Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d/0db1c260-c74f-36cd-8f24-a6334acffd35.roa
File:                     0db1c260-c74f-36cd-8f24-a6334acffd35.roa (raw, json)
Hash identifier:          q9b0dhwvbqo3rioGilyBapXf6JCJ/exKQd9H/TVFBXg=
Subject key identifier:   63:D7:A2:28:50:F5:71:CE:9C:7D:81:AB:55:3A:73:BF:1F:6A:95:62
Certificate issuer:       /CN=106a61f6-43e7-46ce-b2f7-cfbcfe54a46d
Certificate serial:       010D0C9F43285847AB6C11F2859288343C612FD0
Authority key identifier: E9:7B:93:BF:06:7F:FE:17:26:A4:09:AD:3E:83:A0:2C:D4:55:31:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d/0db1c260-c74f-36cd-8f24-a6334acffd35.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     398052
IP address blocks:        64.112.20.0/22 maxlen: 24
                          142.202.100.0/22 maxlen: 24
                          2605:9740::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:11:f2:85:92:88:34:3c:61:2f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106a61f6-43e7-46ce-b2f7-cfbcfe54a46d
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=21d938f6-3d7e-454b-886e-f718826ef896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:7a:8d:ab:f6:ea:6c:39:92:9a:62:d4:21:
                    2a:76:23:05:a9:2b:5d:cd:6f:6f:4d:d6:09:f6:fe:
                    e5:ce:da:e0:ac:2a:ff:01:d5:8b:5e:b8:66:95:45:
                    11:ea:63:c4:f4:7b:6e:e8:46:c7:69:3f:93:3a:09:
                    b1:4d:34:97:d5:4a:d1:ee:03:0c:96:af:9f:9e:ac:
                    b0:63:be:ce:45:94:f1:58:00:06:cf:cd:bf:6a:80:
                    c1:ba:b6:7c:ab:99:81:dc:db:97:27:1a:14:40:90:
                    c9:42:21:b6:27:00:0a:2a:38:2d:9d:7d:a6:c6:dd:
                    5b:b4:0f:27:4d:01:90:c9:b0:7b:05:b0:4a:a1:ed:
                    ad:81:73:21:5a:e4:9d:9b:f8:49:60:1e:8f:fd:7a:
                    1b:6a:bf:56:7f:7d:3d:54:89:40:06:05:37:7d:52:
                    e7:d0:51:3c:4b:e3:47:e5:c6:ef:ee:21:88:07:ae:
                    fc:47:13:fc:ba:ad:71:e6:f3:cc:6c:84:e4:8b:40:
                    73:fe:1e:84:06:dc:82:fc:26:5c:55:64:97:39:b0:
                    55:63:03:06:50:38:01:93:e6:49:7b:5f:01:ea:da:
                    32:f2:64:32:98:dd:d8:60:98:1a:4e:64:db:c3:17:
                    68:b7:b1:17:eb:59:b4:8d:ea:33:da:2c:50:0c:ed:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:A2:28:50:F5:71:CE:9C:7D:81:AB:55:3A:73:BF:1F:6A:95:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d/0db1c260-c74f-36cd-8f24-a6334acffd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:7B:93:BF:06:7F:FE:17:26:A4:09:AD:3E:83:A0:2C:D4:55:31:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/106a61f6-43e7-46ce-b2f7-cfbcfe54a46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.20.0/22
                  142.202.100.0/22
                IPv6:
                  2605:9740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:75:46:7b:56:ba:57:e9:f6:aa:08:ed:fb:13:96:95:d9:
         17:60:3c:97:b4:b0:a6:dd:73:7b:49:58:42:55:6f:0d:22:36:
         17:8e:2a:15:19:a8:da:e7:66:e5:26:48:d1:01:4d:14:03:e0:
         36:57:bf:46:26:70:10:91:d3:02:32:c6:bb:c4:bb:d1:14:47:
         c0:40:65:39:8c:2b:68:e0:5a:e8:05:fa:eb:a5:35:e8:a6:07:
         07:1c:14:f6:54:fa:21:b2:24:3b:72:5e:35:09:70:bc:3e:d7:
         57:48:7f:02:01:52:fc:24:e5:0b:c3:c1:57:6c:1d:97:16:35:
         38:27:39:df:fe:b2:de:38:b4:38:88:92:6a:2e:43:0e:04:d9:
         96:26:fb:00:66:4f:3f:c7:18:e7:52:f5:03:94:82:c9:f8:7b:
         a7:31:78:e1:61:1b:43:b3:c5:05:ab:6d:ce:3c:22:3a:e1:f2:
         9d:d5:69:ac:d7:f6:08:f0:e4:5f:cb:69:d8:ef:fd:a2:68:1b:
         00:2b:81:7f:2f:31:b2:af:fc:d5:5f:96:ce:15:55:8f:ad:f2:
         97:5c:23:86:09:22:10:8a:c5:6d:ad:3e:eb:ee:c0:bf:f2:04:
         30:32:af:fe:28:a5:00:44:e9:06:15:f6:ec:f5:8d:65:00:d8:
         12:9c:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:47 2024 by rpki-client on console-fra.rpki-client.org