Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/e194f2c9-9093-3535-bdf7-7fe2dd436e4f.roa
File:                     e194f2c9-9093-3535-bdf7-7fe2dd436e4f.roa (raw, json)
Hash identifier:          lRtHrRcf37Q8Lii9cPAA+hTvKd+KfokcaE5+TsK4FTM=
Subject key identifier:   D3:5A:80:23:A4:81:D6:B9:9D:76:A6:27:F7:8E:FB:6B:0B:53:C5:FE
Certificate issuer:       /CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
Certificate serial:       010D0C9F4328584789EBFC24FDF57EACEF691D20
Authority key identifier: 1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/e194f2c9-9093-3535-bdf7-7fe2dd436e4f.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     54548
IP address blocks:        158.222.102.0/23 maxlen: 23
                          162.254.24.0/22 maxlen: 22
                          192.96.159.0/24 maxlen: 24
                          192.152.28.0/24 maxlen: 24
                          192.206.141.0/24 maxlen: 24
                          208.94.36.0/22 maxlen: 22
                          2607:b500::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fc:24:fd:f5:7e:ac:ef:69:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=43f766c1-e751-49ac-9cb8-9d4e938a425f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:c3:d6:55:4d:ae:cc:68:6c:5f:2e:65:d8:
                    2a:1d:4d:1b:eb:df:f5:b6:6b:ec:df:bb:1b:fd:dd:
                    5c:74:82:38:d3:ec:3e:6a:c8:34:1c:da:61:f6:a9:
                    77:7f:3c:02:53:7b:0a:f4:a0:b2:30:99:3a:0c:40:
                    b6:0f:f4:4b:a4:8d:9f:4b:e0:e8:90:ac:c3:b4:f3:
                    41:d6:72:cf:f0:79:77:87:2b:88:40:e6:df:f1:6d:
                    0c:c9:0f:94:38:a6:ce:de:30:eb:f1:4c:9d:be:b6:
                    c3:a3:0c:22:95:98:f2:90:65:ef:63:71:c0:29:15:
                    2f:7f:02:19:0e:44:13:37:c0:0b:3b:7b:46:53:71:
                    d5:60:96:95:b0:db:13:ad:28:ba:aa:ef:48:44:9b:
                    59:ab:cb:0c:2d:af:8d:65:63:04:20:68:ce:1c:ea:
                    c4:a0:f4:18:4a:57:f0:ec:8b:50:49:24:9f:21:39:
                    25:78:54:c2:fc:76:08:7a:7f:11:36:b0:a5:95:9f:
                    bb:88:c2:5b:b1:ad:44:44:7a:b5:3c:2b:6c:f9:f8:
                    57:94:be:0b:fc:c8:93:9d:2b:b2:30:0a:83:a4:e9:
                    97:21:ab:66:b5:ff:14:4d:03:72:08:7a:c4:42:62:
                    c7:15:09:c2:0d:9c:9d:00:a1:4d:6e:32:01:ad:35:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5A:80:23:A4:81:D6:B9:9D:76:A6:27:F7:8E:FB:6B:0B:53:C5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/e194f2c9-9093-3535-bdf7-7fe2dd436e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.102.0/23
                  162.254.24.0/22
                  192.96.159.0/24
                  192.152.28.0/24
                  192.206.141.0/24
                  208.94.36.0/22
                IPv6:
                  2607:b500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:bb:b0:c9:0b:a3:0d:62:26:06:c9:2d:38:e1:ea:ad:52:7f:
         e1:82:48:62:f8:11:f2:1b:0f:9c:ef:06:fc:b9:d4:89:ff:36:
         87:f0:ee:00:7f:ba:36:2f:46:79:04:3d:7c:e9:4e:65:9a:99:
         79:aa:67:e6:8f:31:cc:63:fa:d0:fd:bc:91:b8:49:27:e4:ec:
         e8:99:02:7f:ef:30:79:30:6a:e6:cf:cd:7a:87:a5:ab:33:31:
         51:3a:99:ea:a4:aa:f3:da:91:ae:2b:eb:3d:a3:f9:cf:45:1c:
         fc:bd:8f:cc:28:eb:4b:9e:c4:de:c4:60:09:68:6f:fc:4a:62:
         49:e7:b6:17:59:55:b4:0f:58:d7:05:31:1d:b8:c6:d3:1d:22:
         b5:f1:e9:c8:e4:6e:bb:f2:88:3c:13:91:5a:81:89:29:28:bf:
         c3:57:bc:36:84:71:6b:47:8f:d1:20:38:26:31:71:6f:54:b8:
         94:b2:43:95:44:c2:8b:53:fc:dd:a9:b9:1b:97:17:5a:b4:21:
         14:c7:0d:35:25:f6:ef:ec:a8:a6:b3:eb:25:cc:d6:c2:50:1e:
         79:ff:30:f1:d7:c3:d6:a0:e1:4b:39:c2:ce:33:70:ca:e4:0f:
         a6:fa:7d:93:f0:b6:be:76:da:a4:2e:17:78:42:0b:26:00:f6:
         51:a5:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:46 2024 by rpki-client on console-ams.rpki-client.org