Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
File:                     f56d3816-15da-338f-94ed-ce0338ad89a9.roa (raw, json)
Hash identifier:          BkmQdLgs7Fr1pOlSV+WuM9LfbjmbU4SJJpHgTks8aWo=
Subject key identifier:   11:31:1E:C2:E7:FF:BD:EA:6A:7F:4C:54:A2:BD:94:0B:AC:16:2F:E1
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F432858483F91AE5C58E58224524F6F00
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
Signing time:             Wed 18 Dec 2024 14:36:21 +0000
ROA not before:           Wed 18 Dec 2024 14:36:21 +0000
ROA not after:            Tue 18 Mar 2025 13:36:21 +0000
asID:                     30083
IP address blocks:        50.30.32.0/20 maxlen: 24
                          69.64.32.0/19 maxlen: 24
                          148.72.128.0/24 maxlen: 24
                          148.72.130.0/23 maxlen: 24
                          148.72.132.0/23 maxlen: 24
                          148.72.136.0/21 maxlen: 24
                          148.72.149.0/24 maxlen: 24
                          148.72.152.0/23 maxlen: 24
                          148.72.164.0/22 maxlen: 24
                          148.72.168.0/21 maxlen: 24
                          148.72.176.0/23 maxlen: 24
                          162.211.120.0/21 maxlen: 24
                          173.201.32.0/20 maxlen: 24
                          173.224.112.0/20 maxlen: 24
                          192.155.96.0/20 maxlen: 24
                          199.189.84.0/22 maxlen: 24
                          199.217.112.0/21 maxlen: 24
                          207.38.80.0/21 maxlen: 24
                          207.38.88.0/23 maxlen: 24
                          207.38.92.0/22 maxlen: 24
                          209.126.96.0/19 maxlen: 24
                          209.239.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:91:ae:5c:58:e5:82:24:52:4f:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Dec 18 14:36:21 2024 GMT
            Not After : Mar 18 13:36:21 2025 GMT
        Subject: CN=98ddb149-31b2-47da-88c1-4816a0ad10d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:fa:04:3f:a8:44:83:fe:f8:98:75:8a:05:
                    8b:1b:80:68:d3:2e:ea:5f:82:6d:c1:26:f8:8b:9f:
                    fe:d3:ce:fe:01:60:88:d4:8e:b8:f9:ad:4e:cd:05:
                    48:eb:48:a6:6b:9e:50:8b:6f:45:c9:96:da:a9:52:
                    46:64:b2:19:4d:a3:c8:74:c0:9c:ef:74:e1:45:0e:
                    fc:30:f2:cb:54:f8:87:2d:c0:e9:72:49:16:6d:11:
                    bc:a2:a1:43:2b:0e:f7:ab:67:03:58:2e:c4:56:98:
                    43:9c:e7:d5:26:d3:0f:26:af:8f:a9:7b:b5:4c:34:
                    e7:8b:bc:d8:16:a5:4f:13:ae:d8:d6:e2:ca:b6:42:
                    14:38:24:6c:ed:f1:e1:61:27:d6:22:fe:c8:22:95:
                    d1:00:9e:f9:70:27:04:82:03:7a:09:ef:e6:b5:9c:
                    75:0b:ab:1d:53:45:fb:80:28:4f:a9:a0:c1:5e:df:
                    eb:ad:e6:ba:d1:3b:72:3b:d7:84:67:81:7a:e0:33:
                    90:fe:6e:9c:c4:e4:68:6e:86:38:7b:bb:38:57:c8:
                    ee:bc:01:d2:4e:ad:ab:00:50:c6:6b:75:2d:f5:8c:
                    cc:63:64:95:a9:9a:8e:cc:8b:93:7b:b0:ed:c6:8e:
                    67:73:58:2f:dd:4b:d0:33:b0:e9:8f:eb:47:af:84:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:31:1E:C2:E7:FF:BD:EA:6A:7F:4C:54:A2:BD:94:0B:AC:16:2F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.32.0/20
                  69.64.32.0/19
                  148.72.128.0/24
                  148.72.130.0-148.72.133.255
                  148.72.136.0/21
                  148.72.149.0/24
                  148.72.152.0/23
                  148.72.164.0-148.72.177.255
                  162.211.120.0/21
                  173.201.32.0/20
                  173.224.112.0/20
                  192.155.96.0/20
                  199.189.84.0/22
                  199.217.112.0/21
                  207.38.80.0-207.38.89.255
                  207.38.92.0/22
                  209.126.96.0/19
                  209.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:26:57:de:d9:7c:60:f3:e2:ff:26:5d:25:ad:05:88:3a:
         d0:73:01:4c:b2:3e:ba:a8:32:6d:6a:0c:cf:27:5f:3d:ab:19:
         8b:b1:e7:f3:c1:a5:49:93:d5:d9:e9:a8:6b:85:08:55:bd:77:
         88:3f:08:ec:d9:73:24:91:f6:aa:a6:c5:74:77:e8:85:11:d6:
         d9:60:15:78:b2:b6:7d:36:02:a6:44:00:d7:5a:d4:b7:94:a3:
         56:ab:ea:71:a5:0f:c5:49:55:6a:9c:62:db:a2:4c:81:99:e7:
         db:c9:ee:95:04:d6:2e:dd:72:cd:97:ca:54:43:dd:c6:0a:05:
         e8:b6:a1:99:4c:65:35:a0:2e:f7:b8:e2:23:39:b0:2e:f4:8f:
         68:ad:a4:a0:f2:d8:b0:69:bc:9e:8c:46:69:fd:90:74:47:21:
         46:49:74:3a:31:d0:d9:0f:71:69:a1:05:b2:77:c2:a4:a7:27:
         a8:7d:be:d7:9b:c1:eb:64:06:01:88:f6:53:1b:c1:fb:7d:5e:
         34:b8:7b:22:84:a9:86:93:62:57:84:5f:b9:4d:46:80:c5:cb:
         8f:12:87:9e:b7:7e:a4:98:9d:ed:c1:b1:f9:91:30:c7:90:33:
         22:22:a1:a7:80:8f:5b:85:4a:ce:a6:8f:4d:95:ab:79:34:6c:
         2c:0c:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:12 2024 by rpki-client on console-fra.rpki-client.org