Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
File:                     5f470726-ba1c-3327-8ebe-1cd7737a8735.roa (raw, json)
Hash identifier:          DK7cbB7DV+Zb5ax8ICpbCUY3rm+V5rbeFOGXKnBLvFo=
Subject key identifier:   CC:24:FC:5F:D2:8A:E3:AC:C9:47:65:C3:C1:24:AD:ED:80:6B:2A:71
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285847CE6F341D44D4E08E1A118B80
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     17054
IP address blocks:        64.72.128.0/19 maxlen: 24
                          64.255.240.0/20 maxlen: 24
                          66.11.0.0/19 maxlen: 24
                          66.159.64.0/19 maxlen: 24
                          66.181.64.0/19 maxlen: 24
                          66.230.64.0/20 maxlen: 24
                          69.7.96.0/20 maxlen: 24
                          206.41.192.0/19 maxlen: 24
                          206.183.0.0/19 maxlen: 24
                          206.210.64.0/19 maxlen: 24
                          206.223.22.0/24 maxlen: 24
                          207.54.128.0/18 maxlen: 24
                          207.114.0.0/17 maxlen: 24
                          208.40.128.0/18 maxlen: 24
                          208.40.192.0/20 maxlen: 24
                          208.40.224.0/19 maxlen: 24
                          209.114.128.0/18 maxlen: 24
                          209.143.64.0/18 maxlen: 24
                          209.166.128.0/18 maxlen: 24
                          209.190.128.0/18 maxlen: 24
                          209.221.0.0/19 maxlen: 24
                          216.37.0.0/18 maxlen: 24
                          216.82.64.0/18 maxlen: 24
                          216.130.0.0/19 maxlen: 24
                          216.151.64.0/18 maxlen: 24
                          216.183.160.0/19 maxlen: 24
                          216.230.96.0/19 maxlen: 24
                          216.239.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:34:1d:44:d4:e0:8e:1a:11:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=482754e2-7eed-4e11-8c84-43678ce23646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:f5:1a:fd:33:ae:ce:80:ba:54:a7:db:33:
                    b7:7f:81:f1:fc:24:d0:02:b9:34:54:6c:a5:8d:eb:
                    5d:57:1d:67:4d:1f:23:f1:55:59:69:28:cd:f7:75:
                    60:a8:33:6f:12:bd:5e:02:84:42:89:27:d4:62:9c:
                    c9:c0:1e:75:55:10:31:7c:10:93:4a:4d:78:4c:c9:
                    86:23:b0:03:9a:2a:9a:4c:e8:8b:d0:1f:af:d2:2e:
                    d7:06:54:35:cf:0f:fa:95:f2:a2:97:ff:fb:33:e4:
                    78:17:4c:45:4e:68:88:57:fa:9b:b8:57:45:0e:2d:
                    7f:7f:8e:77:2f:87:12:5f:f8:53:a4:ca:07:59:83:
                    13:4b:d0:42:f0:85:af:24:b6:83:93:5e:bd:35:aa:
                    6f:d8:a8:77:51:c9:a8:9f:ee:38:fa:ca:69:5c:66:
                    84:d1:8d:fc:6b:b8:88:96:10:d3:57:3d:04:03:3b:
                    79:c4:8e:1e:cb:ad:5f:e4:ae:3d:0d:52:a5:78:e8:
                    c0:df:e4:36:c8:91:4b:98:b7:40:af:4f:1e:f8:36:
                    6a:c5:5f:99:98:3a:35:33:1f:0d:74:3a:27:47:50:
                    28:c1:f9:41:99:26:d6:d4:d0:e5:53:cb:0b:33:98:
                    b5:89:90:3b:f9:c7:b9:93:52:30:6e:5e:7e:0a:2b:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:24:FC:5F:D2:8A:E3:AC:C9:47:65:C3:C1:24:AD:ED:80:6B:2A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.128.0/19
                  64.255.240.0/20
                  66.11.0.0/19
                  66.159.64.0/19
                  66.181.64.0/19
                  66.230.64.0/20
                  69.7.96.0/20
                  206.41.192.0/19
                  206.183.0.0/19
                  206.210.64.0/19
                  206.223.22.0/24
                  207.54.128.0/18
                  207.114.0.0/17
                  208.40.128.0-208.40.207.255
                  208.40.224.0/19
                  209.114.128.0/18
                  209.143.64.0/18
                  209.166.128.0/18
                  209.190.128.0/18
                  209.221.0.0/19
                  216.37.0.0/18
                  216.82.64.0/18
                  216.130.0.0/19
                  216.151.64.0/18
                  216.183.160.0/19
                  216.230.96.0/19
                  216.239.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fe:4a:b9:2b:1a:78:04:60:d1:e5:96:85:8d:25:5c:af:7c:
         4a:77:91:3b:d9:e4:01:a7:61:e0:3f:07:15:2b:2d:ac:c2:50:
         af:55:ca:d0:97:ed:ec:62:bf:36:c7:f3:6f:72:02:3a:77:4d:
         1d:6c:39:6e:93:22:e2:a5:67:6f:05:78:58:a6:b1:c7:c6:b9:
         dd:53:ce:07:69:46:74:de:6a:4d:a5:f6:ed:0e:09:f5:6a:e1:
         7a:69:05:1b:2c:0d:36:80:bc:3e:23:56:af:56:1f:4d:eb:3e:
         c2:b5:35:49:f5:91:8a:f4:47:56:5c:4a:69:df:35:c9:b4:d8:
         73:04:e6:55:73:5f:c4:4d:10:bc:cf:68:46:42:04:14:e2:b3:
         da:c1:88:b1:83:2a:c5:3c:10:eb:05:13:ad:c5:06:ba:61:c6:
         6d:95:22:47:2f:56:ed:92:65:eb:23:a4:c0:b8:03:7b:a1:05:
         b1:02:b9:93:f2:7b:72:af:fc:c7:5c:51:be:8b:75:a9:e4:c5:
         4b:9c:5b:a5:8a:7b:5e:3b:c9:dd:b0:22:ba:8f:32:83:d1:bc:
         68:15:4a:ea:e0:84:e3:3e:09:be:b5:e5:05:85:13:d1:bf:de:
         4a:10:00:0c:7d:58:04:47:94:87:37:82:19:06:cb:32:19:b1:
         d9:7b:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:49 2024 by rpki-client on console-fra.rpki-client.org