Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
File:                     e75cf125-8715-3d14-8f55-bb352f87cf59.roa (raw, json)
Hash identifier:          n5EclIgIyWhBEz/fn+m2zRTv79r5RI8snMVFwRILUJk=
Subject key identifier:   81:23:F5:21:44:5F:73:CC:F9:1A:09:78:28:28:56:86:DC:53:9D:C1
Certificate issuer:       /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial:       010D0C9F432858473D25E0A16D1DF50FBB379A80
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     11961
IP address blocks:        64.89.208.0/20 maxlen: 20
                          72.250.128.0/19 maxlen: 19
                          108.59.112.0/20 maxlen: 20
                          216.228.32.0/19 maxlen: 19
                          2607:8380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e0:a1:6d:1d:f5:0f:bb:37:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=4e25d67b-7df8-4b0d-8877-3d9320b62605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:a5:a3:29:32:e7:0e:50:38:d3:68:c3:25:
                    d2:4d:c0:da:3a:ac:2c:3b:af:1d:83:c8:fd:76:b8:
                    f7:84:d9:ab:31:3b:ef:fb:73:65:13:72:bc:3e:43:
                    d1:c1:85:be:6a:1d:0d:49:c7:e0:26:2c:d3:f4:27:
                    ec:7c:99:89:fc:70:26:b3:f7:d7:a5:b9:a5:20:8d:
                    cb:d1:8f:ed:94:d1:98:93:80:18:07:19:92:0f:3f:
                    65:e4:6b:78:da:de:23:71:15:bf:5f:0f:17:2a:3f:
                    0f:2f:30:c0:fe:96:27:29:80:4e:0f:79:b1:6e:fc:
                    72:c7:a3:88:eb:62:03:6b:92:ec:e4:ab:bb:9b:67:
                    57:ce:aa:9b:fd:62:b7:a7:13:c8:0c:3e:55:d2:2a:
                    a7:c9:e3:a0:54:3d:fa:e8:cf:ff:71:6b:36:48:1b:
                    87:98:34:b9:a9:17:a0:95:43:4d:06:ae:34:cb:d5:
                    c0:e9:77:c1:bd:f1:90:d0:4f:46:0e:62:96:6c:8a:
                    25:cc:91:bf:3c:16:5d:90:49:a5:4d:c2:8d:2f:a7:
                    a7:88:0e:ba:29:18:dc:e4:26:42:1b:1d:2b:b4:e9:
                    dd:34:80:fc:3d:45:1f:77:aa:1f:34:cb:b1:47:eb:
                    9e:cb:99:66:9a:a8:46:e2:10:36:d0:34:eb:69:7f:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:23:F5:21:44:5F:73:CC:F9:1A:09:78:28:28:56:86:DC:53:9D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl

            X509v3 Authority Key Identifier:
                keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.208.0/20
                  72.250.128.0/19
                  108.59.112.0/20
                  216.228.32.0/19
                IPv6:
                  2607:8380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4b:45:73:2f:bc:07:2d:f8:29:d4:bf:5e:85:c8:bb:db:39:
         78:35:ed:33:68:86:93:b1:42:4a:46:48:e2:8b:61:7a:cb:7b:
         20:9e:83:46:e2:62:e1:62:e1:d8:24:d0:d5:c7:8b:4f:7d:0f:
         21:52:5d:8b:e3:35:75:84:1c:64:42:2e:e6:5d:a5:c8:9d:1f:
         d2:6e:f9:90:2f:ac:9e:9a:8d:12:9f:6b:95:1f:90:3b:00:68:
         d5:43:eb:77:50:ba:6b:4e:ea:91:c9:96:67:f6:e8:46:0f:2e:
         86:1f:b3:d4:f8:7c:11:d3:cb:c8:16:44:ec:0e:d6:2e:4f:b7:
         b6:2c:2f:d8:ce:71:20:04:c0:5c:d2:3b:d1:48:6e:6b:76:74:
         d9:2e:7d:88:54:47:c8:ca:20:f5:99:6e:fa:a1:c5:c9:2b:0e:
         4a:88:68:9e:6d:a3:74:16:b5:34:af:a7:fe:95:19:af:62:c4:
         50:37:98:e3:cb:29:7d:71:d5:9b:8d:e6:6f:a9:88:c0:09:7b:
         94:db:4e:f9:79:f8:85:e5:b7:e8:8b:f8:ee:22:ea:3a:48:e9:
         d0:be:35:3f:32:32:9e:3b:8c:ef:d8:97:9b:9e:d5:d6:9d:53:
         72:ff:1b:90:fe:3b:a5:bf:b4:d8:d5:8c:8e:bb:f9:23:d5:f6:
         16:43:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:08 2024 by rpki-client on console-ams.rpki-client.org