Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa
File:                     6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa (raw, json)
Hash identifier:          10LIILRoq4Me3TKM6IXjU+PYqnSJcbcKp+ticNifYC8=
Subject key identifier:   06:43:22:D8:58:C2:8D:40:6E:25:9E:BA:02:6B:37:A7:CA:47:20:5D
Certificate issuer:       /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
Certificate serial:       010D0C9F432858473FF09848768C93233D08124C
Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     33359
IP address blocks:        67.43.80.0/24 maxlen: 24
                          67.43.81.0/24 maxlen: 24
                          67.43.82.0/24 maxlen: 24
                          67.43.83.0/24 maxlen: 24
                          67.43.84.0/24 maxlen: 24
                          67.43.85.0/24 maxlen: 24
                          67.43.88.0/24 maxlen: 24
                          67.43.89.0/24 maxlen: 24
                          67.43.90.0/24 maxlen: 24
                          67.43.91.0/24 maxlen: 24
                          67.43.93.0/24 maxlen: 24
                          67.43.94.0/24 maxlen: 24
                          67.43.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:98:48:76:8c:93:23:3d:08:12:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=8fe2e684-fe86-478e-877e-1eb54aec030d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:a6:43:2d:fd:7e:cd:44:5a:6f:88:12:1b:
                    bf:e0:f5:03:bf:00:c5:04:af:54:ca:07:0a:d7:93:
                    02:05:c0:db:77:29:d6:be:b3:f9:65:0f:dd:b5:db:
                    f4:eb:18:29:00:d0:0b:5d:b6:12:a2:c7:29:29:1e:
                    6d:0e:9b:d7:6d:8b:6c:02:8f:42:d6:d1:5f:58:e1:
                    a3:93:9d:6c:8d:ad:5e:b5:4a:75:6c:20:2b:eb:89:
                    6f:1a:6a:2a:84:18:fe:d2:a4:a1:1d:ef:7a:ec:06:
                    49:06:2f:e5:58:2f:a2:96:e1:4d:53:bf:6f:12:8c:
                    cd:bd:3d:53:b0:0c:eb:be:56:5d:94:aa:10:52:26:
                    0a:23:0b:46:37:6b:e9:4b:54:dd:40:1b:33:d8:0d:
                    a1:df:b9:2b:88:e2:1e:78:be:3b:a1:c0:ec:a9:be:
                    5a:81:4c:35:10:92:60:85:b8:77:79:44:b2:b6:27:
                    a2:ff:db:9c:f1:c2:d4:1d:97:d7:03:b6:e6:b9:70:
                    b8:69:ed:93:9a:24:d3:b0:1d:a6:1b:39:e5:e3:ca:
                    93:91:7a:a1:db:df:75:04:17:d4:07:65:5e:93:45:
                    f0:62:0a:b8:06:36:01:4e:22:0c:57:3b:47:28:48:
                    59:50:43:7a:51:8e:fe:7a:7a:ed:8f:b2:8d:30:64:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:22:D8:58:C2:8D:40:6E:25:9E:BA:02:6B:37:A7:CA:47:20:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.80.0-67.43.85.255
                  67.43.88.0/22
                  67.43.93.0-67.43.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:c9:76:e6:6f:74:a7:59:4e:ae:2c:6d:a2:e3:df:5d:f2:a2:
         bb:c1:9f:02:e6:72:ea:83:e9:ef:49:7b:3e:5a:14:6e:5b:17:
         05:df:3e:e5:23:6c:be:b2:50:d4:ce:c5:40:1a:8d:e3:31:8c:
         a0:f1:de:11:78:2e:79:0e:be:ac:1e:0c:f3:97:55:d6:2a:25:
         03:d0:7e:e9:79:24:84:a2:01:a9:c0:e3:89:98:26:21:cb:1d:
         4f:8f:ee:d9:2b:84:49:7f:3c:49:20:76:93:42:1b:50:dc:c8:
         b2:e8:08:66:b4:d7:17:a6:88:1a:00:38:93:b1:be:e7:7c:dd:
         7b:85:90:7a:2f:f8:36:15:a4:fe:fa:3e:80:ff:04:f8:2b:7b:
         a6:f3:d4:43:06:f3:82:59:2f:33:45:55:13:9a:21:4b:a9:ec:
         4f:0b:01:c4:6c:03:29:52:9d:8b:36:3c:6f:5b:99:e7:9f:9a:
         c5:6e:94:cc:7e:c6:f7:d5:98:d5:ad:19:09:d3:3a:53:a7:60:
         96:6d:1c:a6:bd:2f:66:93:27:a4:02:91:de:e0:1d:95:f7:c4:
         48:da:91:26:7f:bb:7a:91:51:f6:b0:c3:8f:1a:06:75:70:e7:
         56:8c:d5:92:86:9f:80:e8:db:93:49:4d:3c:f0:56:5f:d6:f1:
         76:70:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org