Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa
File:                     be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa (raw, json)
Hash identifier:          thEDNVnMwfgH0No6hoIBuw7D0Sq5qGX9GJl3NPSOZTs=
Subject key identifier:   AE:FC:5A:D0:AE:36:C1:38:0B:92:73:D4:F3:01:F5:01:71:B9:E1:7A
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F432858475910C8E93250C16FD9A46D40
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     7018
IP address blocks:        216.150.72.0/24 maxlen: 24
                          216.150.74.0/24 maxlen: 24
                          216.150.75.0/24 maxlen: 24
                          216.150.77.0/24 maxlen: 24
                          216.150.78.0/24 maxlen: 24
                          216.150.79.0/24 maxlen: 24
                          216.150.80.0/24 maxlen: 24
                          216.150.81.0/24 maxlen: 24
                          216.150.82.0/24 maxlen: 24
                          216.150.83.0/24 maxlen: 24
                          216.150.84.0/24 maxlen: 24
                          216.150.85.0/24 maxlen: 24
                          216.150.86.0/24 maxlen: 24
                          216.150.87.0/24 maxlen: 24
                          216.150.88.0/24 maxlen: 24
                          216.150.89.0/24 maxlen: 24
                          216.150.90.0/24 maxlen: 24
                          216.150.91.0/24 maxlen: 24
                          216.150.92.0/24 maxlen: 24
                          216.150.93.0/24 maxlen: 24
                          216.150.94.0/24 maxlen: 24
                          216.150.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c8:e9:32:50:c1:6f:d9:a4:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=fbb43655-7a44-46bb-8677-81c7d985de32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:ed:59:7e:17:af:3d:40:b3:2b:27:72:43:
                    a0:69:b2:6d:a9:a0:4b:f4:71:80:7f:62:a8:dc:da:
                    74:c4:a9:be:e7:20:89:1f:dd:a2:a9:b9:5c:11:43:
                    b3:28:94:8d:35:74:c6:74:dc:3c:ae:53:b5:b3:65:
                    37:e5:79:8d:53:85:cf:56:df:58:d2:c2:53:db:a0:
                    04:6f:02:da:e3:52:a9:74:15:3f:dc:fd:38:49:69:
                    dc:32:79:6e:a3:4f:2f:21:53:63:b6:d5:b3:29:89:
                    99:ba:2a:ac:3e:47:e1:4b:52:65:5b:43:ac:71:8c:
                    09:f2:d9:b5:56:e1:cc:cb:4c:5c:bd:bd:11:86:d5:
                    08:b5:c7:93:2d:ea:8a:ea:ae:ff:ce:a3:17:ff:ef:
                    c3:c7:72:62:0a:21:9a:e8:4a:94:18:51:bb:a4:c4:
                    65:df:db:d0:5a:b4:b4:c2:f0:c3:d7:d0:54:4c:21:
                    d2:cb:a1:1b:c4:f4:7c:8d:c8:f5:f3:fa:25:cb:c4:
                    b5:85:8f:1a:58:f8:f1:28:a1:38:96:87:8f:ca:f7:
                    e4:c7:c2:6c:05:84:09:63:f2:18:77:18:9a:5b:5e:
                    8b:a9:7e:d0:25:06:7c:36:9e:2a:9b:e9:31:a8:11:
                    b7:ce:1c:38:3a:86:c8:10:86:fd:5f:e2:5c:a2:e5:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:5A:D0:AE:36:C1:38:0B:92:73:D4:F3:01:F5:01:71:B9:E1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/be870cf7-5d45-3116-afeb-edc5f5b3ae8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.72.0/24
                  216.150.74.0/23
                  216.150.77.0-216.150.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:aa:9d:47:b5:b6:bb:6c:00:df:63:ca:84:d0:48:f4:a4:c4:
         76:6b:76:4f:8c:e4:a2:32:a4:ba:29:62:73:ed:3b:74:cb:6b:
         0f:d6:6e:6c:fc:b9:42:3b:d9:df:64:8e:79:77:cf:47:81:1c:
         ee:56:e9:02:1a:2f:3e:f9:86:93:ee:96:13:5d:49:9f:1f:33:
         c8:db:d4:cb:f2:6b:dc:a2:12:30:d0:29:c4:cb:a1:e9:b8:a5:
         d5:0f:71:00:d3:d7:63:36:87:e1:8f:61:b2:31:82:6a:c6:d9:
         38:12:21:96:a3:a8:0d:c8:68:61:79:45:05:85:49:f1:ec:4d:
         e7:04:d0:a2:f8:e4:01:5a:4b:1b:1b:f1:3c:e9:4c:11:78:dc:
         13:eb:2c:1f:2c:d4:31:83:f4:c5:db:42:de:94:52:80:c2:cd:
         19:ec:75:ef:04:81:d8:c5:e8:d3:2c:02:d6:df:a6:74:c2:e8:
         8e:1f:cc:92:56:1f:c7:6a:93:e8:1a:2f:db:bd:2e:c2:5c:97:
         c5:16:85:26:a2:e4:5a:f1:f6:56:b7:04:f8:35:cd:47:1b:e0:
         bb:4e:33:3e:27:42:b5:c0:52:51:6c:db:f4:64:2c:90:f5:46:
         fa:53:1b:a6:14:ab:9d:de:15:2d:14:28:91:be:6b:06:c7:82:
         f4:30:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:24 2024 by rpki-client on console-ams.rpki-client.org