Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
File:                     63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa (raw, json)
Hash identifier:          M+VhKRr03lyJf5ODTo2zg0Na5YCpk2+xAE17/hPWLdo=
Subject key identifier:   BC:98:2F:27:4B:4B:4E:3D:C5:92:FA:FF:91:8F:04:C3:79:D6:D5:D4
Certificate issuer:       /CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Certificate serial:       010D0C9F43285847B9616FD69616FD8BDA2F0700
Authority key identifier: 47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     19935
IP address blocks:        159.112.233.0/24 maxlen: 24
                          173.224.240.0/20 maxlen: 20
                          173.224.240.0/24 maxlen: 24
                          173.224.241.0/24 maxlen: 24
                          173.224.242.0/24 maxlen: 24
                          173.224.243.0/24 maxlen: 24
                          173.224.244.0/24 maxlen: 24
                          173.224.245.0/24 maxlen: 24
                          173.224.246.0/24 maxlen: 24
                          173.224.247.0/24 maxlen: 24
                          173.224.248.0/24 maxlen: 24
                          173.224.249.0/24 maxlen: 24
                          173.224.250.0/24 maxlen: 24
                          173.224.251.0/24 maxlen: 24
                          173.224.252.0/24 maxlen: 24
                          173.224.253.0/24 maxlen: 24
                          173.224.254.0/24 maxlen: 24
                          173.224.255.0/24 maxlen: 24
                          205.178.191.0/24 maxlen: 24
                          208.52.144.0/24 maxlen: 24
                          208.103.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6f:d6:96:16:fd:8b:da:2f:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=a36e33b5-d358-4899-9d2d-efa96c71ab56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:dc:9e:e1:d2:af:66:b6:3d:40:93:25:48:
                    dc:e8:27:95:1c:74:2c:99:3b:53:8a:02:74:37:d8:
                    d5:fa:8c:d7:5d:a4:97:ce:bb:d7:c3:c0:e3:b9:c9:
                    0d:2b:7a:cb:6e:64:9a:ee:9a:96:5b:ea:7d:18:29:
                    fa:a6:99:b6:53:f6:db:f9:cc:8f:05:c8:4b:ef:ad:
                    e0:bc:78:c5:3a:24:02:69:55:ba:4f:0d:62:1b:10:
                    ed:b3:9c:46:76:fb:a4:38:87:e9:7d:4b:25:97:3a:
                    77:7b:27:8e:96:e7:38:51:00:39:74:0b:5c:56:38:
                    19:f0:61:c9:4f:bf:2e:86:bb:c3:d3:1b:2f:f9:14:
                    5b:b6:64:58:0e:6d:a9:2a:e4:2a:68:f5:c4:09:0f:
                    d5:57:4d:9e:35:8c:f3:93:04:99:47:de:cb:e2:85:
                    b7:ca:42:b0:f2:a7:d1:00:92:c9:a3:41:aa:b6:e4:
                    21:00:3e:3c:33:e0:32:07:3a:bd:7e:f0:63:df:a1:
                    bc:fa:cf:fc:c3:15:6d:d7:ab:c0:5d:33:21:5c:b1:
                    6c:6a:4e:8b:a2:9b:fa:b6:c4:17:4d:a5:e7:57:57:
                    88:83:2f:a0:9b:d9:6d:36:86:f3:1d:bf:3d:be:ed:
                    2e:ec:20:12:76:83:c9:33:c4:96:b4:9f:ab:f1:b3:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:2F:27:4B:4B:4E:3D:C5:92:FA:FF:91:8F:04:C3:79:D6:D5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl

            X509v3 Authority Key Identifier:
                keyid:47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.233.0/24
                  173.224.240.0/20
                  205.178.191.0/24
                  208.52.144.0/24
                  208.103.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:d4:2c:58:b6:f0:07:4d:42:79:c0:f7:ec:ed:b7:46:bc:
         f0:76:32:e1:6e:b3:03:81:94:7e:f2:1a:d4:35:fb:4f:6c:dd:
         e3:14:a1:bb:39:3c:37:e6:86:a0:57:08:95:12:31:ca:8c:1a:
         42:96:34:67:8f:de:a8:c3:a0:ec:d9:56:b9:71:ee:e8:70:3c:
         be:74:d2:e2:e2:51:42:f9:71:97:5b:70:f5:c4:f8:a0:24:95:
         93:64:bd:1e:60:d8:52:fc:ab:b9:b9:25:64:ac:07:69:a4:7c:
         7e:67:9e:40:ed:2c:d7:42:a0:df:66:c1:c6:5a:d7:e5:91:c6:
         22:f2:b0:35:ae:d1:88:e1:61:9a:8b:6f:ca:84:43:8a:38:31:
         1a:b3:e2:08:ee:0e:51:55:3d:fd:94:b6:38:8f:b3:92:ff:50:
         22:a2:01:ad:08:9d:30:09:0e:9a:3e:30:ad:b0:6f:8d:d9:67:
         6a:2d:63:34:a2:6c:7a:bc:32:e4:e8:81:d6:5f:78:dd:a4:9b:
         c5:4a:6f:9a:86:62:40:31:07:ad:ef:93:5b:4c:33:84:58:83:
         cd:fb:73:2a:d6:5c:49:a5:41:7f:77:5e:8b:64:fb:62:bc:fd:
         ed:b7:24:84:83:31:55:87:90:03:fa:a3:c1:ca:a3:55:a0:45:
         46:0a:7f:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:36:01 2024 by rpki-client on console-fra.rpki-client.org