Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
File:                     33a9ddc2-deb3-3384-ac02-7422445b9b79.roa (raw, json)
Hash identifier:          WMh8CslVuW3ZLZGQIVWTtYTA/YAQanw4511MCNIAguQ=
Subject key identifier:   4D:86:89:F4:53:A0:FE:73:ED:79:11:CA:36:7A:4C:F2:75:96:02:F6
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584765A0F79D7BE1538D1BD3AF80
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     400981
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f7:9d:7b:e1:53:8d:1b:d3:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=d8595a76-73fb-46fb-a1e7-412048f66aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:6b:55:2f:a4:1d:4a:64:44:48:95:98:54:
                    5e:6b:f2:4f:e6:60:48:f0:09:23:fc:cc:d7:28:87:
                    96:c5:7e:e3:26:fe:79:04:fb:e9:82:28:ac:8e:fd:
                    55:93:03:21:9f:29:44:67:97:1f:9c:4c:b4:3b:cf:
                    8d:32:4b:86:6c:25:1f:e5:42:1e:1e:61:a3:f5:63:
                    cc:45:1e:5c:2c:a0:51:d6:fc:75:eb:5e:dd:10:e8:
                    dd:c3:b4:88:e6:4e:37:9b:d6:6f:13:45:22:a0:b4:
                    01:17:78:aa:73:2c:b1:74:f3:5f:25:41:d0:69:5b:
                    be:88:12:fd:02:09:f6:fb:42:32:ed:ba:59:95:df:
                    dc:27:66:90:48:b9:ae:ec:d4:2d:c4:db:ea:fb:9f:
                    fa:1b:81:72:a3:00:d1:24:65:50:7d:7c:dd:43:d4:
                    c1:64:db:65:93:ee:8c:f2:b8:1b:73:dd:bf:ff:47:
                    42:ef:1d:a2:9b:c7:4e:d2:8d:49:7b:b9:47:4e:a6:
                    54:5f:b1:0d:64:e8:c9:7f:75:12:5a:9c:fa:66:5e:
                    ab:1e:15:e8:67:21:e7:4c:7c:74:29:5e:c2:e4:79:
                    ea:e8:86:c5:2e:e8:78:9b:16:f5:db:79:69:5e:15:
                    96:4b:a4:fd:e9:1e:d3:8e:30:00:49:d6:a9:24:7a:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:86:89:F4:53:A0:FE:73:ED:79:11:CA:36:7A:4C:F2:75:96:02:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:fa:3d:9f:00:fa:41:90:20:16:0c:66:2f:b8:67:ec:25:
         da:f4:e5:41:be:77:92:86:3b:8f:fc:d1:61:c8:59:70:6a:46:
         16:a3:5f:21:2d:44:10:28:ce:fd:24:a9:8e:78:0a:44:fb:94:
         d4:27:c7:72:a8:18:82:df:bd:fa:75:0f:47:07:34:74:53:8c:
         02:a1:a4:44:39:79:fb:da:4a:f3:93:92:d0:fc:68:9f:47:ae:
         25:49:d8:a0:8d:5a:7f:22:06:cc:3c:37:d9:51:61:13:48:5b:
         06:8b:6b:26:23:c7:d9:18:36:44:ea:5a:58:db:bc:38:c7:e0:
         17:a0:8f:29:1b:13:ab:21:13:d1:ba:86:78:ee:6c:d3:44:51:
         6e:90:ec:26:58:1b:0d:13:92:9a:cf:3b:7e:63:35:57:f7:68:
         10:37:42:25:cf:ed:65:1f:4b:70:dc:09:ef:76:17:08:47:f7:
         45:44:ef:eb:dc:dc:90:ea:23:ba:94:9c:a8:c6:0a:93:d9:6d:
         e1:00:7b:8c:51:77:3f:e1:2a:9c:42:f2:a8:7d:de:ce:c6:a5:
         da:25:44:c4:57:d4:8e:c5:2c:d9:f0:e6:94:fe:da:69:bb:1f:
         44:ac:a7:74:54:13:87:1a:b7:f8:d7:f1:44:13:d1:28:50:07:
         91:39:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org