Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa
File:                     215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa (raw, json)
Hash identifier:          +emGdw6rkP0cbLOtf798aiFsIE8vYgjGoTjn0DAZqkQ=
Subject key identifier:   37:16:03:05:3E:62:60:B5:2B:B2:D8:C2:2F:3D:AD:8B:6A:6B:C4:D4
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F43285845325952DEB1BDA12A66EB1780
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa
Signing time:             Wed 13 Mar 2024 18:36:28 +0000
ROA not before:           Wed 13 Mar 2024 18:36:28 +0000
ROA not after:            Tue 11 Jun 2024 18:36:28 +0000
asID:                     33362
IP address blocks:        64.77.213.0/24 maxlen: 24
                          64.77.216.0/23 maxlen: 24
                          64.77.218.0/24 maxlen: 24
                          72.14.97.0/24 maxlen: 24
                          72.14.119.0/24 maxlen: 24
                          72.14.126.0/24 maxlen: 24
                          208.101.227.0/24 maxlen: 24
                          208.101.234.0/23 maxlen: 24
                          208.101.236.0/24 maxlen: 24
                          97.75.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:59:52:de:b1:bd:a1:2a:66:eb:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: Mar 13 18:36:28 2024 GMT
            Not After : Jun 11 18:36:28 2024 GMT
        Subject: CN=ac8667a7-3207-4c5e-9afb-e1f62f5b6b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:80:ba:16:70:7e:e8:68:c8:74:1d:ea:e9:
                    9b:8e:2a:64:e0:8f:e5:d7:50:a6:a1:09:84:91:8c:
                    84:f9:9a:c0:b7:42:12:0a:91:4b:0a:fd:9b:bb:3b:
                    e0:31:17:ea:9e:2a:19:af:bf:2f:db:8a:19:88:49:
                    49:fb:77:6b:38:3a:f3:56:98:f2:1e:cd:c0:b7:0e:
                    7c:69:72:f0:b8:41:a7:61:64:11:3a:e4:da:56:5d:
                    ce:93:8b:2f:30:76:cc:2c:f9:7f:ed:27:f2:b0:be:
                    80:52:5e:ad:45:0d:6a:ac:ab:cc:a9:9a:74:08:bc:
                    82:23:5f:9d:8a:56:5f:b4:89:33:9d:07:d2:9b:f8:
                    af:8d:c7:a1:87:f3:77:c6:a6:8a:c6:03:f8:72:80:
                    9e:cb:d6:38:54:53:7c:6c:85:30:45:e0:6a:74:47:
                    c7:8f:0d:d0:12:da:3b:ed:7f:e3:ef:32:12:b5:c1:
                    64:7a:42:7b:7a:3c:56:3b:d3:38:90:4e:7d:51:ed:
                    19:e3:06:9f:d9:28:54:91:48:28:c1:df:a6:31:19:
                    45:bb:f8:b9:41:87:02:49:32:fd:fb:28:af:82:e3:
                    44:e6:7a:ee:41:ab:d1:f8:d8:83:a9:ee:ef:d6:ae:
                    e6:7f:50:b0:48:db:af:7c:1f:14:ef:ce:c0:3a:be:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:03:05:3E:62:60:B5:2B:B2:D8:C2:2F:3D:AD:8B:6A:6B:C4:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.213.0/24
                  64.77.216.0-64.77.218.255
                  72.14.97.0/24
                  72.14.119.0/24
                  72.14.126.0/24
                  97.75.255.0/24
                  208.101.227.0/24
                  208.101.234.0-208.101.236.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:55:19:e2:9b:68:20:45:58:c4:13:b2:f7:90:c0:f9:44:
         3b:42:28:17:23:4d:2d:5f:76:1b:75:49:dd:d0:27:e1:13:b4:
         9b:92:6a:58:f3:36:25:87:91:0b:c8:34:63:4e:7a:15:92:8b:
         12:20:a9:18:05:46:7a:7d:4a:7c:1a:2a:ea:17:92:61:92:6e:
         1c:d9:3a:b1:43:98:33:67:be:4c:22:e7:bb:c5:68:1f:87:af:
         fe:53:e8:7f:22:06:e0:68:50:4a:ed:a9:1e:04:72:e6:d5:ac:
         5d:ba:ff:f8:77:e6:25:b7:ee:4d:56:3c:d9:00:c4:7d:82:1d:
         41:79:f5:0d:9e:96:18:3f:8f:67:ad:c5:8b:3b:2f:6c:08:b3:
         c3:e8:8a:05:d4:ce:e5:c4:9f:0e:4f:83:09:bd:69:83:8d:cf:
         f2:6e:d7:5c:00:fe:74:59:c7:97:3a:83:3f:0a:0d:fa:f5:5a:
         c0:8b:2d:52:6d:c0:05:6d:7e:cf:65:7e:02:b2:ea:98:8b:8c:
         5c:56:49:39:eb:96:aa:dd:74:b9:4c:00:84:99:ee:7a:f2:ce:
         31:c0:71:25:29:89:32:0e:2d:b2:f0:34:15:04:f5:84:e4:2f:
         f0:f7:b9:b1:b8:aa:bf:fc:96:6f:79:95:b2:43:c1:97:e0:94:
         0b:be:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:43:30 2024 by rpki-client on console-ams.rpki-client.org