Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/a8df26f2-94f2-3c93-a33e-614742e348a1.roa
File:                     a8df26f2-94f2-3c93-a33e-614742e348a1.roa (raw, json)
Hash identifier:          vEEWl0FCw69bOOk5HXTwn39guvoHnOMtbF9RYVMyU2g=
Subject key identifier:   9C:97:1A:02:4A:28:E9:8F:25:13:CF:BD:A4:20:E6:6F:8D:E2:70:DF
Certificate issuer:       /CN=b718aa52-21de-402e-8bcf-bfe1926502ee
Certificate serial:       010D0C9F4328584765A0E7269CF881A3A45DDDE0
Authority key identifier: 0E:1E:2D:73:6C:9D:72:83:29:76:A2:CD:94:A5:8B:E9:73:CD:88:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/a8df26f2-94f2-3c93-a33e-614742e348a1.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     19689
IP address blocks:        64.78.240.0/20 maxlen: 20
                          64.119.80.0/20 maxlen: 20
                          208.123.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e7:26:9c:f8:81:a3:a4:5d:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b718aa52-21de-402e-8bcf-bfe1926502ee
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=cc1c85b9-158a-44b1-b63b-161f5bdb0b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:a9:aa:97:eb:c0:82:4f:c9:57:d1:48:00:
                    02:97:eb:9a:9b:b1:d2:d6:ec:54:f2:67:c0:de:25:
                    fa:35:ca:9c:24:ed:46:d9:a7:87:ba:90:1e:04:b2:
                    39:60:e8:8a:e3:45:ae:6d:ea:ba:f9:c4:67:07:13:
                    ab:c0:f7:5c:4f:97:e4:ca:e3:b7:73:b2:2f:77:cb:
                    a6:7a:d5:c6:66:25:81:c5:57:19:c2:c3:94:82:60:
                    46:98:df:3a:14:4c:5b:5b:6e:ad:f0:9d:35:30:21:
                    81:7e:ec:d0:b2:7a:93:50:4b:d9:96:de:27:21:e5:
                    34:df:76:d5:9e:1c:e1:5b:d6:7c:84:78:d5:6e:0e:
                    be:60:81:ae:41:2d:78:73:85:cc:23:25:11:76:31:
                    03:aa:5d:66:d5:af:07:87:ef:34:06:c7:4c:25:76:
                    f1:f5:24:0f:ac:41:9c:bc:5e:0d:c8:a0:3a:95:38:
                    dc:73:ae:75:d3:89:98:80:f3:fc:1f:dd:28:49:16:
                    eb:76:b7:8b:c9:09:cc:f4:6e:e0:7b:55:e9:d0:67:
                    92:dd:ce:c8:ae:89:61:be:31:ae:ed:9c:83:af:35:
                    62:51:f5:80:10:db:7e:57:ce:8c:97:40:a0:87:de:
                    1f:93:ae:93:12:2e:2d:3b:45:c8:f1:8b:ea:f3:86:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:97:1A:02:4A:28:E9:8F:25:13:CF:BD:A4:20:E6:6F:8D:E2:70:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/a8df26f2-94f2-3c93-a33e-614742e348a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1E:2D:73:6C:9D:72:83:29:76:A2:CD:94:A5:8B:E9:73:CD:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.78.240.0/20
                  64.119.80.0/20
                  208.123.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:99:a4:7c:30:ca:03:9a:09:be:7c:b3:49:43:bc:12:ae:
         00:0e:c8:6f:94:ab:06:1c:be:d4:42:e6:90:1c:14:cf:17:38:
         19:78:21:df:18:7c:d5:82:66:34:62:ab:ca:b3:d2:76:78:71:
         a7:d4:3b:f9:d3:0c:5b:db:00:f2:6f:bc:63:f6:e8:6a:ca:65:
         4c:d6:70:b9:e2:34:74:45:ab:a8:ab:5c:f3:2a:95:14:db:ff:
         67:ed:1d:92:45:02:ce:ae:0e:6f:1d:9d:6f:9c:6e:04:94:8d:
         04:4c:89:61:d5:d6:79:ec:b6:82:e5:e5:72:b2:3c:a3:19:af:
         87:85:ba:0f:1d:36:55:11:92:24:33:3a:ab:0b:88:2e:96:04:
         b9:10:f8:30:32:b2:79:92:69:93:b5:8d:e4:95:60:e9:6c:0b:
         bb:b5:aa:96:e4:56:a1:7b:46:69:7c:fb:60:90:50:ff:63:f4:
         a2:18:60:a6:b2:cf:4a:1f:7f:6b:7b:71:8f:22:c6:b9:9a:1b:
         0b:93:7b:a3:da:d7:75:6f:b8:d4:f8:68:c9:57:be:aa:2f:b6:
         f9:2f:bc:ed:86:bd:74:0a:24:04:cd:4b:07:ca:02:72:d7:13:
         f3:77:36:8e:39:1f:c5:6f:d3:49:eb:ff:cb:85:e6:35:23:7c:
         0f:33:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:51 2024 by rpki-client on console-fra.rpki-client.org