Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
File:                     6a49b156-6028-30c5-b60a-3bb373cf36fc.roa (raw, json)
Hash identifier:          QLEqK3nEu1yr786MJKlHHpyz2HvDc7iqOH5l031EtBM=
Subject key identifier:   55:E8:17:B3:92:EC:90:AA:BF:F7:69:4B:3F:F6:89:EB:50:A2:C5:E7
Certificate issuer:       /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial:       010D0C9F432858474850BF3EC07731EA515C8000
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     398940
IP address blocks:        192.245.221.0/24 maxlen: 24
                          192.245.222.0/23 maxlen: 24
                          192.245.224.0/24 maxlen: 24
                          199.33.130.0/23 maxlen: 24
                          199.33.132.0/23 maxlen: 24
                          199.33.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:bf:3e:c0:77:31:ea:51:5c:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=bc156326-88e0-4207-827b-d1f74b2cbb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8d:dd:bc:e9:89:da:fa:0a:4b:e1:50:a5:ac:
                    54:ea:da:05:62:6d:83:2c:dd:25:58:79:be:f2:0a:
                    bc:c9:0b:d9:2a:ac:06:01:bd:d6:b6:5d:6b:4d:e4:
                    65:75:4e:e8:df:44:01:f9:69:3b:94:9a:2a:80:17:
                    73:e0:78:14:98:90:24:a1:f1:80:db:fa:7f:ff:0f:
                    6e:61:52:a1:1b:52:f3:be:c8:39:71:48:ee:1f:08:
                    e3:b5:13:59:42:04:85:f8:55:80:24:2f:06:a6:3a:
                    53:1e:52:03:ea:d4:7c:b7:26:06:75:98:1e:da:9a:
                    f1:92:b9:e9:5c:d9:fd:06:4c:53:61:97:53:d5:f6:
                    6b:ba:ad:60:71:cc:43:e6:59:85:a6:2f:6a:6c:84:
                    39:c4:56:12:fe:23:2e:64:fc:78:d8:15:57:fa:7f:
                    28:22:6f:eb:8a:8c:fb:80:ef:c4:d4:96:a5:4e:8d:
                    80:f7:b4:68:31:46:6e:d0:85:7d:ad:8c:82:9e:ca:
                    6d:76:f6:5a:f8:f4:ac:dc:05:f7:b7:7c:d3:05:4b:
                    67:d7:bf:d8:6f:70:26:1b:8a:df:f3:d4:6d:b5:ac:
                    31:b4:f0:4f:fa:27:c9:35:c3:35:ff:da:6f:bb:8d:
                    58:28:b8:2f:6f:d5:79:09:12:2b:c5:0b:03:68:8b:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E8:17:B3:92:EC:90:AA:BF:F7:69:4B:3F:F6:89:EB:50:A2:C5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.221.0-192.245.224.255
                  199.33.130.0-199.33.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:fe:b1:63:43:88:cc:3e:ed:d3:f9:b2:99:db:ab:e6:82:
         2b:ce:b4:e6:33:8e:cd:2a:1d:da:4e:fc:64:e4:f5:32:e2:81:
         be:93:9d:31:7d:be:84:7b:c0:6a:4b:47:d5:a7:95:82:b8:ad:
         3a:fd:61:73:40:34:7d:8e:dc:ce:69:38:87:02:13:6f:a4:66:
         5c:73:8b:a3:a9:21:41:84:73:59:b5:1f:8c:be:6c:b5:ac:1c:
         61:65:a7:eb:ac:05:6a:92:a5:17:fb:1b:64:5d:da:80:f8:66:
         0b:9b:87:d1:6c:ab:03:85:de:70:c9:9f:8f:0a:d9:e3:84:04:
         1b:0b:6e:6e:ee:27:01:3e:8c:46:b1:23:4d:f9:5f:02:4e:97:
         d4:c4:f1:cf:74:3b:75:25:e9:9b:b3:a6:95:c1:4f:3c:2b:58:
         2d:e8:6f:e7:b1:be:0f:90:9b:94:bd:c9:0c:81:89:ad:2c:76:
         40:61:3e:2c:6b:a2:49:4a:2c:33:2b:d6:62:fe:08:36:46:89:
         87:b1:ab:30:25:2d:c7:18:4a:13:74:49:12:fa:9b:23:c1:de:
         b5:d4:e2:e3:58:b1:a2:c8:ba:d9:3e:cb:75:88:82:2f:c7:5a:
         64:b1:a7:d7:8e:0b:60:67:e3:3b:45:94:53:29:fa:2b:97:6a:
         63:42:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org