Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
File:                     c5debae7-2a94-3092-9d97-9436c58ed0d2.roa (raw, json)
Hash identifier:          kXuKZKvRmYMDhUc0/JeO3LkOhWJtG2gSoOPbljGHveE=
Subject key identifier:   14:99:2C:D2:F9:F2:08:64:FB:AA:56:AA:37:F5:7E:95:6C:30:3B:9D
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F432858472C65D84007E390FB0C3C5100
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22
                          72.1.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d8:40:07:e3:90:fb:0c:3c:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=aa243c4c-672e-4473-9cd4-7d510bfe749e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:d3:b4:2d:f4:27:22:8d:5a:d6:cd:d0:04:
                    1c:2d:5e:83:bf:fb:3b:7f:aa:10:ba:c9:74:77:17:
                    36:90:f7:fa:72:1e:54:71:6a:8a:af:06:81:4e:81:
                    bb:a4:1e:ed:87:77:e7:a9:6c:57:55:8e:77:ef:16:
                    af:9d:24:eb:6d:35:18:69:9a:be:28:a1:72:b3:d6:
                    4f:96:67:e5:29:ed:36:2c:bc:c7:32:95:5d:4c:45:
                    08:a7:e8:0c:7a:77:18:d2:e9:cd:79:b9:5b:ff:77:
                    36:25:b1:48:cc:40:d7:c0:d6:d2:02:f4:0f:12:db:
                    3e:0f:bb:85:9a:4b:e3:27:cd:b9:bf:bb:24:52:ef:
                    8c:94:b2:ac:ce:5e:9c:ec:23:fd:65:e3:02:3f:29:
                    77:a2:a9:fc:11:87:c1:74:41:d2:c4:cf:b3:a5:15:
                    d3:b9:af:07:a4:58:e1:2a:f0:10:ac:c1:2b:05:63:
                    f4:b3:83:ee:e2:f3:63:7e:b6:dd:81:30:0d:36:05:
                    b9:ae:06:ef:12:e1:47:c7:8e:65:4d:35:09:db:5c:
                    c8:94:be:d7:21:b6:8a:c7:c1:b8:7d:9e:9f:e4:8b:
                    16:f1:8e:a1:14:f1:f0:c3:d9:96:7e:b4:02:8f:80:
                    64:db:03:95:31:3c:0f:31:f2:ba:79:3b:9b:6c:a1:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:2C:D2:F9:F2:08:64:FB:AA:56:AA:37:F5:7E:95:6C:30:3B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:52:78:44:6e:a9:66:04:7f:b5:8e:e5:ff:f1:8f:47:db:
         7f:26:f7:df:0e:ff:9d:a1:c9:f7:cf:07:85:23:41:3c:d7:6b:
         d8:cd:7a:8e:cf:ea:19:22:ee:79:a1:d3:98:e3:9e:ab:12:c3:
         46:1d:eb:04:1b:4f:a0:ff:5e:4e:eb:40:ec:74:6d:62:a4:46:
         ab:9e:a9:dd:c1:ae:7f:2b:0f:c4:c5:2a:a5:04:c9:e0:d1:2e:
         aa:cf:2f:d7:ef:fe:d1:f1:76:d8:88:80:d3:8a:2f:ce:a8:bf:
         9a:db:13:44:ea:c7:db:27:ac:29:29:0b:6d:4b:68:a7:05:47:
         11:cf:fb:26:97:0b:4d:25:16:ae:a7:ae:ca:a3:67:14:af:73:
         1b:10:f1:11:e3:a9:98:e9:21:a2:b3:d7:07:9c:c6:3d:eb:2e:
         b1:af:9c:33:79:b8:4d:b2:98:dc:5d:4a:34:c5:bd:68:c4:6d:
         34:0f:53:c1:b3:46:30:27:18:9a:45:25:8e:75:03:31:d0:b8:
         7f:59:ec:e2:b0:5c:6f:c2:5c:a1:08:41:79:a2:2e:60:63:e3:
         a1:5a:17:72:68:d4:22:77:7d:73:b3:2a:54:ef:e8:ca:90:e9:
         88:b5:33:fe:0b:97:3f:c1:bd:a5:45:08:3d:bb:9e:e4:18:f4:
         69:bd:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org