Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
File:                     c31be989-e6da-32a1-bc88-9cfec65bed62.roa (raw, json)
Hash identifier:          IbAGwNCPeASlfyqwgLO0RASX1L/fGhE9EyENw5U/TmY=
Subject key identifier:   68:90:95:4E:65:A0:7D:87:CB:5C:40:F9:7C:DD:BF:8B:31:E2:11:D9
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584769D0D5BBEBD634AEE758AF80
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     397423
IP address blocks:        104.255.173.0/24 maxlen: 24
                          155.254.16.0/23 maxlen: 24
                          155.254.28.0/23 maxlen: 24
                          2605:6c80:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d5:bb:eb:d6:34:ae:e7:58:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=b30dca19-905e-4a46-920a-4aa6601b6c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:79:db:01:6c:2b:1a:73:af:f1:11:6b:66:
                    bc:87:21:97:d2:6a:99:28:6b:21:9d:0a:75:c7:29:
                    83:08:dc:4b:fd:e9:75:cb:d3:18:97:0e:ea:0d:cf:
                    90:ab:82:0d:52:ae:62:ab:7d:45:3d:12:f7:42:4d:
                    d6:39:cf:32:3c:22:6b:08:09:2e:29:8a:fa:9b:d3:
                    e2:c9:fb:19:18:97:a2:10:1a:bb:4a:73:98:2a:6e:
                    bd:2d:40:c8:d9:95:90:d4:0f:d3:92:80:dc:e8:82:
                    fd:fd:ea:63:a4:af:ec:2f:50:6d:a6:34:5d:87:94:
                    e4:67:0a:68:5d:a0:11:cf:e4:ba:bf:d0:fb:b5:d0:
                    8a:41:7d:10:ab:a1:2c:17:44:5e:ed:e8:68:28:a6:
                    08:e6:04:1f:72:5b:30:45:3e:90:6f:ad:e7:cc:9e:
                    52:0e:aa:c5:b8:26:21:51:33:15:d7:58:78:20:29:
                    35:72:d3:21:4a:48:3c:72:cf:4b:8c:5f:a0:40:27:
                    64:e7:bb:02:ef:60:e9:e7:17:d4:07:0b:74:37:b9:
                    de:5a:24:e2:7e:e5:30:56:3e:96:8f:ba:94:ed:07:
                    d5:b3:cd:00:42:f2:c0:85:0c:cb:49:31:36:79:60:
                    22:f1:3e:6b:70:a7:18:e3:dd:7d:ed:b3:ea:25:67:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:90:95:4E:65:A0:7D:87:CB:5C:40:F9:7C:DD:BF:8B:31:E2:11:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.173.0/24
                  155.254.16.0/23
                  155.254.28.0/23
                IPv6:
                  2605:6c80:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:1e:db:2b:58:41:58:b9:ba:ec:8b:5e:54:82:b7:37:40:
         46:16:7c:1d:e8:15:81:3b:14:ec:d1:d4:2e:66:c4:e0:c3:2d:
         3e:69:33:a3:8e:64:5e:de:51:a9:37:20:4e:87:9d:97:19:4a:
         3a:bd:1e:13:f6:d3:23:e8:46:8f:00:26:d6:5a:f8:69:45:08:
         ff:6f:e2:8d:43:ae:d7:5e:a2:8d:65:d8:15:45:12:5b:37:cf:
         5a:52:da:3c:5c:58:7a:79:ac:42:9b:6f:7b:90:a2:24:4d:8f:
         83:11:21:b6:70:32:2f:66:48:c2:7f:d0:76:82:34:7d:f8:04:
         0f:27:da:d7:3d:c0:ec:1e:9f:7f:e1:00:b0:a7:3d:1e:e3:88:
         7b:85:e3:1c:78:66:6f:6a:58:8f:bf:a0:60:db:3a:6d:9b:41:
         20:28:92:83:ad:7a:d0:f9:0c:be:69:e4:a5:13:84:a8:fb:8e:
         95:19:20:02:e4:f7:ca:72:4e:b2:e4:61:ec:a3:40:04:0f:7a:
         8c:fb:dc:64:b9:46:15:89:e0:61:1f:25:47:98:82:c8:40:6d:
         3a:0f:21:b8:90:db:77:27:67:97:8c:84:eb:df:07:35:b5:43:
         1a:a2:e3:d6:07:7b:f2:51:28:40:86:63:5b:2b:2c:f3:b5:60:
         d8:85:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org