Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
File:                     2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa (raw, json)
Hash identifier:          gRrNKmkpRHm5nkt2UrVi89M2FdyhO5NDlYqhe8dDudU=
Subject key identifier:   71:8D:EF:36:6C:15:9C:A4:7E:33:5E:03:AD:B1:BA:67:5A:36:C5:A7
Certificate issuer:       /CN=16bc29f5-43ef-48ab-b3df-a2828f565715
Certificate serial:       010D0C9F43285847C8D9CFF9ADB48340ABB3A600
Authority key identifier: 8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     16942
IP address blocks:        66.37.64.0/19 maxlen: 19
                          172.83.128.0/21 maxlen: 21
                          172.93.60.0/22 maxlen: 22
                          204.15.44.0/23 maxlen: 23
                          208.85.172.0/22 maxlen: 22
                          216.222.128.0/20 maxlen: 20
                          2001:4828::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:cf:f9:ad:b4:83:40:ab:b3:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bc29f5-43ef-48ab-b3df-a2828f565715
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=fc02a740-5808-4f73-bba9-03b9816bf9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:e4:16:64:94:7d:da:30:1b:82:07:10:d3:
                    10:5b:19:90:6d:53:61:32:70:9b:7d:85:db:f1:3e:
                    14:f7:47:6b:7e:ff:0b:f0:e7:c6:6b:6d:eb:46:4a:
                    d9:ed:0d:64:98:c5:7f:4d:ee:39:53:95:6b:f1:a2:
                    25:20:d9:49:f3:5e:b8:db:3e:04:83:fd:6f:d4:f9:
                    26:30:80:37:fa:ac:e5:a1:1d:92:d7:8b:4d:3b:51:
                    0c:bb:21:6f:71:d9:78:33:0a:20:62:c8:38:b2:07:
                    b4:52:f0:64:88:b2:6d:a5:d9:a2:b5:a1:63:3c:14:
                    36:47:cb:3e:f9:a8:a4:f1:0f:ff:7e:6b:d3:a0:af:
                    cc:e5:44:c9:94:1c:0c:4d:6b:b6:62:97:ac:06:8c:
                    90:0e:8e:f7:51:47:0d:e1:f6:47:83:5b:f3:1d:56:
                    47:51:5b:68:ec:0c:67:2d:d5:6e:a0:65:b3:a9:cc:
                    5a:43:90:82:6f:b1:6a:4f:33:93:0a:19:63:d7:0e:
                    b4:a3:41:fb:30:2a:1e:44:a9:49:03:7b:80:aa:a7:
                    41:2d:c6:6b:47:a5:b6:16:cb:c0:87:d7:88:32:b7:
                    1c:ab:04:d6:1c:48:75:c4:36:2f:7c:1a:02:d8:6d:
                    18:0d:6d:33:4b:3f:d5:4e:d7:c5:af:87:9f:f7:45:
                    ce:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8D:EF:36:6C:15:9C:A4:7E:33:5E:03:AD:B1:BA:67:5A:36:C5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.64.0/19
                  172.83.128.0/21
                  172.93.60.0/22
                  204.15.44.0/23
                  208.85.172.0/22
                  216.222.128.0/20
                IPv6:
                  2001:4828::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:d1:77:e4:20:8e:86:e6:6a:b5:6d:c8:e6:8b:bf:8c:10:
         78:8c:6d:f3:e1:eb:6b:4b:86:3e:13:db:7a:59:13:fd:ad:50:
         13:fb:a7:65:38:0d:1f:f3:df:7d:cb:28:48:99:5e:db:e7:87:
         de:a8:28:50:72:26:ac:8a:60:dd:9f:e1:3f:f8:4b:32:e6:cb:
         19:77:5c:11:01:fe:99:cc:bf:59:66:3c:4d:1f:4b:d6:00:0e:
         69:75:d8:e5:b9:82:7f:2d:35:70:98:53:75:8e:d8:78:c6:9d:
         cb:34:b3:c5:e3:2d:d3:97:46:80:34:84:6d:08:de:a5:a8:dc:
         b7:23:5c:6b:d1:42:23:f2:19:01:59:07:cd:c7:67:d3:67:89:
         63:dd:c7:91:9a:13:f8:2e:70:aa:97:5a:d3:a4:de:25:cd:c2:
         59:99:7f:e4:1a:b9:72:25:4b:52:c5:f9:31:6c:9c:70:91:1f:
         7c:42:78:db:1c:aa:41:0a:d2:26:f3:cd:f5:61:66:58:38:36:
         2e:6e:1f:a6:03:97:78:1f:4a:89:90:5b:40:ae:22:c5:10:67:
         15:b3:08:b0:36:2f:4b:83:7f:aa:54:d0:cb:26:75:aa:b4:85:
         87:c5:6d:cb:d5:6b:a3:2e:12:0c:fd:9a:2e:3b:03:23:27:95:
         a8:ca:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:16:45 2024 by rpki-client on console-ams.rpki-client.org