Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa
File:                     f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json)
Hash identifier:          u5nkMfE372BCvKGEkbcyKcoVweNl1PCQeIZXzzOwhSI=
Subject key identifier:   EB:BD:BC:90:76:B4:CF:65:FA:65:94:7A:7A:62:65:94:CE:66:FB:CE
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285847B531467299AD3F43F53A1880
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     5650
IP address blocks:        104.251.80.0/24 maxlen: 24
                          104.251.85.0/24 maxlen: 24
                          104.251.89.0/24 maxlen: 24
                          104.251.91.0/24 maxlen: 24
                          158.115.224.0/24 maxlen: 24
                          158.115.225.0/24 maxlen: 24
                          158.115.226.0/24 maxlen: 24
                          158.115.227.0/24 maxlen: 24
                          158.115.248.0/24 maxlen: 24
                          158.115.249.0/24 maxlen: 24
                          158.115.250.0/24 maxlen: 24
                          158.115.251.0/24 maxlen: 24
                          172.98.185.0/24 maxlen: 24
                          206.127.218.0/24 maxlen: 24
                          207.230.96.0/23 maxlen: 23
                          207.230.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:46:72:99:ad:3f:43:f5:3a:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=384b6778-b91e-4db5-a7af-f88392582454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:da:d3:38:55:c7:93:ec:e2:d2:6d:37:e0:
                    3e:08:d5:5e:22:c3:5b:4c:f3:d9:f8:db:66:87:ce:
                    dc:7c:86:73:a9:18:84:26:67:73:05:68:9b:2f:e1:
                    a7:bb:cb:b7:7d:74:f3:47:1b:83:f5:3e:78:62:56:
                    7d:a3:b6:f4:65:e4:2d:c3:0e:70:54:b9:63:af:19:
                    2c:92:5e:64:cb:17:3a:4a:16:ac:0f:ba:de:fc:53:
                    1b:7f:c4:46:14:8e:91:c1:e5:92:1e:17:ed:be:45:
                    1c:63:42:86:38:5e:fa:cb:64:a2:b3:38:b8:3b:03:
                    96:5a:39:e5:d7:a6:47:b4:a9:fd:fa:25:b9:94:a5:
                    6f:b0:a7:9c:78:af:14:b4:e1:fd:29:4d:a7:a6:f9:
                    0f:40:70:02:24:9b:83:f8:12:11:e1:7b:0a:d5:84:
                    85:f6:46:36:3e:31:80:39:29:83:c9:8e:8f:d2:67:
                    f4:cc:d4:ab:bb:72:27:9a:d5:b4:c6:51:d1:08:56:
                    35:04:9f:29:e3:48:2c:ac:0b:20:42:a8:b7:fd:93:
                    b8:51:a4:26:c8:b1:2a:79:85:a8:01:e6:8a:86:c9:
                    73:86:66:f3:50:65:24:3e:9d:9b:24:f8:25:08:ea:
                    ee:ad:72:cd:a8:ed:68:cc:61:ac:f4:c6:ad:72:68:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BD:BC:90:76:B4:CF:65:FA:65:94:7A:7A:62:65:94:CE:66:FB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.80.0/24
                  104.251.85.0/24
                  104.251.89.0/24
                  104.251.91.0/24
                  158.115.224.0/22
                  158.115.248.0/22
                  172.98.185.0/24
                  206.127.218.0/24
                  207.230.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:75:f5:35:cd:c6:e4:8d:2c:ed:76:9d:57:72:2a:bd:6b:
         d5:5f:3f:23:d6:6d:60:3f:ab:b8:b8:61:6c:f4:3c:83:ae:e9:
         07:58:c5:43:f5:73:3e:51:13:75:ac:c2:2c:36:85:35:74:cb:
         65:74:aa:6c:fc:48:6c:98:b4:8a:03:7f:5a:ff:f1:cf:db:8c:
         52:26:cf:b7:36:de:65:5f:ce:57:7a:3e:45:a8:94:d7:af:27:
         55:7e:57:03:f9:91:70:0e:d3:12:0f:eb:9f:fb:c6:9c:85:2c:
         5a:1d:2f:36:60:cd:e1:41:20:76:04:60:57:9d:6c:3f:5c:c4:
         a7:9a:81:45:67:cf:b8:33:9b:98:98:b3:15:4e:92:4e:4f:2f:
         91:c5:e5:3a:7b:09:73:58:31:54:40:3f:f8:b5:fd:55:cb:04:
         bc:f8:0b:c2:9f:b2:be:2a:e8:bc:18:d2:63:e3:08:9b:7c:c1:
         7a:6b:af:d2:9d:38:d6:f6:ca:79:32:7d:a5:7b:4a:ec:7c:68:
         0d:ef:f7:0f:01:78:77:15:37:b0:88:b4:7c:b7:cf:6a:03:fe:
         ec:be:d6:60:8c:29:1a:c6:8a:10:a8:74:20:a5:98:e1:8b:67:
         a3:7a:a4:e7:48:cd:01:2e:8d:89:8b:18:15:99:9c:a3:0d:c1:
         10:35:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org