Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa
File:                     af2b9587-c7e7-3560-a142-285f95c0baea.roa (raw, json)
Hash identifier:          Xm2Pb/2GR+xWLVrDkdkKMBftHhNQrLzasrmbSb0EjEY=
Subject key identifier:   DC:A8:D1:EB:60:60:5B:D1:B8:8B:5B:A4:6D:95:12:99:92:F6:BA:16
Certificate issuer:       /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Certificate serial:       010D0C9F432858472C65D63C7D57A9FEAD00BC80
Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     6082
IP address blocks:        66.182.128.0/22 maxlen: 24
                          66.182.149.0/24 maxlen: 24
                          66.182.156.0/22 maxlen: 24
                          66.182.170.0/23 maxlen: 24
                          66.182.172.0/23 maxlen: 24
                          66.182.174.0/23 maxlen: 24
                          199.71.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d6:3c:7d:57:a9:fe:ad:00:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=4e4ba5b7-acf8-4ce4-921e-edeb82ed583c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:ab:5e:5f:7d:66:9e:13:eb:84:11:c0:ee:
                    b9:3f:61:89:ac:ef:0c:f6:fe:4e:7f:29:c4:06:37:
                    c9:6f:af:c3:c2:29:b3:80:c2:6f:3f:3c:1b:92:f6:
                    ce:67:e2:46:85:a5:e0:43:bf:b1:29:6a:6f:ff:79:
                    21:e2:45:73:d3:af:6f:04:fb:9d:af:4f:ed:b4:ac:
                    5d:68:16:88:c1:53:51:61:ca:fa:fc:70:57:b7:c4:
                    c1:c8:18:2f:57:a6:cd:4f:bd:59:9c:df:7d:58:e4:
                    fb:78:7b:e8:ca:98:38:45:43:de:9a:93:ee:d8:c6:
                    2b:c4:cb:90:de:47:96:4b:c8:5e:e2:ab:7b:91:5d:
                    68:68:f0:48:b6:ec:f0:1e:9b:60:0a:ef:54:db:d1:
                    9a:8d:7b:f4:e8:cb:c5:d8:1d:34:28:de:3a:6f:5a:
                    e6:f5:f2:9e:39:69:d5:57:af:af:30:88:08:b8:4a:
                    fd:ca:1d:26:ba:47:8d:88:df:09:45:51:95:27:dd:
                    e8:f3:03:c4:c2:e0:6a:78:7b:1b:87:9f:d5:ce:ec:
                    23:de:36:96:04:3a:a7:12:03:3b:23:01:ce:5b:45:
                    0e:1e:7b:0f:ef:bd:1b:cb:74:7c:cb:dc:bc:33:16:
                    bc:06:8f:61:da:93:4c:3a:40:c4:90:41:27:d7:d9:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A8:D1:EB:60:60:5B:D1:B8:8B:5B:A4:6D:95:12:99:92:F6:BA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/af2b9587-c7e7-3560-a142-285f95c0baea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl

            X509v3 Authority Key Identifier:
                keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.182.128.0/22
                  66.182.149.0/24
                  66.182.156.0/22
                  66.182.170.0-66.182.175.255
                  199.71.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:a7:b4:e4:5b:90:8c:bc:81:c9:c9:e7:20:cf:66:43:e8:
         c8:a3:f0:63:2b:9c:06:9f:96:b2:df:8a:39:0e:74:1b:53:40:
         30:14:8e:79:fc:de:2b:05:40:d6:d0:f0:1e:47:d7:a1:0d:b4:
         aa:94:77:93:a1:5c:ff:36:e0:97:25:83:68:fa:39:d7:15:b6:
         d3:c4:c7:4b:49:53:91:d6:ae:24:8d:cb:90:9e:58:7a:94:85:
         a0:e3:ed:4e:7d:69:8e:32:8c:43:7d:6f:0e:ee:e1:fd:af:3f:
         a3:14:d7:86:fb:41:47:4c:ca:57:93:15:75:16:dd:2c:c2:3f:
         d8:bf:1f:94:0e:34:52:a3:09:89:f1:e8:12:d3:4e:c9:52:af:
         80:67:d7:cb:08:b3:d6:9f:d5:7e:55:77:8b:ce:e5:84:c3:f1:
         28:e9:4d:9d:2a:3e:6e:4a:73:2f:10:43:ac:3d:f6:9b:37:de:
         d8:b8:63:a3:8d:6b:ee:21:ed:a9:c1:a0:eb:a0:69:61:11:a4:
         6a:f6:a2:76:0d:8b:09:fa:12:31:bc:25:ae:4f:ef:a0:43:bc:
         ff:b8:ce:40:43:ea:19:80:e7:17:2d:d0:67:4b:7e:36:15:d2:
         61:4e:7e:7d:b3:03:cd:7f:71:f8:8a:ca:7a:7e:94:d6:7e:de:
         34:15:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:06 2024 by rpki-client on console-fra.rpki-client.org