Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa
File:                     58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa (raw, json)
Hash identifier:          rgwQm9Ff6Dx2EagiyRgF/ZA4L+XAANL9o+GjFAmuvOs=
Subject key identifier:   35:D7:54:58:45:63:80:65:6B:06:BC:E7:AB:1C:2D:30:2C:69:43:D3
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F43285847A5D6A6BA2431FEA7034E2500
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     134963
IP address blocks:        47.52.0.0/16 maxlen: 24
                          47.56.0.0/16 maxlen: 24
                          47.57.0.0/16 maxlen: 24
                          47.74.0.0/16 maxlen: 24
                          47.75.0.0/16 maxlen: 24
                          47.76.0.0/16 maxlen: 24
                          47.77.0.0/16 maxlen: 24
                          47.78.0.0/16 maxlen: 24
                          47.79.0.0/16 maxlen: 24
                          47.80.0.0/16 maxlen: 24
                          47.81.0.0/16 maxlen: 24
                          47.82.0.0/16 maxlen: 24
                          47.83.0.0/16 maxlen: 24
                          47.84.0.0/16 maxlen: 24
                          47.85.0.0/16 maxlen: 24
                          47.86.0.0/16 maxlen: 24
                          47.87.0.0/16 maxlen: 24
                          47.88.0.0/16 maxlen: 24
                          47.89.0.0/16 maxlen: 24
                          47.90.0.0/16 maxlen: 24
                          47.91.0.0/16 maxlen: 24
                          47.235.0.0/16 maxlen: 24
                          47.236.0.0/16 maxlen: 24
                          47.237.0.0/16 maxlen: 24
                          47.238.0.0/16 maxlen: 24
                          47.239.0.0/16 maxlen: 24
                          47.240.0.0/16 maxlen: 24
                          47.241.0.0/16 maxlen: 24
                          47.242.0.0/16 maxlen: 24
                          47.243.0.0/16 maxlen: 24
                          47.244.0.0/16 maxlen: 24
                          47.245.0.0/16 maxlen: 24
                          47.246.0.0/16 maxlen: 24
                          47.250.0.0/16 maxlen: 24
                          47.251.0.0/16 maxlen: 24
                          47.252.0.0/16 maxlen: 24
                          47.253.0.0/16 maxlen: 24
                          47.254.0.0/16 maxlen: 24
                          72.254.0.0/16 maxlen: 24
                          139.95.0.0/16 maxlen: 24
                          147.139.0.0/16 maxlen: 24
                          155.102.0.0/16 maxlen: 24
                          163.181.0.0/16 maxlen: 24
                          198.11.128.0/18 maxlen: 24
                          205.204.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a6:ba:24:31:fe:a7:03:4e:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=16395ed2-8692-4aa3-837d-901705cf94fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:9b:9e:7b:61:3b:fb:db:1f:f2:c1:30:9b:
                    29:43:29:d6:17:fb:94:40:7f:74:b9:b4:87:16:f8:
                    c1:f5:40:62:20:79:3a:36:dc:30:ff:e0:85:4f:3e:
                    0f:d3:d0:d7:58:3d:81:bf:64:9c:39:e4:21:d2:23:
                    fe:a7:b7:f7:79:a1:2f:9b:e2:4d:ec:8d:07:1f:92:
                    6a:95:a9:61:a4:34:59:7a:03:a5:28:37:c9:a9:db:
                    17:d8:28:55:a9:54:86:df:9e:0c:c9:25:21:83:4b:
                    db:40:e5:70:9f:b6:df:5c:98:5b:76:08:07:4b:ac:
                    19:73:33:60:5e:d9:ae:2f:36:ef:78:a7:b0:f0:de:
                    63:9e:9d:f8:cd:20:3a:8f:72:b1:a9:53:4d:2e:31:
                    fe:66:af:52:8d:14:f3:b3:81:78:ac:ba:25:f1:a8:
                    b2:5b:cb:7e:f0:ee:90:56:e0:09:36:53:9f:71:75:
                    8d:6d:57:e4:0a:88:52:91:1c:b2:1e:d9:4b:07:31:
                    fd:bf:55:a4:51:0c:8e:5c:df:fc:51:29:4a:ae:ea:
                    ec:ab:f0:b2:16:14:80:d4:a9:be:5d:dd:c3:10:cd:
                    80:f6:75:d1:0b:ae:2b:e7:c1:3b:f9:cd:47:d5:17:
                    86:cb:5b:d8:50:80:54:80:37:e0:63:d1:c3:f2:d7:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D7:54:58:45:63:80:65:6B:06:BC:E7:AB:1C:2D:30:2C:69:43:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.52.0.0/16
                  47.56.0.0/15
                  47.74.0.0-47.91.255.255
                  47.235.0.0-47.246.255.255
                  47.250.0.0-47.254.255.255
                  72.254.0.0/16
                  139.95.0.0/16
                  147.139.0.0/16
                  155.102.0.0/16
                  163.181.0.0/16
                  198.11.128.0/18
                  205.204.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:20:15:be:8a:be:70:bc:05:67:af:a3:53:fb:34:ef:f4:
         80:9b:23:c5:0d:5a:75:f0:6a:7b:6b:3f:2b:e2:19:3c:ff:6b:
         62:ba:7a:31:c4:55:b2:aa:3b:4a:6d:7e:81:bb:7e:8e:cd:fc:
         e4:bf:a8:4a:31:f0:7a:75:49:70:46:26:64:f0:ec:12:19:11:
         e6:8f:7a:b5:14:85:8b:10:ca:d2:97:67:86:04:be:19:63:6c:
         b3:c7:ff:3b:26:77:73:d2:3d:93:12:b6:e0:80:fa:bc:0c:16:
         3f:97:8d:2b:ee:25:d4:5a:f3:42:e9:8d:5d:7a:83:b9:4c:cb:
         bc:ec:ad:9a:42:86:74:b3:29:30:7b:c3:dd:90:e0:20:6f:46:
         d7:75:64:7b:d1:42:2d:96:51:2f:86:4c:90:c1:89:66:43:87:
         30:37:9f:07:71:5b:fd:c5:16:75:7e:f8:f8:25:8c:60:b1:ba:
         19:83:07:55:6c:cb:c1:3c:e5:56:62:24:09:75:3d:e9:d7:49:
         09:6e:f3:bd:8a:ae:9c:3b:5c:67:93:47:41:df:7c:b4:76:36:
         6f:aa:17:65:2c:07:79:be:8b:01:6a:aa:7e:2c:24:ef:21:86:
         03:3d:a9:67:72:15:83:6c:11:76:08:49:a7:a6:20:00:06:92:
         42:19:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:11 2024 by rpki-client on console-ams.rpki-client.org