Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
File:                     d63d2c69-1581-3042-9e40-e504ec9f86b2.roa (raw, json)
Hash identifier:          IkK/Ng+DawVnsqxkg0UvZmplejuYnCXoH+5m9BR2gYs=
Subject key identifier:   3A:41:D6:5A:65:17:55:07:D1:F0:71:57:95:5E:2B:4E:E9:AC:CC:CC
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F43285847362B500611E5650307C61848
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     15128
IP address blocks:        104.250.64.0/19 maxlen: 24
                          147.194.0.0/16 maxlen: 24
                          192.235.128.0/17 maxlen: 24
                          209.163.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:50:06:11:e5:65:03:07:c6:18:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=2c00ebdb-eac8-4889-b44d-06f894a3bdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:42:9d:b4:30:35:f1:71:44:77:56:2b:4d:
                    ae:c9:ad:f4:a4:b2:4f:05:49:9a:1c:bd:b6:34:2f:
                    b6:82:7e:51:bf:41:b0:6d:2c:dc:85:7b:01:6a:fd:
                    72:4c:52:a0:dd:a0:0e:78:67:59:8e:68:8d:1c:e8:
                    cc:c9:85:e1:fd:de:61:1f:bb:84:fa:66:d7:ff:11:
                    b8:ff:e6:dd:cf:aa:c1:d4:c5:57:ad:d6:ff:03:35:
                    93:ec:61:75:77:99:7d:05:cb:90:53:9c:a1:52:fa:
                    2c:94:27:70:63:c6:e1:29:31:b7:93:8d:d0:b7:6c:
                    7a:c9:1a:f7:b6:36:f0:72:9d:07:c9:0a:8c:f8:db:
                    47:aa:f4:80:34:c6:06:f8:c3:ee:e3:1f:e6:6d:2a:
                    58:f9:38:f2:c9:ca:c4:d2:1e:36:ef:37:0c:16:7c:
                    a8:47:02:46:82:43:b4:4d:80:0f:61:0b:f8:21:ad:
                    25:9d:8f:3b:cf:1b:1f:55:bc:2a:98:48:5f:f5:18:
                    97:e1:50:30:a4:98:4c:1f:3a:7b:ca:0f:0d:ec:1a:
                    d9:9e:ac:c0:b5:7b:be:10:09:5a:dc:da:e6:cc:c4:
                    08:5d:b6:72:54:b9:77:ad:05:42:9e:b3:cb:85:f0:
                    bd:38:38:05:8c:04:c0:57:47:67:c7:3e:03:11:86:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:41:D6:5A:65:17:55:07:D1:F0:71:57:95:5E:2B:4E:E9:AC:CC:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d63d2c69-1581-3042-9e40-e504ec9f86b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.64.0/19
                  147.194.0.0/16
                  192.235.128.0/17
                  209.163.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b6:bd:c1:97:cf:1c:d1:22:67:50:bd:fb:68:46:5d:0a:1c:
         bd:76:04:97:60:75:66:b2:f2:70:37:36:5f:fd:4c:e1:c3:d4:
         2a:a0:ee:d0:1f:50:39:57:01:74:b9:ad:55:7b:07:33:7e:eb:
         9f:fd:d9:0d:3f:ba:fc:56:5e:9a:27:b0:41:23:3c:47:40:81:
         65:d0:6a:44:59:e6:59:e8:ef:e2:d8:d7:0f:1f:c2:f7:6a:bd:
         6a:15:98:5e:5c:0a:26:37:20:5e:bd:70:0b:d0:16:9d:bd:13:
         95:3a:5d:a4:72:e5:17:d1:4c:b0:dd:b3:bd:df:d8:fb:3f:74:
         29:d2:75:05:1e:4a:00:76:20:09:6e:3c:79:39:3c:74:42:8c:
         da:4b:3e:4a:48:af:ee:b1:6e:62:48:d2:61:7f:54:fd:f7:67:
         44:9f:bf:67:1e:78:c4:4f:23:cf:2e:a7:6d:b0:d8:c0:cb:cd:
         8c:60:49:47:7a:4e:fb:f8:67:53:9b:e6:aa:63:3a:f2:25:09:
         09:b8:e8:12:72:f9:73:da:c9:ea:98:a6:a7:35:2f:3d:be:96:
         ae:e0:93:3c:13:39:cd:81:70:88:87:4b:d2:fa:bd:ab:81:aa:
         93:2a:bd:f8:0c:cc:37:08:5e:d5:4f:0a:c0:64:ea:76:ee:ad:
         34:7c:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org