Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa
File:                     995df7fe-cb96-3240-811c-16a02c3703cb.roa (raw, json)
Hash identifier:          u9KZ5IHZIy44BiKYEXBhGonEPFovpICf47abNuoGohA=
Subject key identifier:   7D:44:BF:DC:03:52:9D:A3:11:DA:20:74:5B:F7:62:3F:E1:FB:46:24
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F432858479D76BBA938A48E96A76D9580
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     2648
IP address blocks:        198.177.182.0/24 maxlen: 24
                          198.200.151.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.145.202.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.181.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.186.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24
                          204.238.94.0/24 maxlen: 24
                          204.238.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bb:a9:38:a4:8e:96:a7:6d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=8fae0e49-a58c-4922-a106-9f8a2b3c756e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:5a:f5:05:13:12:f4:17:50:1e:22:02:b0:
                    b1:b3:25:57:93:3e:a1:65:51:46:8a:62:39:cd:29:
                    c4:c2:ce:d2:dd:89:92:ce:2b:47:23:de:b0:d5:3f:
                    8b:2c:26:82:93:d5:49:a3:49:fd:72:43:6c:d0:c2:
                    db:ff:a5:24:e2:44:74:8b:cd:38:95:7d:98:ab:36:
                    d6:cc:e1:60:b4:92:49:62:62:9e:da:e8:38:15:c6:
                    56:6a:04:9f:fb:83:fe:98:34:4e:38:7b:ae:fb:4f:
                    36:04:6c:59:2d:ee:07:cc:88:d8:29:01:37:9b:95:
                    22:39:79:22:e5:a1:15:3e:e3:f6:aa:cf:1e:6f:8b:
                    14:ed:b9:5e:2e:64:41:e2:2a:d3:6c:1c:8e:77:00:
                    94:4f:f4:be:75:e9:9f:ca:1c:5c:2b:26:3a:7c:39:
                    f1:1e:95:52:50:ad:f3:8b:f6:dd:b7:7f:7a:17:2e:
                    13:ce:fe:48:91:00:eb:31:6e:68:8e:4f:e5:c8:1a:
                    4a:53:c9:14:11:6e:a7:1c:06:3d:10:ae:fe:90:9f:
                    50:4e:c5:25:09:03:96:fc:81:7f:d5:18:bb:83:4a:
                    14:9f:67:87:8d:9c:d0:ff:c1:5d:b2:a5:13:9a:81:
                    65:28:fc:89:3f:ed:c4:87:e0:51:87:c6:5f:1c:37:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:44:BF:DC:03:52:9D:A3:11:DA:20:74:5B:F7:62:3F:E1:FB:46:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.182.0/24
                  198.200.151.0/24
                  199.104.104.0/23
                  204.145.202.0/24
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255
                  204.238.94.0/24
                  204.238.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:fa:db:85:29:7c:8a:87:84:89:62:9e:10:de:28:28:b2:
         40:10:c2:04:ce:e2:55:6f:15:78:6f:1f:de:f2:9a:5d:8d:a8:
         b6:2a:1b:0d:a8:9f:48:2f:8f:07:45:2d:22:9b:ab:e0:da:fa:
         7e:aa:38:ee:69:2b:66:35:f8:e0:be:0a:27:8f:5d:ef:a2:b5:
         7d:89:e8:fc:b8:86:b2:b5:82:b2:21:5e:f4:93:2a:9d:1d:ad:
         80:16:34:64:9d:e8:25:0b:6c:bd:c3:fd:7b:f8:b2:19:e8:48:
         12:35:78:3a:8c:29:57:7f:7a:04:0f:85:f3:03:9b:c2:17:58:
         2c:f2:58:b6:08:68:e5:c0:a4:07:f9:b5:4b:bc:a2:22:1c:7d:
         b9:b7:de:a8:21:53:be:e5:e5:be:56:26:a6:74:a2:3a:0d:8c:
         94:6e:75:79:dd:fc:ea:53:ea:a0:29:a9:9e:c2:de:eb:d5:57:
         52:c8:5b:fd:ab:38:e4:20:cf:b6:09:36:6f:d0:60:13:43:35:
         9e:b5:c7:7b:4a:1f:61:79:0e:57:bb:74:5e:ff:39:8f:b4:8f:
         33:43:94:61:ac:a3:aa:a8:a5:5a:e0:bb:ef:39:e7:e2:b6:f3:
         5e:36:9f:42:e8:7c:a6:51:27:47:61:b5:da:63:97:6c:69:94:
         69:19:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:09 2024 by rpki-client on console-ams.rpki-client.org