6:8b:00:3f:a9:b2:b3:e8:64:83:b2:68:0f:33:07:d4:
         a4:f8:ec:e6:c1:44:6c:f8:1a:85:b8:e8:1d:78:c0:a2:1a:b4:
         cd:ce:32:66:ea:9a:d4:0c:77:a5:87:70:3d:57:fc:7a:12:f4:
         f2:11:53:9c:6a:c3:12:98:50:10:e5:08:2d:f1:6a:76:85:d2:
         e5:0d:9f:76:ad:ad:ed:3d:68:30:c2:db:8e:8d:8e:ca:e2:88:
         28:bb:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:11 2024 by rpki-client on console-ams.rpki-client.org