Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa
File:                     919acf53-1694-3fd1-b408-20238c84adf0.roa (raw, json)
Hash identifier:          P3MVaQD/rrwu9DWc4Wu+/GvA/dISUq3xl7K4rAg+PSs=
Subject key identifier:   64:09:0A:46:6A:97:73:AF:E9:7A:D0:C7:11:47:93:25:2F:22:B8:BF
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F432858476E0103467290E998258FCE80
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     13830
IP address blocks:        142.202.220.0/22 maxlen: 24
                          161.129.152.0/22 maxlen: 24
                          163.123.204.0/22 maxlen: 24
                          192.34.100.0/22 maxlen: 24
                          208.99.4.0/22 maxlen: 24
                          2001:506:30::/48 maxlen: 48
                          2604:fbc0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:03:46:72:90:e9:98:25:8f:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=f2a36f08-6907-45f5-bc07-d60f4459fb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:89:dc:d9:b0:95:35:9d:50:75:81:56:88:
                    07:76:b7:51:1c:57:11:0b:6c:1b:c1:fb:9a:e7:1f:
                    e6:06:1b:2a:a6:71:d6:81:5a:8b:8e:ac:67:93:b9:
                    a5:ea:af:03:f7:41:f2:e1:f5:55:7b:13:48:1a:a2:
                    fd:c7:28:a1:8d:7b:53:3f:a5:57:e9:cd:3a:01:ad:
                    2f:33:1a:c7:b5:a8:2c:c3:ae:4b:08:05:d2:82:6e:
                    0a:cb:3e:23:4c:b5:1a:dc:05:b7:f1:05:b6:b8:7c:
                    d2:04:f8:04:d6:f4:05:8e:ad:63:f6:eb:f6:98:71:
                    13:90:ab:32:da:1f:54:04:1b:92:c6:d3:4e:e0:55:
                    b2:b6:18:f1:ab:33:25:a3:52:ad:f0:1e:3a:68:06:
                    d2:c1:b5:38:71:b1:a2:0d:fb:61:ab:98:cc:a3:f5:
                    5e:0b:5a:0f:a1:0b:1c:b7:bd:80:34:64:09:3a:92:
                    a6:21:29:7d:9f:4e:9d:34:98:6c:dd:47:83:08:84:
                    11:18:ca:1d:ec:98:9a:4d:0f:7b:9d:29:e2:7d:da:
                    77:a1:87:cf:95:4d:5d:38:1a:59:fc:9a:45:92:14:
                    57:b3:b7:ec:7f:0e:ad:8f:5f:5a:48:06:8d:a6:cd:
                    bd:1b:5f:ce:f7:06:40:57:63:e2:f2:d4:4d:25:c1:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:0A:46:6A:97:73:AF:E9:7A:D0:C7:11:47:93:25:2F:22:B8:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/919acf53-1694-3fd1-b408-20238c84adf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.220.0/22
                  161.129.152.0/22
                  163.123.204.0/22
                  192.34.100.0/22
                  208.99.4.0/22
                IPv6:
                  2001:506:30::/48
                  2604:fbc0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:08:78:c3:60:84:65:0a:78:7f:8e:2c:39:48:ca:74:9c:
         aa:7f:64:29:b6:b4:1f:4f:09:7a:d7:75:8a:42:2b:13:86:0b:
         59:e8:7b:72:b7:13:a8:11:6a:7c:2a:b7:1f:79:90:fa:8b:1a:
         d6:67:ed:b2:65:e4:c3:78:84:fa:dd:03:de:c3:ae:67:fa:7d:
         ca:e4:31:a4:5c:9d:e4:17:5e:80:c5:80:50:5b:4b:73:bc:ec:
         f0:dc:27:84:ed:f6:cf:cd:b7:21:67:2b:20:43:0b:dd:90:94:
         34:cf:b7:fa:3b:df:6e:68:ef:6b:f7:d6:1c:2b:c9:5b:15:81:
         9b:55:ee:9a:26:92:be:0c:c6:dd:e5:1b:5b:d8:93:71:d7:86:
         7a:2b:d2:2e:82:6b:02:22:f9:10:4a:f4:70:bc:8f:ac:ec:e2:
         84:6e:82:60:3b:f2:c7:c4:71:94:2c:ca:36:64:89:ed:73:14:
         d3:b6:09:dc:a6:32:c6:b8:77:6f:f9:5c:d6:99:f8:e1:1d:11:
         9a:eb:fa:f3:e4:f5:38:f8:64:9c:e2:ab:98:6c:80:ed:9a:9f:
         50:c2:b9:74:cb:86:96:76:25:48:d3:85:5a:43:b4:29:c2:13:
         c4:bd:0f:73:9e:0e:16:45:6b:82:23:67:4c:e4:a2:50:e0:d6:
         bb:93:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:51 2024 by rpki-client on console-fra.rpki-client.org