Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/2e7582ec-b4f3-3afd-aa87-206b575a7506.roa
File:                     2e7582ec-b4f3-3afd-aa87-206b575a7506.roa (raw, json)
Hash identifier:          q5kBbqzGZ+ZYNGZsAZEN93zm+aWL9C4JFi+M6AAFDBo=
Subject key identifier:   38:68:92:41:A8:D5:5D:05:F6:05:D9:CE:4C:9E:D3:7B:F2:23:F5:D4
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F432858476C9DB5CD735383F2A5692880
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/2e7582ec-b4f3-3afd-aa87-206b575a7506.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     397250
IP address blocks:        69.55.212.0/22 maxlen: 24
                          69.55.216.0/24 maxlen: 24
                          205.174.152.0/24 maxlen: 24
                          207.32.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b5:cd:73:53:83:f2:a5:69:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=dc14df49-35e6-439f-b693-455a2c171ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:df:a0:34:1b:b2:ec:b6:df:06:66:dc:0d:
                    8f:0d:75:73:1c:dd:61:29:b3:48:67:18:ff:d3:4f:
                    52:e9:9a:bf:e9:b5:2b:81:00:b1:db:e7:7a:56:83:
                    44:ed:90:b4:93:1d:df:03:9c:66:8a:e9:67:74:1c:
                    ac:d4:6b:70:de:d9:4e:03:6e:19:55:67:68:2e:20:
                    1a:92:b6:b8:7f:98:7d:53:19:25:dd:77:27:36:e0:
                    94:56:6f:84:c3:2c:f0:d4:f4:4e:ce:46:b6:d6:86:
                    c3:8c:0d:6b:0d:55:36:7b:95:ab:fc:9c:11:83:74:
                    6f:2d:f6:9b:b8:32:63:9c:b4:f7:d9:be:4a:57:27:
                    03:8c:1b:bd:8c:cf:71:64:be:47:08:bb:f3:78:bb:
                    5c:a8:8c:e0:5e:7a:3c:d2:0e:bd:25:92:d6:52:51:
                    15:79:29:b4:2e:63:09:42:82:58:48:85:e9:10:cf:
                    bb:dc:6c:43:5f:c7:41:76:16:10:45:5d:9e:53:25:
                    a6:5b:d8:68:6d:7e:e4:ea:dd:24:b0:cf:a1:60:97:
                    06:83:cc:f7:d8:f0:b3:18:28:73:ac:42:8e:13:bf:
                    59:c0:69:79:c5:57:7c:30:f2:13:a0:8b:91:b2:e2:
                    d1:a1:ed:14:a5:0f:66:16:84:d2:7a:e1:fb:95:4e:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:68:92:41:A8:D5:5D:05:F6:05:D9:CE:4C:9E:D3:7B:F2:23:F5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/2e7582ec-b4f3-3afd-aa87-206b575a7506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.212.0-69.55.216.255
                  205.174.152.0/24
                  207.32.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:91:e5:22:eb:5b:32:a2:c6:61:e3:50:7a:dc:57:09:d5:46:
         0d:39:fa:a5:84:04:78:ba:7b:bf:b6:b5:c9:10:cd:66:d0:fd:
         bd:69:44:06:9a:a7:20:1f:21:a1:9c:d7:4b:0c:4c:69:37:8e:
         64:2f:b6:43:88:b2:6b:aa:b4:9a:b4:67:c9:66:94:20:29:28:
         74:f9:28:c4:6b:be:7b:35:c3:a7:c7:1d:42:8a:0b:ac:78:2e:
         a2:ab:ec:d7:61:7e:24:4d:0b:53:09:a7:ce:d3:f0:fb:9a:a8:
         8c:cc:dd:c6:44:ac:f7:95:17:58:f9:f1:4c:7f:c2:09:28:7b:
         8e:bf:77:e0:ad:15:97:4d:37:c2:d6:8c:02:70:0f:d7:09:6a:
         48:1e:7e:01:98:25:cf:07:d6:96:1f:3a:87:e1:a5:11:f3:19:
         21:1e:f5:de:15:79:9f:c7:6a:a1:6a:2b:c4:ab:7b:f5:b4:a1:
         97:80:48:ae:f1:68:53:e3:1d:97:fc:f3:ab:2b:fe:de:8f:23:
         da:ba:48:fe:fd:e2:38:0e:ec:73:1c:1c:de:16:7d:59:26:0d:
         0c:22:3a:1f:97:71:d5:c9:83:21:45:1c:cd:59:8f:40:45:5f:
         c8:43:a8:15:f9:9e:93:cd:f8:0b:a7:38:58:72:f8:2c:73:0f:
         0f:fd:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org