Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
File:                     88d13f0c-ccc2-38b5-b670-66ee16223370.roa (raw, json)
Hash identifier:          PzL+uPkWH/8hwI1KeqBsD850k8JKImT9DmAqtIM4ggM=
Subject key identifier:   51:B9:00:10:C3:1F:26:2B:6E:C8:86:3C:C3:2F:C5:68:E3:6E:34:DB
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F432858478CB692188D71A8B355F15800
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     15257
IP address blocks:        173.195.233.0/24 maxlen: 24
                          173.195.234.0/24 maxlen: 24
                          173.195.235.0/24 maxlen: 24
                          173.195.236.0/24 maxlen: 24
                          173.195.237.0/24 maxlen: 24
                          173.195.238.0/24 maxlen: 24
                          173.195.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:92:18:8d:71:a8:b3:55:f1:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=14bb6cfa-033a-46c7-ac7c-c3723025fc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:b4:d9:80:8a:a5:49:db:d4:06:b5:6e:2d:
                    99:81:34:c3:7a:c0:f3:b5:dc:45:c1:83:11:3a:46:
                    33:f7:61:3c:11:9a:2f:98:19:e5:38:7b:03:ba:6e:
                    c3:5f:71:98:25:4e:cd:69:ec:51:d2:c0:b5:6b:56:
                    b8:f9:83:19:1b:2a:e7:be:81:d4:8f:85:93:06:c8:
                    14:9e:37:fe:19:c4:1f:29:db:d5:00:4e:0f:ec:57:
                    4f:0a:5d:40:8f:99:14:b2:3f:ac:87:30:fb:52:f1:
                    58:27:57:65:3f:05:26:5b:34:d7:66:12:3c:e7:20:
                    d5:4c:b1:cc:ae:73:a3:a5:97:d2:48:f0:c0:80:53:
                    b2:2b:1d:95:f5:22:66:fc:2b:ae:13:40:be:4b:34:
                    f0:88:a9:05:2c:25:fa:87:d1:b9:e6:de:26:ab:d0:
                    a1:0f:d2:08:93:45:e3:ee:f0:cd:da:28:e1:06:aa:
                    94:39:c5:2a:36:63:7b:b4:f3:79:27:a6:9d:6f:55:
                    19:80:a1:ab:16:db:e5:97:66:a0:24:e1:f5:61:d1:
                    06:d5:ab:08:5e:ba:ec:06:86:e3:95:e4:67:32:23:
                    5e:03:f4:55:22:a3:fa:f4:76:2a:69:15:20:00:e7:
                    08:70:2c:e8:66:98:6a:2e:f2:77:1c:2c:3f:1b:57:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B9:00:10:C3:1F:26:2B:6E:C8:86:3C:C3:2F:C5:68:E3:6E:34:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.233.0-173.195.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:26:a3:58:85:75:3a:15:b5:8c:c8:4a:c9:a8:e1:ea:d8:b9:
         36:60:db:91:9d:69:ed:e4:0f:3a:fe:74:ca:6b:71:bd:c9:1d:
         27:13:d8:65:08:c4:c8:19:d9:87:70:f4:2e:73:d6:7a:a0:20:
         c5:13:0e:a5:96:b8:57:ca:49:12:5b:2d:53:ca:bd:dd:7d:1f:
         b3:31:36:10:ee:1e:3f:d0:01:8d:e3:dc:42:36:50:e4:cc:3d:
         98:f2:bc:7a:03:f2:a2:40:24:b9:a4:81:e2:f4:8b:94:a5:b1:
         63:0e:ad:7e:34:12:04:3b:48:a0:57:76:04:1f:d3:de:1e:0a:
         1c:72:b7:9f:35:ba:b2:f1:fc:67:94:47:45:2a:45:15:2a:2b:
         27:fb:03:48:da:06:0c:cd:ed:6a:e3:68:9c:e5:df:2e:0d:2d:
         6c:2f:a7:75:b4:c5:93:13:01:cc:24:9a:9b:76:64:2f:01:61:
         9f:8e:8a:06:a3:80:44:38:e0:f1:c5:b8:ae:03:ea:72:d2:84:
         0c:60:57:3f:ba:2e:cc:03:e4:35:e4:c6:09:8e:0e:06:3b:db:
         72:29:c8:1f:64:c1:68:e8:11:b0:bc:41:31:26:2e:24:0b:11:
         40:7b:87:41:42:5f:ef:de:e0:9b:dc:13:a6:57:7b:ab:47:22:
         dc:1e:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:23 2024 by rpki-client on console-fra.rpki-client.org