Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/61870f32-e261-3f4a-8f98-a2aa34b48256.roa
File:                     61870f32-e261-3f4a-8f98-a2aa34b48256.roa (raw, json)
Hash identifier:          uiwMpJwieeyu4BDBppq9HAKeJIqkSWhJRFx4rCZ1ipk=
Subject key identifier:   FA:BE:EE:7A:6B:17:D5:9B:D5:B3:3B:4E:53:44:9B:13:37:02:BE:E2
Certificate issuer:       /CN=383e9a28-cf2d-4545-8662-6ef42ad8c1c7
Certificate serial:       010D0C9F432858474F4B6A2E966FCF2006897500
Authority key identifier: CC:FC:7C:A1:AD:86:36:4E:D3:9C:48:D4:F0:29:C5:FC:C5:6C:97:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/61870f32-e261-3f4a-8f98-a2aa34b48256.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     393240
IP address blocks:        130.51.176.0/22 maxlen: 22
                          162.245.172.0/22 maxlen: 22
                          209.163.110.0/23 maxlen: 23
                          2604:8a40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:6a:2e:96:6f:cf:20:06:89:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383e9a28-cf2d-4545-8662-6ef42ad8c1c7
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=38c954af-f6eb-487c-b6e7-34a0d3b22afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:cc:96:cc:0c:49:31:92:41:5c:88:59:7e:
                    1a:fa:65:6d:4a:99:da:35:e8:79:a3:6b:2d:eb:a5:
                    2d:88:ec:f0:50:f9:e4:94:af:e0:98:a3:42:72:19:
                    28:12:d8:cb:19:fe:9f:b2:bd:c7:74:18:f4:62:cf:
                    38:95:58:21:1c:97:54:56:f0:cd:dd:9c:6b:c5:12:
                    af:59:65:02:db:9f:ba:da:d5:e0:6f:ba:99:44:8c:
                    6d:08:5d:4f:9a:d7:99:db:87:c1:f2:8b:0a:9f:56:
                    64:87:d7:0e:51:53:12:b5:6b:a1:35:ea:17:c2:36:
                    76:85:f7:34:29:07:ed:2c:36:f0:f1:4a:89:dd:b0:
                    1f:a9:a0:f9:95:49:1a:a7:d1:cb:98:80:5e:61:b2:
                    cc:65:c9:c4:9d:d2:6b:e2:83:e6:a1:11:6b:12:9f:
                    f1:92:eb:e4:d4:16:86:45:a0:30:52:25:ca:5a:ed:
                    28:51:76:cc:29:ad:49:cb:fd:7f:a5:d8:fc:fa:40:
                    77:b9:0f:52:d6:72:f2:17:72:35:ea:44:07:68:a1:
                    85:14:71:aa:5b:ed:84:1d:e2:b1:91:68:04:d6:ca:
                    de:68:32:b1:89:37:12:0b:01:b2:da:12:71:0d:df:
                    fc:a5:24:b3:f4:3e:34:d7:5e:46:6f:6b:bd:dd:53:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:EE:7A:6B:17:D5:9B:D5:B3:3B:4E:53:44:9B:13:37:02:BE:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/61870f32-e261-3f4a-8f98-a2aa34b48256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:FC:7C:A1:AD:86:36:4E:D3:9C:48:D4:F0:29:C5:FC:C5:6C:97:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.176.0/22
                  162.245.172.0/22
                  209.163.110.0/23
                IPv6:
                  2604:8a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:d3:04:41:79:4d:d8:8a:26:50:15:82:ff:7d:56:14:47:
         e4:c9:a9:45:92:06:03:f5:5e:ae:8f:dc:d8:4f:af:dd:02:26:
         9f:8b:08:72:86:9c:2d:51:67:0c:8b:f3:c3:23:aa:04:51:af:
         78:3d:d5:fc:f7:04:09:7e:43:90:0e:0c:e1:ec:93:99:b5:c7:
         ac:75:fa:fc:b8:4f:c3:b6:d5:85:3e:98:59:e4:bf:cb:e6:a0:
         7e:8d:84:7e:10:81:b1:73:0a:76:3a:af:47:f0:0e:b7:b7:2b:
         1f:76:f7:58:c4:3d:c4:f9:26:42:e5:ab:5a:3d:a4:32:09:dd:
         13:60:9d:7a:85:53:f5:18:26:f3:6d:d2:b7:0a:41:af:54:82:
         b2:e7:e6:4c:a8:40:6e:87:5a:28:72:c1:f2:be:75:4e:4d:fc:
         20:e5:56:c7:37:61:68:2a:37:65:9e:f8:9b:c0:ff:d1:af:e9:
         6e:45:53:8f:53:17:34:02:a0:4f:84:98:72:31:ec:24:31:d5:
         37:ef:f8:fd:04:22:db:2b:70:33:5a:53:59:45:03:4d:86:ba:
         3d:88:92:44:8f:5c:6d:6f:47:86:6b:c7:d1:70:21:1a:e2:aa:
         94:9a:ff:1f:e1:0c:50:54:10:a1:e3:16:95:74:77:d3:44:d6:
         cb:36:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org