Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
File:                     5d7525c2-10d9-322d-888c-c13bde0efc94.roa (raw, json)
Hash identifier:          txc+ZMC16MzwpiGS/PMrKd5/5sAXafoCp8JaVT6eUP0=
Subject key identifier:   BC:6D:54:B5:E6:5B:01:D3:E6:FB:F4:E3:D7:5A:95:24:A6:56:78:40
Certificate issuer:       /CN=4a6ba250-5086-4d58-8336-494a05894bf9
Certificate serial:       010D0C9F432858477EC10C1E8ECE6148F3265A80
Authority key identifier: CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     62809
IP address blocks:        23.128.144.0/24 maxlen: 24
                          23.128.145.0/24 maxlen: 24
                          23.128.146.0/24 maxlen: 24
                          23.128.147.0/24 maxlen: 24
                          104.152.136.0/22 maxlen: 24
                          104.244.20.0/22 maxlen: 24
                          130.51.4.0/22 maxlen: 24
                          162.222.28.0/22 maxlen: 24
                          162.251.124.0/22 maxlen: 24
                          199.184.14.0/23 maxlen: 24
                          199.202.232.0/23 maxlen: 24
                          2605:2a40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0c:1e:8e:ce:61:48:f3:26:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6ba250-5086-4d58-8336-494a05894bf9
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=cf29861d-7657-4d2d-ae67-7bd76712e714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:bf:aa:f3:6e:1b:d0:ee:84:07:c7:42:9b:
                    2e:dc:b5:72:e2:bf:5d:5f:69:9c:cb:48:74:7c:09:
                    ce:95:e0:0f:e4:0e:e2:e5:3c:0d:43:13:10:bf:53:
                    2d:b7:c3:41:61:6d:80:12:df:c1:97:7a:e5:39:8b:
                    7d:58:43:f2:d4:14:0a:fd:16:65:13:41:ff:2c:3a:
                    3c:fe:bf:ea:ae:35:fe:90:b8:22:31:83:9f:64:7e:
                    8a:b1:1a:5d:1b:2f:b7:7a:5e:dd:59:c2:7a:a6:06:
                    52:75:20:28:8b:e8:e5:40:dd:69:78:32:c6:d3:f0:
                    f0:e8:2b:d5:0c:8d:3f:63:88:3d:d0:10:ce:97:b9:
                    0e:8f:10:54:c3:3e:41:c2:ab:25:fb:06:32:f2:a6:
                    32:d4:6c:4c:47:6b:21:a5:83:0f:cb:77:eb:82:6b:
                    ea:7e:8c:ca:4f:9d:67:45:b7:7f:39:c5:d9:29:3b:
                    16:4c:85:52:ce:78:7d:9f:ad:bc:89:54:08:af:ff:
                    57:26:8f:ac:16:ac:d3:d8:e0:84:df:96:a2:06:b6:
                    da:59:02:2c:4e:31:d7:66:bd:04:40:07:89:cc:b4:
                    97:23:f2:07:45:c3:15:a6:2e:5a:ac:61:ba:b7:11:
                    d1:ee:c6:45:6f:d0:65:de:20:05:42:e4:12:7b:8b:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6D:54:B5:E6:5B:01:D3:E6:FB:F4:E3:D7:5A:95:24:A6:56:78:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.144.0/22
                  104.152.136.0/22
                  104.244.20.0/22
                  130.51.4.0/22
                  162.222.28.0/22
                  162.251.124.0/22
                  199.184.14.0/23
                  199.202.232.0/23
                IPv6:
                  2605:2a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:16:4a:75:8a:20:ac:c4:2f:4c:5e:13:d5:21:f3:f0:ee:fc:
         9a:f9:89:7e:86:30:5e:33:5e:40:84:fb:2a:50:b7:80:ae:b2:
         b0:53:09:88:d4:a2:9d:a7:c0:15:40:f3:f2:5f:64:fa:71:39:
         24:8f:51:c3:49:f8:99:3d:f9:20:a5:4b:d2:aa:d8:62:fb:71:
         b3:01:0b:82:2b:04:c5:01:31:df:d4:96:b3:86:11:a6:f1:e1:
         4d:91:92:1c:67:36:33:41:dc:67:65:df:b0:e6:14:1b:c9:2c:
         d2:6a:5a:77:7b:61:68:98:61:0f:ed:d5:b8:b8:67:c8:9f:24:
         cc:d9:0f:b6:b8:d1:25:cd:6c:1a:e9:8a:f6:39:2a:ea:4c:cf:
         51:93:22:2e:e9:b6:0b:44:07:1a:67:75:c0:b4:9b:fe:86:88:
         2b:85:f9:c7:ba:d4:a5:80:4d:c4:f6:66:83:0e:03:93:88:56:
         16:ea:8d:c9:27:b9:3e:0a:4a:42:38:f4:78:5f:8c:e8:a0:f7:
         85:d9:90:bf:2c:bb:f0:c7:e5:63:4b:64:d9:55:8b:cc:e3:29:
         95:9c:40:96:49:69:d9:4c:d8:f9:e5:b5:7c:a0:cf:cc:7b:be:
         b3:2a:30:c0:2d:c3:e5:c0:76:bc:6f:0d:8e:a3:2b:dd:0c:34:
         85:ea:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:11 2024 by rpki-client on console-fra.rpki-client.org