Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
File:                     4107572f-7f73-39cf-a83b-21e385062b8e.roa (raw, json)
Hash identifier:          TkEnoOGle5VHVeQrJ8viTJsd5xxBBi92PYozX6J9BIQ=
Subject key identifier:   D0:D7:DF:57:0B:C8:F2:C5:F0:F3:36:CF:58:7D:30:C5:D1:1D:BC:42
Certificate issuer:       /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial:       010D0C9F432858483B98A87B6D28742E5162D000
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
Signing time:             Tue 17 Dec 2024 04:27:10 +0000
ROA not before:           Tue 17 Dec 2024 04:27:10 +0000
ROA not after:            Mon 17 Mar 2025 03:27:10 +0000
asID:                     6939
IP address blocks:        173.249.230.0/24 maxlen: 32
                          173.249.235.0/24 maxlen: 32
                          173.249.240.0/24 maxlen: 32
                          173.249.245.0/24 maxlen: 32
                          173.249.250.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:98:a8:7b:6d:28:74:2e:51:62:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
        Validity
            Not Before: Dec 17 04:27:10 2024 GMT
            Not After : Mar 17 03:27:10 2025 GMT
        Subject: CN=eb0265a1-54a5-4c77-97e0-f1f54174a609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f4:d7:95:88:de:b6:07:03:04:20:9a:b8:65:
                    15:84:59:93:ad:78:3d:85:02:a3:a1:a2:a3:ec:f3:
                    a3:3f:2f:69:16:a7:51:ec:6a:3c:51:82:68:76:24:
                    41:81:8d:a1:c4:24:df:3d:64:51:e0:1a:83:72:5b:
                    fb:c7:7f:7e:d9:8f:7d:8a:a8:a5:ec:bd:48:36:2f:
                    b3:15:7e:70:b9:d5:34:6b:5c:fc:8e:49:06:9a:01:
                    17:f8:4e:ea:35:8c:0d:2b:81:ae:7c:b5:5c:8b:90:
                    fa:a0:10:65:b2:83:9b:c9:c0:a5:ad:02:cc:29:3f:
                    a5:29:10:f8:c4:ba:b1:41:58:f5:64:f9:12:b0:a0:
                    cf:9f:72:5b:e7:91:ce:81:64:07:e4:6f:7a:f1:f7:
                    b0:06:9b:a5:6f:a3:84:bb:32:b0:98:33:16:61:59:
                    40:66:f5:dc:e5:9e:fe:2a:50:57:61:91:5e:eb:5f:
                    58:82:d7:c0:0d:45:83:81:3b:aa:d9:51:10:9f:e3:
                    a4:1c:b1:93:fa:40:54:f8:b2:43:e3:5d:ba:3b:b4:
                    14:21:59:5c:91:98:25:6f:4a:1f:3a:4f:60:63:b2:
                    c3:d9:b8:79:22:19:bf:3f:64:6b:e6:1c:f8:28:5d:
                    a0:99:79:a6:a9:7b:9f:25:ba:e5:5a:73:20:ad:46:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D7:DF:57:0B:C8:F2:C5:F0:F3:36:CF:58:7D:30:C5:D1:1D:BC:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl

            X509v3 Authority Key Identifier:
                keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.230.0/24
                  173.249.235.0/24
                  173.249.240.0/24
                  173.249.245.0/24
                  173.249.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:04:16:fa:b4:84:97:b4:47:f9:f8:c4:76:a8:ea:99:0e:d1:
         f1:68:fa:20:76:ed:0d:f7:4e:4a:5b:27:13:69:2a:30:cd:11:
         18:79:ec:c4:17:ed:95:d8:5f:bd:d3:53:d7:bf:ac:5c:80:6e:
         c8:af:a2:ea:bb:9e:45:7f:68:8a:36:cf:5f:f8:6f:b3:fb:61:
         50:d1:51:70:f3:25:3e:88:69:3c:20:2c:8e:8b:8f:4e:da:e0:
         1c:f6:7a:7e:72:e7:d2:b2:74:36:11:8d:11:34:cd:fb:5d:43:
         1c:a2:2a:f8:e6:a4:af:ab:20:07:cb:e5:e0:da:90:a5:74:26:
         3a:44:a0:37:eb:69:96:6e:e9:74:44:0a:78:b8:c3:2f:33:3a:
         f8:5f:7e:4b:67:7b:39:52:d5:a5:21:d2:60:48:64:01:bb:a2:
         c6:8e:4a:68:ba:82:d4:cb:28:61:12:8b:b4:1c:38:e6:f8:86:
         44:cf:49:6f:1f:48:53:ac:15:22:5b:d7:c4:ae:5a:8e:16:76:
         c1:28:de:26:48:3a:b5:20:d1:df:66:4f:e0:9b:a6:b2:7b:0a:
         b2:a6:95:e5:36:ec:ef:ca:df:fc:69:55:da:2c:44:30:36:65:
         50:c4:0f:a5:e1:f7:32:a3:ed:ec:8d:d8:5d:eb:38:30:32:40:
         77:50:19:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org