Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
File:                     75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa (raw, json)
Hash identifier:          pp6WNvAQSRgcGoz5R2aCVjKo0S0SnBHPaS2bhHcEK6g=
Subject key identifier:   DB:C1:53:28:2F:66:B7:2B:E3:C2:B5:3F:B7:D8:55:58:DA:45:DF:0F
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F432858474850A4A4DF4475733A3872C0
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     25820
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:a4:a4:df:44:75:73:3a:38:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=4aa0c5b3-244a-4ade-86bc-5e8de11a5831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:71:8f:7b:26:84:2a:9b:8f:40:94:ed:33:
                    56:3a:0d:1f:50:27:36:fa:a6:52:6a:a1:bc:20:69:
                    ca:87:8b:ea:53:76:86:6c:cb:37:04:6e:51:fd:5a:
                    8b:12:a2:45:bc:78:d9:7a:9a:09:5b:2b:39:e8:08:
                    13:f4:77:f5:2f:c9:88:33:a7:d1:58:0a:d8:25:62:
                    07:21:8e:33:7c:02:c0:3b:13:6c:2e:a0:64:c2:e6:
                    42:95:d9:db:5e:f7:cc:d4:1b:d7:48:dc:93:c5:6e:
                    76:1c:3e:36:22:d4:b3:17:71:5c:1f:7e:c9:ac:55:
                    65:e1:57:0a:8e:8e:a1:e6:2e:5c:64:b2:84:47:57:
                    b6:39:55:22:5f:25:e0:19:b4:aa:21:21:7c:2f:12:
                    00:18:db:70:71:f6:4c:33:2f:9a:d6:28:f0:a4:6b:
                    19:7c:4c:15:b4:bc:a7:2c:5e:41:ff:95:50:7e:71:
                    a9:c6:75:d9:4e:ba:70:c1:9a:b2:d0:3d:0f:68:06:
                    d0:96:5a:52:12:3c:9c:11:8d:65:20:a7:93:6d:81:
                    11:3e:80:ef:b1:8e:71:01:98:b4:47:7f:a5:cc:02:
                    c4:be:a4:13:2d:cf:b5:9b:1b:b4:70:7d:35:1f:81:
                    96:d9:72:dd:ce:3f:8d:71:7a:48:93:a5:65:2c:43:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:53:28:2F:66:B7:2B:E3:C2:B5:3F:B7:D8:55:58:DA:45:DF:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:36:43:7c:66:ca:ab:c4:08:ef:a2:71:89:3f:63:b9:6e:
         15:13:28:98:83:d4:72:68:99:3b:c0:31:b9:45:cb:6e:13:0c:
         6b:0c:e0:cc:11:cc:f6:d3:95:44:15:dc:3e:25:9e:90:53:05:
         0a:fa:4c:da:24:f0:92:0c:c0:9a:dd:c8:50:18:7e:07:16:0c:
         18:f2:a9:58:d0:38:e9:8e:9c:fa:13:ef:07:de:db:e3:0c:21:
         a9:f8:93:7d:0b:10:b4:46:f3:ea:77:05:83:5c:c1:37:9c:f4:
         b2:be:51:b8:a1:22:d5:bf:3d:55:93:27:69:e5:b2:d5:8e:6e:
         ae:2f:30:0e:a7:6f:de:09:de:1a:c5:da:e6:bc:5c:d2:c0:99:
         6c:c5:66:d0:4e:5c:cb:7c:94:6c:ab:d9:6a:a0:f2:bb:1b:8a:
         22:0b:bd:c1:af:6b:e5:e4:81:c2:f3:f0:5d:e0:84:10:6d:8c:
         ce:a1:73:de:1e:8e:17:b7:e5:d7:d2:e6:00:27:80:6a:8c:5c:
         ef:0d:e2:25:bd:b2:c7:09:62:2f:82:fb:d9:12:0e:25:02:7a:
         3e:21:4e:4b:8f:b0:f8:54:ce:bc:c6:e0:36:ee:fd:f7:f2:c9:
         df:73:ad:91:33:98:cd:67:34:a9:66:1a:fd:5e:1a:15:8c:50:
         e5:46:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org